Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/sXt9jk0rPOfqWLwWhwHPPFXnbOc.roa
File: sXt9jk0rPOfqWLwWhwHPPFXnbOc.roa (raw, json)
Hash identifier: 7kO2swZmMrM/I4KjT59v0ZY7YHtDkQC/cdZSPJaBd00=
Subject key identifier: B1:7B:7D:8E:4D:2B:3C:E7:EA:58:BC:16:87:01:CF:3C:55:E7:6C:E7
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 01853E12797BFFF026987704BB080EBC03D9
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/sXt9jk0rPOfqWLwWhwHPPFXnbOc.roa
Signing time: Fri 23 Dec 2022 08:21:16 +0000
ROA not before: Fri 23 Dec 2022 08:21:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 202.22.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:12:79:7b:ff:f0:26:98:77:04:bb:08:0e:bc:03:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Dec 23 08:21:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b17b7d8e4d2b3ce7ea58bc168701cf3c55e76ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:25:d4:c9:6b:67:26:00:2b:09:2a:94:62:
84:92:ba:aa:d8:0c:f2:04:4f:9b:4e:a4:fd:2d:a3:
4e:9a:5c:2c:dd:24:a9:07:43:b6:b2:e9:92:32:0b:
ae:ce:48:23:a5:c6:f5:48:9c:a1:53:56:13:02:27:
db:72:f3:23:de:70:78:ca:6f:04:f5:48:35:a6:8f:
ef:19:ac:3a:37:a1:1f:d4:06:43:4a:37:a0:68:86:
18:d3:44:62:58:cc:36:ca:9b:7e:ce:f2:d1:cb:1e:
c1:fc:e3:20:51:b7:b7:5a:96:79:57:66:92:9d:df:
b9:1e:86:0e:9f:d7:aa:4b:e9:f1:58:0d:7d:3f:aa:
16:a6:10:35:c2:08:8e:41:d6:84:20:ca:a6:64:7a:
e0:09:78:e5:95:09:36:54:6c:9f:11:0f:04:72:d2:
d6:ba:3d:94:61:61:84:e3:2a:79:20:21:09:7b:20:
31:c6:6a:4e:32:d1:ca:42:ed:d3:1d:38:4b:9c:b3:
0d:5a:5d:2f:17:4f:d6:b9:69:e1:60:2d:65:38:82:
91:76:09:75:31:e9:80:5f:21:81:47:6c:d7:14:92:
04:8a:42:75:3a:5f:b9:53:01:85:3f:35:39:d2:c6:
8e:eb:8b:9d:d5:de:0a:cb:b7:8e:3c:1a:d0:61:9a:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:7D:8E:4D:2B:3C:E7:EA:58:BC:16:87:01:CF:3C:55:E7:6C:E7
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/sXt9jk0rPOfqWLwWhwHPPFXnbOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.22.173.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d2:b7:3e:a8:79:e3:17:b9:df:6c:a2:d7:62:87:2b:93:48:
ed:e6:55:17:eb:da:ad:1b:ff:66:1a:0b:9d:d9:92:1e:18:86:
90:cb:3e:10:81:25:a0:31:cc:38:b3:a1:24:a9:2b:2b:2d:0d:
6d:02:32:50:41:32:1e:ea:51:ac:2f:2d:a3:2f:36:5f:15:f4:
a4:d9:27:0e:5e:70:21:6c:f4:de:72:8d:4d:88:c6:c7:37:4e:
98:b0:67:71:9f:39:29:28:f9:3e:c0:04:6c:fe:1a:8b:5c:9b:
ae:ea:dd:97:29:61:f5:c5:f5:f0:64:ec:ed:a1:b2:48:29:40:
12:d3:98:b7:95:ee:c8:bf:7f:d2:c0:cb:5d:3e:e2:3b:a8:22:
cb:49:10:1d:42:0c:59:f2:50:3f:ac:cd:67:44:84:b0:8d:a6:
ba:ac:66:0c:df:72:7c:40:30:da:57:b4:bf:f8:7f:69:20:6c:
39:ca:51:3a:41:2d:55:e5:93:b0:ce:52:a8:d0:ca:18:b2:e8:
2a:d2:a1:9f:ec:df:dc:1e:93:48:c2:d2:10:76:57:b0:dc:b1:
2d:13:cc:aa:a1:53:9f:aa:ac:ee:38:1a:dd:15:34:79:38:54:
ed:10:20:f9:59:30:8c:98:c5:5e:c9:2f:0f:95:c6:53:14:63:
8e:d8:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:18 2023 by rpki-client on console-fra.rpki-client.org