Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/23x9mjQhaQ5UpXHJASip2I1Zv1o.roa
File: 23x9mjQhaQ5UpXHJASip2I1Zv1o.roa (raw, json)
Hash identifier: tqUrw+Cax8DTxvUTdBStYBzU1SBK2EQLexbhOBWRnVk=
Subject key identifier: DB:7C:7D:9A:34:21:69:0E:54:A5:71:C9:01:28:A9:D8:8D:59:BF:5A
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38C674D1
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/23x9mjQhaQ5UpXHJASip2I1Zv1o.roa
Signing time: Sat 01 Jan 2022 07:55:08 +0000
ROA not before: Sat 01 Jan 2022 07:55:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1125
IP address blocks: 145.125.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952530129 (0x38c674d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db7c7d9a3421690e54a571c90128a9d88d59bf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:dd:57:b6:aa:b8:78:b8:14:2c:47:52:82:
9c:65:b3:a5:2b:4a:9e:cf:4f:cd:e2:d1:d2:ab:1c:
1e:a4:7f:b0:b6:b7:e7:57:9f:c0:91:4b:25:4d:e5:
cc:bf:32:d0:c3:6d:46:35:2b:51:04:b5:5b:c2:51:
61:e7:d0:f7:1d:af:5b:8f:ad:10:37:96:c1:36:11:
6e:a8:53:9c:c4:bc:c5:c2:08:06:8e:48:6c:22:6a:
29:2e:1c:a3:01:21:e2:d8:be:60:a4:2e:4e:54:a9:
d3:72:2d:93:e1:fd:38:b2:42:4a:8c:19:9a:ed:83:
73:a1:d3:32:87:00:f5:91:31:45:b9:cc:94:5f:39:
16:16:3a:ad:a9:d6:e0:e9:d3:2e:cd:59:b6:f1:4d:
18:3a:4c:fa:4d:3d:4b:93:40:c1:0d:21:9d:44:f8:
bc:bc:e6:c9:b5:56:5d:ac:ac:f3:5e:69:54:a8:61:
f4:a7:29:76:92:9c:a4:9f:91:be:4a:b6:f7:9d:60:
f6:9f:54:15:05:84:bb:3c:a4:bf:4f:7c:3a:50:fc:
b0:c0:97:7e:e8:c5:02:fa:f0:c1:55:e1:20:e7:06:
86:19:f5:2c:55:ba:10:33:e9:a2:be:57:14:82:39:
7e:28:53:a8:c2:95:4e:3e:b2:e0:7d:05:88:59:d3:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:7D:9A:34:21:69:0E:54:A5:71:C9:01:28:A9:D8:8D:59:BF:5A
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/23x9mjQhaQ5UpXHJASip2I1Zv1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:c2:f2:05:93:a7:e9:a4:65:08:ad:7f:89:4f:01:92:7b:1c:
ec:6d:76:ec:1f:9f:67:2e:52:09:9a:7d:75:23:e3:c8:ec:f9:
25:60:55:f3:62:39:00:19:d2:24:84:79:02:62:d1:13:3d:26:
2f:09:d1:19:a9:01:ef:18:e8:ca:be:7f:eb:73:38:4a:40:d4:
21:67:e9:d0:aa:62:d0:d7:60:e4:db:ef:9f:9e:2e:88:68:1f:
f1:90:d3:6c:4f:ec:45:18:c6:c9:66:c3:5a:18:c8:4e:8f:57:
7f:81:1a:dc:dd:e3:d1:64:b0:ae:21:b9:3e:9f:ac:14:22:34:
22:24:25:f8:30:db:50:7f:b5:78:54:c6:bd:88:64:32:8e:45:
1a:74:d7:d8:38:d2:9f:f5:2e:5d:50:c5:af:a4:c9:69:20:46:
84:ef:b2:ee:26:a5:d2:f9:5d:fc:47:ed:a4:7f:fc:75:22:d0:
49:74:05:c3:dd:4f:00:9e:ad:fd:23:cb:f7:9c:68:ae:55:6d:
aa:b9:aa:e1:65:77:f8:c1:6f:d9:0f:d9:e8:82:36:2f:da:98:
5d:1c:72:e8:3b:14:73:72:e6:6d:c8:70:a2:f7:17:7a:30:88:
41:41:7d:92:01:f9:bd:3e:4b:3e:7c:4f:ea:f8:42:d4:e2:21:
a1:ae:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org