Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/O80vi25nWwotMwGIQX-9nBtX_DY.roa
File: O80vi25nWwotMwGIQX-9nBtX_DY.roa (raw, json)
Hash identifier: 54pJXLen4HyFiUSbdJtYGbXSIMd4sUU1z6I02W+NcHw=
Subject key identifier: 3B:CD:2F:8B:6E:67:5B:0A:2D:33:01:88:41:7F:BD:9C:1B:57:FC:36
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14A77D8E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/O80vi25nWwotMwGIQX-9nBtX_DY.roa
Signing time: Fri 22 Apr 2022 11:17:55 +0000
ROA not before: Fri 22 Apr 2022 11:17:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209290
IP address blocks: 213.173.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346520974 (0x14a77d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 22 11:17:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bcd2f8b6e675b0a2d330188417fbd9c1b57fc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:c0:a9:0f:3b:76:b4:84:44:b0:25:21:bf:
61:82:c0:77:63:3c:a3:6a:56:49:dc:fb:89:fd:b7:
4c:61:40:18:b5:b4:14:d6:87:eb:f9:10:53:9a:e6:
42:33:42:f0:94:82:10:95:66:de:1e:41:c6:6b:ed:
14:bb:1f:d8:8c:20:29:13:10:ae:a2:94:11:29:12:
49:cf:dd:2e:d2:0c:9f:4b:00:4c:41:5f:74:06:72:
77:ca:93:10:3f:21:8d:e0:11:c3:f7:b0:bf:a2:ed:
ee:68:b1:e1:2a:6e:24:05:92:a4:68:cb:69:b2:57:
4b:ef:e8:e2:a9:20:d0:68:e2:01:f7:e2:bd:9e:ca:
72:e0:eb:d5:e7:8d:33:6e:18:6c:c8:98:ab:73:23:
ce:05:da:6d:4e:b3:0a:12:68:c5:94:fc:58:03:f1:
62:27:66:7d:07:b6:1a:d5:d6:4d:06:60:a8:f4:eb:
77:2b:32:b1:d8:33:74:7a:5b:3a:97:20:dc:f4:58:
81:dd:19:26:af:57:a8:cc:84:93:93:f6:20:3e:dc:
38:b7:58:03:7d:26:e5:d7:2b:b7:95:9b:d5:cb:a1:
1d:7b:fb:82:71:d7:89:ce:3f:f6:32:2c:8a:84:c6:
fd:fc:b2:06:9e:4e:34:72:9b:ec:86:0a:75:aa:e5:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:2F:8B:6E:67:5B:0A:2D:33:01:88:41:7F:BD:9C:1B:57:FC:36
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/O80vi25nWwotMwGIQX-9nBtX_DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:c6:e6:e1:96:d0:63:09:9f:12:8a:d3:99:6b:43:d2:ad:8a:
a5:8d:a0:a7:03:4f:0b:bd:d4:73:94:79:a2:8f:ba:4a:c3:2a:
d8:f3:d3:c5:fb:24:b3:49:b3:b6:a1:16:a2:8b:d7:3e:34:c1:
48:b0:38:d6:c7:ec:0b:ca:67:8b:de:06:7a:b1:47:06:64:c9:
35:6b:69:dc:a4:e4:f2:b6:33:d2:8f:c3:ca:72:60:7a:ca:e1:
c3:af:12:6c:0d:73:24:ff:1b:ac:d7:58:b0:f0:36:23:cc:65:
46:01:b1:6a:1c:04:46:29:83:40:75:b2:c7:de:22:44:f2:ac:
39:a0:3a:b9:ba:0c:50:34:c8:2c:c2:5d:49:38:28:b6:a4:08:
69:be:27:89:99:0a:31:ff:37:32:ba:d7:bb:88:b0:fb:3f:58:
02:2e:26:38:a4:9e:16:e6:31:1d:a9:37:bc:c6:7e:4a:e8:7d:
24:e2:01:b5:35:9e:24:47:8f:0c:f7:ff:a8:25:76:0b:dc:ac:
77:3a:e1:55:87:7a:be:a1:13:d1:f4:70:1b:26:6d:f1:0b:89:
22:c1:66:91:70:97:8d:a5:44:11:ba:b5:0d:f8:d8:5a:e3:b2:
7c:ea:7d:5f:32:a3:58:27:b9:d8:c9:a7:fd:8c:27:95:e4:d6:
3f:02:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org