Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/musJRso35RVf3K_BCJpq8SFrGqQ.roa
File: musJRso35RVf3K_BCJpq8SFrGqQ.roa (raw, json)
Hash identifier: S4nvKxaeQNo3RpxE6PfQDk2FTwd6iQGe/T9I4a0mHHo=
Subject key identifier: 9A:EB:09:46:CA:37:E5:15:5F:DC:AF:C1:08:9A:6A:F1:21:6B:1A:A4
Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial: 19E2A509
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/musJRso35RVf3K_BCJpq8SFrGqQ.roa
Signing time: Sat 01 Jan 2022 02:57:58 +0000
ROA not before: Sat 01 Jan 2022 02:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207527
IP address blocks: 217.150.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434283785 (0x19e2a509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Validity
Not Before: Jan 1 02:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aeb0946ca37e5155fdcafc1089a6af1216b1aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:a8:2a:16:aa:d1:38:a6:ba:54:dd:bc:30:
b4:de:cf:64:81:fd:1e:eb:11:25:89:40:2d:8b:86:
c3:68:d4:5f:e1:5f:9e:2b:1e:98:26:be:93:5a:86:
1a:2c:ed:ff:0b:a8:ec:6f:02:6d:b6:a4:c2:10:e6:
54:a1:59:b6:a7:de:7d:83:66:db:c8:d5:8c:d7:72:
e7:28:e8:42:9d:8e:ff:fb:2a:2e:96:5c:f4:66:2d:
8c:f8:77:37:c1:49:cf:74:b3:a9:33:e4:f8:d6:4b:
95:1e:99:a9:bd:68:a7:ec:2c:b0:49:72:da:4d:fb:
d0:6a:ad:48:9c:17:6e:0e:17:d2:14:69:2e:e0:b6:
a9:ce:e3:28:72:bd:7d:3a:fb:1b:eb:fb:9e:88:47:
97:ff:c3:53:3d:02:2c:2c:8b:5c:15:76:5c:e2:7f:
0f:0e:2c:85:54:ca:44:11:8f:d2:c4:37:da:62:1b:
4d:01:f1:16:26:58:3a:d6:49:a4:9e:17:9b:05:7e:
4c:6c:d8:61:87:12:a5:13:45:73:f0:88:54:d8:9d:
f2:7a:57:2c:bd:40:bf:b8:0e:1d:ab:d6:a2:57:bc:
cd:77:ec:77:79:37:d9:93:6e:c5:f8:cb:e5:f2:a5:
fe:67:35:d4:8b:b8:6a:ff:3f:2e:1c:e1:b5:30:be:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EB:09:46:CA:37:E5:15:5F:DC:AF:C1:08:9A:6A:F1:21:6B:1A:A4
X509v3 Authority Key Identifier:
keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/musJRso35RVf3K_BCJpq8SFrGqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:63:b2:e0:91:4d:ad:12:97:76:57:a5:e6:59:51:53:73:77:
ca:37:b4:92:5b:38:d2:d7:25:6d:d6:d4:d5:da:e5:79:f1:8b:
3a:b6:10:ee:be:f7:54:90:25:63:66:b0:14:f0:08:20:7f:f2:
49:72:b9:d8:17:87:86:96:b2:b7:88:b4:4d:d9:e2:ca:19:e1:
a0:c1:fb:f3:73:92:7b:0f:22:32:61:b8:3f:58:90:05:38:fe:
09:c6:1e:6b:75:4c:a9:61:99:c6:de:40:f4:4c:6f:50:9b:2d:
23:18:71:f0:4f:7c:25:33:fd:df:e9:6e:fd:2e:ec:e1:84:29:
bb:64:f5:65:76:3d:d1:cd:e4:94:cb:b4:cb:6e:f4:96:23:21:
fc:92:a3:cc:b4:df:4f:55:dd:01:a1:d4:60:63:23:a6:c6:4b:
c7:56:b5:1f:1e:e0:cd:28:04:8c:bf:88:19:b8:dc:5e:a7:59:
59:e8:48:53:15:9e:08:17:e0:8a:4b:b5:1c:ff:62:2d:16:36:
7a:48:97:71:f9:55:b4:da:6a:03:d4:c1:4a:cf:55:b7:43:f1:
d4:69:14:ec:c3:b1:72:33:fe:86:6c:30:8d:e0:57:73:50:b2:
38:1c:cc:b9:e3:ef:0e:a6:9e:f9:03:b2:32:eb:cf:39:bd:6e:
71:26:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-ams.rpki-client.org