Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/0tnFRJY9qAYdN7hyUM6z0PNDeBU.roa
File: 0tnFRJY9qAYdN7hyUM6z0PNDeBU.roa (raw, json)
Hash identifier: EaKbT5GD72VgULp2dCzvS+IPex2FCtfystutXq2ERIg=
Subject key identifier: D2:D9:C5:44:96:3D:A8:06:1D:37:B8:72:50:CE:B3:D0:F3:43:78:15
Certificate issuer: /CN=da01323efafee332064e278b97cb8d1f9d8fef79
Certificate serial: 04CC
Authority key identifier: DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/0tnFRJY9qAYdN7hyUM6z0PNDeBU.roa
Signing time: Thu 03 Feb 2022 16:57:56 +0000
ROA not before: Thu 03 Feb 2022 16:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 188.244.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da01323efafee332064e278b97cb8d1f9d8fef79
Validity
Not Before: Feb 3 16:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2d9c544963da8061d37b87250ceb3d0f3437815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:f3:b9:ec:47:0c:f1:d5:c7:fd:63:de:bf:
00:5c:9b:e3:dc:63:9e:0b:73:34:51:c4:a4:11:2f:
1b:a4:40:d0:69:c3:44:a9:a2:13:29:a9:35:04:44:
20:0b:8c:b9:dd:36:11:56:4f:3d:6b:e5:8a:a5:63:
12:e5:18:c6:f8:a7:95:4d:4c:34:b4:39:2d:e6:31:
98:d6:49:18:00:83:63:f7:08:e5:59:75:ce:0d:4f:
51:86:d7:32:00:b5:3c:53:99:59:8f:2e:40:21:28:
ef:af:05:8e:b6:52:75:56:97:dd:71:61:a3:dc:29:
0a:a7:58:87:5f:09:fe:c2:89:bd:dd:99:24:7b:a3:
71:5d:09:49:b3:7b:aa:b3:95:84:a3:15:b9:87:24:
cf:4b:c6:a8:95:b8:e1:f1:ac:ac:ee:c6:cc:4e:28:
d9:3b:85:03:98:8e:f5:a5:54:7b:9c:f3:8e:df:6f:
3b:37:10:45:ce:c7:5f:d3:a5:b5:ce:65:26:a7:c0:
61:10:04:b9:12:bd:5f:23:14:cb:c6:f1:66:c1:bf:
80:91:17:4e:ff:36:58:9d:6d:7d:2a:27:49:d2:7d:
02:f0:ef:e1:9c:0c:9d:8a:a5:7f:bd:9f:11:f8:37:
4c:7a:52:16:62:82:cd:74:a5:9f:2b:06:a3:11:65:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:C5:44:96:3D:A8:06:1D:37:B8:72:50:CE:B3:D0:F3:43:78:15
X509v3 Authority Key Identifier:
keyid:DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/0tnFRJY9qAYdN7hyUM6z0PNDeBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:40:f8:48:9a:c7:9c:40:6d:87:0d:be:7d:e9:80:d7:4b:44:
cd:f7:e5:8e:ce:d5:39:37:f7:94:ae:aa:63:6b:b8:2b:07:46:
df:9a:6a:9a:c8:a5:2b:88:17:54:fc:0b:f6:22:c2:e6:62:61:
b8:75:72:71:81:d8:aa:76:b6:39:b8:e2:63:89:6c:61:0e:c7:
5d:27:f2:7d:b9:93:25:93:56:1b:29:bc:9f:26:18:df:74:0d:
17:9a:06:5a:25:3a:f5:85:22:bc:00:70:ff:08:ec:fa:58:38:
6e:f7:44:56:80:25:17:80:15:20:76:29:58:91:3c:fc:b6:d2:
84:11:c1:f6:0f:63:12:70:78:dd:51:5e:55:c8:f1:c4:a8:64:
a9:4e:0d:75:ca:c9:b5:b7:52:e2:68:cc:3a:81:06:cd:a4:2c:
00:6e:d4:55:fb:3b:5e:5b:f0:af:e0:7e:2c:b6:0f:34:72:02:
ae:da:90:31:b8:43:ac:72:fc:9c:c6:01:d5:bf:38:ea:20:f0:
0a:15:4a:72:b4:fb:de:7c:4d:db:ef:af:83:07:a4:c6:4d:ad:
2d:69:f3:52:56:6a:4b:3a:74:ae:63:0b:64:08:9f:dc:25:2c:
e9:c4:5c:8a:c3:aa:58:21:1d:0d:bb:f0:7a:01:e0:a7:ae:ab:
af:1b:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:48 2023 by rpki-client on console-ams.rpki-client.org