Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/iovbFOdHLtr-sCNHFYBCxq9R_LY.roa
File: iovbFOdHLtr-sCNHFYBCxq9R_LY.roa (raw, json)
Hash identifier: JYy+xzeHSrG364oTr05IKG0fmkvP2zNicEmze8Q7FX8=
Subject key identifier: 8A:8B:DB:14:E7:47:2E:DA:FE:B0:23:47:15:80:42:C6:AF:51:FC:B6
Certificate issuer: /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial: 058D9E0F
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/iovbFOdHLtr-sCNHFYBCxq9R_LY.roa
Signing time: Sat 01 Jan 2022 15:00:30 +0000
ROA not before: Sat 01 Jan 2022 15:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34865
IP address blocks: 157.119.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93167119 (0x58d9e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
Validity
Not Before: Jan 1 15:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a8bdb14e7472edafeb02347158042c6af51fcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:48:aa:b2:70:eb:26:0a:2a:3a:14:9d:46:
6a:b9:68:cd:49:c0:4d:0a:d8:1e:79:ad:5c:b4:3b:
b6:41:44:33:a4:a6:1e:cf:aa:15:3f:95:8e:2c:41:
66:7f:82:86:8e:cd:f2:78:c4:d7:56:43:27:14:8a:
0a:14:ad:7f:c3:7d:47:1c:f6:2e:d0:14:0e:4d:3b:
6a:e0:7f:88:dc:1d:2f:16:68:db:d9:76:d6:70:79:
8e:4b:5b:63:09:5e:a5:71:9c:2d:d4:24:aa:5b:49:
1f:d3:44:ad:ce:59:7c:0c:9c:a4:4c:a2:94:71:69:
f0:21:51:a2:1e:24:a3:52:88:2d:c9:53:8e:8c:ae:
2c:3a:a0:28:7a:b8:07:5c:11:3f:9c:02:ca:4c:4d:
ca:9b:f3:cd:ec:a2:12:b5:15:c8:71:7c:49:9d:52:
b6:95:59:db:5c:ff:7b:9c:75:c7:89:62:f6:a1:9f:
3d:2c:70:2d:f8:61:48:a3:20:99:ca:0b:42:f3:73:
7f:e1:e9:1f:34:2a:b9:8b:b1:a6:b8:56:40:98:85:
f3:2f:ce:be:1f:d0:0e:a4:90:6d:fb:05:a1:a5:b5:
a9:a7:56:80:67:1c:3e:d2:28:fd:66:5b:b9:db:b4:
ea:74:b4:9a:5e:ca:8f:6d:cc:b6:b1:39:3b:f3:87:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8B:DB:14:E7:47:2E:DA:FE:B0:23:47:15:80:42:C6:AF:51:FC:B6
X509v3 Authority Key Identifier:
keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/iovbFOdHLtr-sCNHFYBCxq9R_LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.119.189.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f3:27:4e:e4:60:96:e4:ac:f2:28:e1:bc:16:70:48:fb:49:
55:c2:5f:6d:7d:46:a0:ae:44:ef:8a:5a:61:62:07:eb:0c:38:
e6:53:50:ab:09:5d:72:1e:8b:e8:2d:3e:7c:42:db:17:f5:0b:
d8:26:93:1a:75:1f:27:45:78:77:c3:ca:c5:4e:2c:e4:cd:f1:
a2:c7:c1:b7:9a:43:91:82:1b:20:6c:7e:f9:37:0d:a8:2b:5b:
0c:b0:00:b9:4e:73:14:3f:5b:af:34:42:f0:4b:ff:24:45:15:
9d:5a:04:72:26:87:41:1e:f9:de:62:d3:98:00:d0:7f:00:3e:
70:73:20:0e:55:4f:7b:53:41:83:c7:00:8f:41:01:84:34:ed:
92:c0:8f:67:9b:12:e8:dc:2e:c2:ea:eb:d7:7c:7f:fa:dd:08:
99:19:84:40:fe:98:08:af:8d:02:33:ac:49:86:0a:17:4a:8a:
00:3e:b0:ad:dc:c5:21:d5:8c:1b:ad:92:8b:a7:7a:29:57:32:
e3:8b:65:e9:33:ac:f7:ca:f9:74:9a:a1:c8:96:68:95:3b:71:
59:82:67:57:a7:ac:d3:84:29:c7:c1:02:5a:14:87:37:e7:c6:
b9:27:37:bf:d8:49:7f:70:17:50:54:ff:c5:7d:16:4c:99:ae:
8c:12:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:27 2023 by rpki-client on console-fra.rpki-client.org