Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/R419b8t1JfpWVakb5P6HMsRR4nc.roa
File: R419b8t1JfpWVakb5P6HMsRR4nc.roa (raw, json)
Hash identifier: e6Mmxl5AuA3m//zPk4KgFy4YKyci0bSd+GnQvdiwMPI=
Subject key identifier: 47:8D:7D:6F:CB:75:25:FA:56:55:A9:1B:E4:FE:87:32:C4:51:E2:77
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: EDEAD4
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/R419b8t1JfpWVakb5P6HMsRR4nc.roa
Signing time: Sat 01 Jan 2022 05:54:46 +0000
ROA not before: Sat 01 Jan 2022 05:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62874
IP address blocks: 204.225.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15592148 (0xedead4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 05:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=478d7d6fcb7525fa5655a91be4fe8732c451e277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:df:e7:67:ce:f5:33:4b:17:32:05:78:8d:
62:66:39:e3:d4:40:4d:27:93:4e:a1:08:3f:b6:5e:
6e:0a:5a:6f:9e:02:a3:ee:eb:7c:52:1a:6c:dd:e6:
54:54:58:a0:3e:2c:23:8d:c9:6d:02:51:0f:de:48:
73:61:6d:64:a1:d4:d7:a2:dd:de:89:52:7b:a5:32:
b9:95:be:c1:46:f6:ac:17:d4:76:01:f4:f7:f3:f1:
78:4b:ca:a4:ec:cf:97:f1:6a:de:26:d8:df:67:11:
23:e6:ca:5a:28:a4:79:68:61:f6:fa:73:65:ff:94:
ed:a9:9d:6e:9b:10:9b:43:b3:d2:8f:79:96:84:14:
9e:03:3b:c7:29:ca:00:69:39:b3:be:2a:1c:f5:f2:
8a:14:88:ac:bb:fc:be:b6:3d:07:be:0c:8b:b5:d0:
68:61:29:2a:b2:54:0a:50:a5:28:96:76:db:42:48:
57:de:23:97:c4:4d:53:59:bc:51:33:3c:70:f2:43:
78:d9:31:60:3a:08:3e:ba:5e:51:07:29:bd:84:24:
06:90:4a:c3:09:2a:a6:b1:e4:ce:25:e2:17:c4:c1:
e0:84:9a:51:b1:57:9b:4a:d7:a8:12:da:ab:6a:b0:
24:02:af:a2:6a:86:c3:73:bc:b7:4b:f7:c5:72:79:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:7D:6F:CB:75:25:FA:56:55:A9:1B:E4:FE:87:32:C4:51:E2:77
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/R419b8t1JfpWVakb5P6HMsRR4nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.225.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:85:31:7f:48:b3:ea:05:81:b1:b1:00:7e:c6:52:de:66:bf:
06:3f:ae:3b:ed:15:3f:02:01:16:a1:e9:50:1d:ac:75:49:22:
39:c7:2b:62:21:b2:af:f9:f5:38:54:29:a0:49:a4:43:59:4c:
fd:bb:d5:12:6e:2e:19:13:47:27:4c:c0:71:79:70:77:68:3b:
20:69:b2:5b:fa:bb:b3:1b:da:91:c9:c0:e9:40:d0:cf:5d:13:
79:af:44:15:d1:a7:ef:41:25:87:2d:f9:33:c7:44:65:5e:94:
c8:2e:18:23:3b:9e:4f:c4:0e:83:c3:30:26:44:c4:17:fb:eb:
82:c8:86:bc:1c:31:11:ff:61:41:77:03:6e:71:dc:e9:f2:10:
89:72:e9:41:cd:2c:62:08:00:4e:f4:70:cf:dc:b4:c0:de:95:
7b:71:49:de:b8:4e:a3:fb:98:8e:5f:64:9d:ee:10:dd:ff:32:
6a:20:af:5c:86:ea:6b:fd:e0:82:6e:b1:21:91:2d:be:52:c5:
34:61:f8:4a:82:ba:40:07:15:c9:57:e6:34:d0:e2:8f:94:17:
54:df:82:8e:76:1f:02:e9:c5:c5:9b:5c:ce:ec:cc:45:60:83:
34:93:ed:d6:07:4f:ef:aa:bc:c6:a7:02:e2:e1:cc:22:68:0e:
fa:eb:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org