Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/0I4LOiq8epgoNh902qdn-Ox55Sw.roa
File: 0I4LOiq8epgoNh902qdn-Ox55Sw.roa (raw, json)
Hash identifier: JRl1ka9lTgqfu9BMp0ydBdg+IIdNcufB17FZWLVscMc=
Subject key identifier: D0:8E:0B:3A:2A:BC:7A:98:28:36:1F:74:DA:A7:67:F8:EC:79:E5:2C
Certificate issuer: /CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
Certificate serial: 0183F4D1298CAF1403EBE4F81CCC41BCF173
Authority key identifier: 00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/0I4LOiq8epgoNh902qdn-Ox55Sw.roa
Signing time: Thu 20 Oct 2022 09:54:51 +0000
ROA not before: Thu 20 Oct 2022 09:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 217.28.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:d1:29:8c:af:14:03:eb:e4:f8:1c:cc:41:bc:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
Validity
Not Before: Oct 20 09:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d08e0b3a2abc7a9828361f74daa767f8ec79e52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:91:e2:4b:b3:a0:8d:42:d4:bf:a5:1e:46:
76:5f:bc:c4:ab:87:6c:93:d4:48:ae:4c:e9:22:2c:
5f:97:b1:86:7e:0c:91:75:e2:84:bb:79:b5:d9:1a:
f1:42:73:58:c8:0e:d9:a6:c8:3e:bd:bf:a5:1b:51:
70:91:37:c3:2c:fe:36:36:a3:a4:23:39:f5:69:fe:
3e:da:45:87:63:1f:fe:3a:ab:75:54:78:13:3e:f7:
0d:8c:af:03:f8:1f:12:3a:6a:da:4a:ac:05:e3:e3:
10:08:d3:6b:86:f5:11:6a:1a:26:e9:f0:20:16:e6:
9f:dc:db:f1:4b:d4:ee:ca:5e:c2:49:4e:06:26:c6:
17:7d:e8:a9:c7:b5:9e:c3:d8:58:13:88:9b:58:83:
b0:3f:ce:fb:6d:a3:2b:e6:8c:9c:f2:86:02:ac:ab:
19:26:31:70:2b:ec:d0:e2:eb:16:6c:37:b0:56:b0:
02:10:18:15:21:a5:67:b8:f6:92:c6:9a:f2:e0:be:
99:5a:4c:38:f9:29:6b:9e:f4:6a:5c:96:f4:1c:bf:
86:c0:60:5c:cd:62:57:7e:b1:eb:ef:8e:ac:5a:90:
0e:64:1e:13:93:6e:90:dc:8d:77:fa:71:29:b7:fd:
5e:4a:45:46:2f:82:75:76:b3:c9:8f:05:74:7b:ce:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8E:0B:3A:2A:BC:7A:98:28:36:1F:74:DA:A7:67:F8:EC:79:E5:2C
X509v3 Authority Key Identifier:
keyid:00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/0I4LOiq8epgoNh902qdn-Ox55Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2f:b4:5e:73:42:da:99:bf:b7:d0:5b:aa:2f:de:ff:af:89:
7e:7a:44:82:a8:7d:27:12:b7:f7:94:76:5b:59:15:a7:16:eb:
7c:c8:b4:a6:ae:f2:8d:0c:ac:47:1a:37:e8:84:a3:1d:b8:46:
46:81:53:09:c3:3e:a7:e4:73:44:17:20:07:aa:d5:fc:17:6a:
64:53:58:f6:28:d2:c4:68:f5:e9:35:37:e2:d2:c5:81:55:87:
ac:d8:86:59:4f:ca:2d:4d:12:ec:38:6a:ae:e6:56:1b:88:bf:
17:aa:35:c3:dc:84:cd:2a:fe:1c:80:f0:50:50:af:5d:fb:2d:
4e:31:e8:4f:4c:72:50:f6:80:6b:40:2e:63:b0:3b:4d:a8:61:
6c:99:e9:b3:4b:bb:1d:1c:34:2e:e7:8a:62:53:17:b7:82:dc:
06:49:2e:94:00:11:6c:f6:af:d2:0b:47:c3:4c:da:5c:45:02:
21:a2:d6:69:9f:2f:25:1d:62:d1:d4:c4:89:be:b0:7f:65:08:
6f:59:0c:13:d5:4e:d2:ad:37:15:b1:a2:b7:f0:25:21:66:12:
08:ff:de:2a:57:56:07:69:ae:c7:40:8b:80:08:a0:f7:83:f6:
24:9d:a6:42:f9:a0:ea:ee:6d:6b:bf:56:5b:5b:91:a0:96:b6:
49:e4:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:28 2023 by rpki-client on console-ams.rpki-client.org