Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/Kd01e4eZdX5tJUYgknyk0_zsVvI.roa
File: Kd01e4eZdX5tJUYgknyk0_zsVvI.roa (raw, json)
Hash identifier: gx1UvjOskapcwiiBCeJ/0K4QUepqhT2i+32JQjLg6wA=
Subject key identifier: 29:DD:35:7B:87:99:75:7E:6D:25:46:20:92:7C:A4:D3:FC:EC:56:F2
Certificate issuer: /CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
Certificate serial: 061364
Authority key identifier: 00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/Kd01e4eZdX5tJUYgknyk0_zsVvI.roa
Signing time: Thu 14 Apr 2022 11:17:03 +0000
ROA not before: Thu 14 Apr 2022 11:17:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 217.28.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398180 (0x61364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
Validity
Not Before: Apr 14 11:17:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29dd357b8799757e6d254620927ca4d3fcec56f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:eb:69:eb:53:9b:ee:3f:93:10:a3:ac:dc:
22:95:82:15:72:31:90:3d:60:85:a8:65:0e:ca:e3:
6c:d5:c1:8f:5d:63:c5:71:43:f7:79:43:48:be:88:
3f:21:ab:aa:fb:cd:9a:cc:da:9c:cf:a2:c7:20:a7:
86:91:73:70:bf:d3:ac:2d:41:44:78:79:62:04:8a:
65:95:ca:4f:40:83:66:7e:0f:2e:ad:b1:b0:c6:2a:
3d:33:7c:55:fe:4b:0e:6d:2d:f9:b1:7c:f8:db:54:
30:c8:ff:b5:63:95:89:c1:20:16:0c:dd:e3:7a:98:
e7:12:1b:33:27:b2:44:dd:52:c0:3b:e5:6c:70:30:
d5:2b:d8:73:91:58:0f:55:58:1a:23:e6:15:d8:12:
9c:3e:31:87:4f:05:bc:ee:37:65:bc:86:1e:b6:bb:
9e:73:2e:74:f6:ac:62:1c:bf:31:86:25:89:ce:cb:
4b:52:eb:5e:3b:c6:19:2c:7b:1e:ca:12:5f:c4:b3:
27:45:8c:b4:0d:85:52:5c:27:13:bf:b8:8d:31:47:
ec:20:b2:89:20:8c:28:66:75:55:a4:d9:eb:cf:97:
54:3d:d4:7d:da:20:65:2a:70:e7:29:f7:04:90:fa:
e9:c4:35:20:6d:6a:23:1a:ce:c0:9f:a9:c3:01:3a:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DD:35:7B:87:99:75:7E:6D:25:46:20:92:7C:A4:D3:FC:EC:56:F2
X509v3 Authority Key Identifier:
keyid:00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/Kd01e4eZdX5tJUYgknyk0_zsVvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.128.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:04:c9:b2:96:b9:e9:04:80:08:1b:7b:e0:36:5a:8a:cb:e0:
d8:16:ad:76:5f:a0:3f:a7:12:5c:32:d4:49:07:d1:c3:6a:63:
cd:c5:84:d7:0d:df:0a:96:79:78:c3:a8:e2:d2:4b:80:6b:af:
b4:77:8d:f3:5f:22:f5:c6:82:9c:29:0c:87:3a:2e:5a:ae:b5:
cf:01:85:82:83:9b:b7:7d:47:60:a0:dd:45:3e:6a:54:0e:92:
2f:54:97:f4:0b:01:b8:de:83:f5:f1:dc:28:3f:74:35:2f:91:
65:6e:2e:36:b5:5c:59:d7:88:fb:dd:8c:f8:30:bc:2e:bd:ab:
0c:8c:d6:37:f8:e1:a5:45:51:b8:61:b7:0b:89:98:cc:70:4f:
40:9a:0a:a9:15:3a:f3:a5:39:12:66:08:29:73:7c:d1:0c:98:
06:02:07:34:94:f6:d6:11:74:0c:2e:93:49:59:88:72:09:17:
f9:dc:52:5f:36:48:46:4a:6b:46:d8:99:9a:d2:bc:c9:36:05:
88:e3:54:7f:1a:ac:dc:8d:de:df:f8:9e:a0:0b:70:60:43:a6:
44:da:ec:d7:83:e7:ad:b6:f1:a1:a7:1b:3f:ef:b7:4d:e7:7c:
0f:a8:a1:b7:cc:8f:e2:ae:f2:5d:5c:85:f7:76:fd:44:76:41:
9d:7a:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:52 2023 by rpki-client on console-fra.rpki-client.org