Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/dXJtf-2kXX5_2uxdRxPS7MFQrag.roa
File: dXJtf-2kXX5_2uxdRxPS7MFQrag.roa (raw, json)
Hash identifier: 0T70fCOeqKiDjaN3bjZMzDVk9COwgdPBJ11I5oox9P0=
Subject key identifier: 75:72:6D:7F:ED:A4:5D:7E:7F:DA:EC:5D:47:13:D2:EC:C1:50:AD:A8
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16E49E0C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/dXJtf-2kXX5_2uxdRxPS7MFQrag.roa
Signing time: Sat 01 Jan 2022 12:01:39 +0000
ROA not before: Sat 01 Jan 2022 12:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201851
IP address blocks: 141.101.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384081420 (0x16e49e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75726d7feda45d7e7fdaec5d4713d2ecc150ada8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:ba:9f:b7:9c:1e:03:17:79:0d:1e:fd:2a:
e7:ca:b2:a1:8d:77:81:86:2a:f4:87:34:9f:b9:c8:
42:d4:98:f6:aa:3e:4d:8b:9c:46:4f:14:cc:24:56:
f1:be:dc:54:16:f0:0c:9d:43:31:e3:0e:11:20:cc:
a5:cd:1f:b1:e7:fe:79:71:25:02:6f:d2:65:87:15:
af:35:0c:32:fb:e0:6c:0d:76:56:d9:c3:9b:ab:1b:
48:f9:7e:4f:9e:0c:51:ec:82:e9:92:9f:09:21:3a:
eb:ba:a3:4e:af:5d:10:fb:ca:43:5e:34:57:63:98:
7d:d0:b7:98:2d:f0:4e:a7:18:75:2d:1c:6c:a8:6e:
c2:b1:9b:91:31:77:be:76:d6:50:85:16:69:07:d0:
5a:ba:e7:8d:2e:c1:61:55:53:77:22:47:62:bd:2b:
f9:8f:dc:8c:22:0d:9a:0f:de:3e:e2:72:81:b4:91:
56:ef:f0:40:4b:48:8c:04:b5:fe:bb:5b:92:9c:fb:
19:f3:18:06:e0:4f:6b:e4:5e:82:54:ae:bd:2e:6c:
20:f9:92:fb:04:85:13:01:66:ad:04:cd:b1:ef:b0:
83:ec:dc:57:23:04:d6:46:ca:4b:c3:76:fa:e9:73:
42:68:63:09:f3:61:7a:c8:6b:13:a3:f9:d8:9b:37:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:6D:7F:ED:A4:5D:7E:7F:DA:EC:5D:47:13:D2:EC:C1:50:AD:A8
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/dXJtf-2kXX5_2uxdRxPS7MFQrag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5a:10:ff:5f:41:34:d0:75:76:e7:85:d5:24:a4:9d:44:d4:
62:74:39:dc:51:7d:5c:85:7a:f4:8a:74:2e:da:e7:7a:59:45:
67:57:31:b8:1b:1d:b5:3e:6e:38:26:71:6b:54:60:31:1a:e3:
fc:50:c5:cb:d2:f5:f7:63:9d:d1:54:bd:57:8c:8e:e3:00:47:
a6:5c:7d:af:81:30:74:d7:d9:0c:31:f3:3f:cc:44:4c:0c:6d:
95:4f:0f:df:aa:36:e0:92:5b:c6:37:21:7a:1c:33:d2:68:03:
a8:a6:57:8c:12:59:42:49:57:3e:b7:31:b8:3f:cd:dc:3a:52:
d0:97:5a:86:38:fa:61:7d:00:74:fe:2d:ba:7c:35:ba:0e:bf:
15:9f:d8:72:48:08:95:56:38:aa:95:3a:04:cc:d9:13:52:00:
37:01:fd:5f:bb:fe:21:f9:cb:09:4a:a8:d8:d0:89:73:0c:3e:
30:7e:e0:1a:b5:01:d5:d2:a2:5c:6e:3e:4e:0a:2e:41:9f:61:
14:a1:79:b0:a8:ba:1a:66:9a:f3:91:62:e8:26:46:92:a7:a5:
a6:f7:df:26:94:a4:9b:99:04:2e:f5:c7:2e:ef:4c:3d:6b:87:
42:0f:ea:57:57:01:1f:5e:01:c9:4a:8c:dd:37:15:34:62:b0:
f6:0a:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org