Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xHxHFoG4vYCP6aCPKU91OmOKXBo.roa
File: xHxHFoG4vYCP6aCPKU91OmOKXBo.roa (raw, json)
Hash identifier: Xx17HyoDeHaAFcc7TBYRtdEWxua0xq28cqTMIPbsjT8=
Subject key identifier: C4:7C:47:16:81:B8:BD:80:8F:E9:A0:8F:29:4F:75:3A:63:8A:5C:1A
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 179E3AB9
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xHxHFoG4vYCP6aCPKU91OmOKXBo.roa
Signing time: Mon 14 Mar 2022 09:10:23 +0000
ROA not before: Mon 14 Mar 2022 09:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 141.101.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396245689 (0x179e3ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 14 09:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c47c471681b8bd808fe9a08f294f753a638a5c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:76:8b:6b:2f:fc:c1:6f:fd:d7:3e:31:af:
d1:7e:21:eb:9e:02:23:53:68:89:1d:c4:f9:20:af:
98:19:88:97:38:09:ca:77:a0:62:b3:31:3a:4b:0e:
51:cc:84:78:5f:f9:fa:71:66:36:0c:2d:b7:fc:c9:
4f:63:7f:70:44:07:f2:89:01:60:4f:77:d6:64:19:
0d:62:61:f1:ae:14:b3:d3:8f:82:82:09:c3:0a:19:
2b:06:df:e1:0d:eb:d3:93:6e:32:dc:f6:cd:f8:93:
82:9e:a6:b1:8b:bd:bc:c9:ec:63:14:07:ca:ad:cd:
fe:1b:23:4f:ae:f4:1d:4d:57:6d:ff:e7:7f:0a:10:
1a:0f:26:b7:f1:52:8e:f3:89:64:d6:81:0a:73:92:
c6:67:e9:cf:39:80:91:7c:a8:e6:85:df:5b:a3:07:
4f:13:db:7c:98:13:36:21:ff:0b:82:7c:92:ae:1d:
74:9d:b4:f5:5f:d2:d8:99:4b:1d:38:86:01:e2:04:
c7:a7:db:32:34:b0:99:b2:31:fe:d9:4b:35:77:f1:
45:a8:56:f4:f0:c8:d2:8b:df:45:79:b7:f9:7c:17:
5a:39:88:3a:65:a5:78:5c:a8:6c:b0:29:3c:1f:f6:
4f:e8:69:a9:6f:d1:27:57:b5:1f:21:3a:90:8a:51:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7C:47:16:81:B8:BD:80:8F:E9:A0:8F:29:4F:75:3A:63:8A:5C:1A
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xHxHFoG4vYCP6aCPKU91OmOKXBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.144.0/24
Signature Algorithm: sha256WithRSAEncryption
42:39:b2:a1:fd:bc:36:d1:62:bf:c0:6c:43:d4:79:c0:8f:21:
d7:8b:44:f4:09:df:a0:8c:8c:38:db:25:a4:8e:f4:df:01:d7:
f1:d6:6a:20:d9:60:21:e0:ab:99:56:aa:71:cb:eb:11:93:b9:
24:7c:3f:e6:09:95:6b:2b:aa:ae:e1:e7:dc:13:45:3d:f9:25:
43:61:c9:28:81:a6:49:12:0e:96:83:55:af:07:8a:1b:83:a6:
d9:42:c2:67:90:52:ed:c5:96:ee:8d:50:12:a6:2d:19:fc:fa:
93:f3:f5:98:3d:9b:86:a6:13:3c:e9:8c:71:80:44:46:58:e9:
77:1a:3f:0d:b4:a7:70:21:26:dd:91:d7:0b:e7:ed:9b:26:ad:
12:bb:bd:b0:18:aa:4d:05:fc:c1:19:37:0d:0a:f5:16:c8:9b:
8f:77:3a:bd:48:1f:21:f5:66:d7:95:82:cb:a1:81:cb:ca:80:
a1:38:25:8f:96:a5:d6:e1:ed:54:6e:1d:b3:fa:9d:95:40:85:
cb:45:d3:a9:06:91:dd:14:be:09:02:ea:2b:1b:36:0c:ab:c5:
29:c2:4b:8b:3a:a2:7f:6b:42:63:16:27:02:d5:9b:de:ce:4e:
5b:17:8c:54:3f:3b:bd:7f:e7:1e:13:b4:1b:c0:84:fc:1c:d8:
4c:38:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org