Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/F0tgLoXdOvOvxp6BJVyst4-3oN8.roa
File: F0tgLoXdOvOvxp6BJVyst4-3oN8.roa (raw, json)
Hash identifier: TmgOc14PZ/tgiFHEFxR7Xen9NJs3/Y6L65uNprLKIpc=
Subject key identifier: 17:4B:60:2E:85:DD:3A:F3:AF:C6:9E:81:25:5C:AC:B7:8F:B7:A0:DF
Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Certificate serial: 01850FF1EC62B6AC623B10B266DFFBF6B2CF
Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/F0tgLoXdOvOvxp6BJVyst4-3oN8.roa
Signing time: Wed 14 Dec 2022 09:23:11 +0000
ROA not before: Wed 14 Dec 2022 09:23:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201218
IP address blocks: 78.24.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:f1:ec:62:b6:ac:62:3b:10:b2:66:df:fb:f6:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Validity
Not Before: Dec 14 09:23:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=174b602e85dd3af3afc69e81255cacb78fb7a0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:5a:cc:7a:b4:36:e6:8a:18:47:e2:1f:aa:
e3:1c:e9:ad:54:55:01:47:f4:80:c7:72:e0:88:c8:
70:8a:ca:ec:26:28:95:8b:ce:fd:58:01:a2:91:32:
a8:64:4a:91:8a:7c:b3:93:e9:b4:9a:8f:20:00:bb:
d8:a7:0c:3d:e3:1f:38:a1:4c:f2:a6:70:40:af:17:
e6:1f:d2:e3:63:ab:77:71:33:01:31:88:6f:7f:e5:
a0:c2:d5:4d:67:44:3d:75:ee:4f:c8:92:18:0b:24:
bd:d9:d8:09:99:68:dc:99:91:3d:05:e1:2f:e6:d7:
3a:14:7f:3d:43:b9:22:82:d1:17:41:4e:1a:5a:c6:
43:8b:14:3d:0a:06:97:21:11:c8:3f:fb:1c:08:9c:
cf:ba:cb:bf:ff:f9:b0:3f:b2:2b:19:b7:1c:47:1f:
9a:65:8f:bf:60:0a:41:bf:d3:1d:48:07:e6:57:a6:
94:2b:c2:84:4e:71:cd:b6:03:a9:f8:e6:4b:96:a8:
42:e2:1b:86:e4:6b:88:50:62:f9:3d:d6:b4:b3:16:
c5:d7:8d:40:6b:56:8a:12:62:d0:e0:83:b9:6b:98:
2b:80:f8:b5:65:31:1e:85:66:92:58:2b:a0:7b:05:
7c:6f:06:38:1b:5c:0a:be:71:be:d6:7a:67:e4:05:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:60:2E:85:DD:3A:F3:AF:C6:9E:81:25:5C:AC:B7:8F:B7:A0:DF
X509v3 Authority Key Identifier:
keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/F0tgLoXdOvOvxp6BJVyst4-3oN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.203.0/24
Signature Algorithm: sha256WithRSAEncryption
54:55:a2:05:4b:26:0c:cf:11:f6:f7:94:21:22:34:81:14:a1:
1e:0e:2c:98:13:c3:c1:ec:9a:ee:12:64:42:37:90:9b:56:41:
d3:31:58:56:c5:2d:97:84:99:2e:71:cf:48:90:58:c2:fa:97:
ad:e6:bc:c3:70:3d:d1:12:6e:d1:44:bf:67:eb:f0:9e:86:ef:
d4:51:1d:89:db:9a:01:2d:39:e7:de:21:16:d4:5b:a5:69:ad:
ae:54:17:30:a9:7c:d4:9e:d1:71:a7:42:11:3a:8b:9a:e2:5f:
b0:ad:83:42:27:22:de:66:5a:b9:34:64:84:e9:c4:7e:29:6c:
68:73:0f:b2:7b:e4:43:c0:1f:43:10:da:de:cf:3f:36:5a:b3:
ab:e9:43:01:78:f2:24:e5:c6:f3:1a:8f:b7:a1:bf:e7:07:fc:
68:b9:76:7a:5b:dc:24:fe:94:4e:5d:71:a3:82:98:3d:08:f7:
9e:87:90:9f:34:ee:f2:3a:16:e7:d3:c6:bd:f9:f2:3e:bb:12:
1c:98:38:df:29:2b:32:b4:e5:9c:e8:b4:f0:b5:75:6e:ef:18:
7e:cb:08:a4:09:14:fe:08:21:9f:75:35:b3:49:f2:4c:1b:c4:
6b:ec:5e:9d:97:4f:1a:34:99:6d:95:6b:21:16:81:14:fb:2d:
3b:d1:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:52 2023 by rpki-client on console-ams.rpki-client.org