Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/VfdhkXtXVRgLIXgoNdk43ktG-fg.roa
File: VfdhkXtXVRgLIXgoNdk43ktG-fg.roa (raw, json)
Hash identifier: uSehSiCO1kKoAs6yfLCNeIepgkJl4bdgstCRxEzLYt4=
Subject key identifier: 55:F7:61:91:7B:57:55:18:0B:21:78:28:35:D9:38:DE:4B:46:F9:F8
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0182ABCD0A7C5A13BAD2EDA240BF6360A86C
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/VfdhkXtXVRgLIXgoNdk43ktG-fg.roa
Signing time: Wed 17 Aug 2022 12:35:17 +0000
ROA not before: Wed 17 Aug 2022 12:35:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 63.142.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:cd:0a:7c:5a:13:ba:d2:ed:a2:40:bf:63:60:a8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Aug 17 12:35:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55f761917b5755180b21782835d938de4b46f9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:85:97:b3:68:39:f7:7f:62:42:22:32:5c:
e1:99:73:d2:f2:b9:29:ec:36:08:28:62:2b:31:a4:
a6:30:10:3c:32:90:9e:45:78:8a:4b:0b:7d:16:99:
81:44:59:11:a3:81:56:50:be:6b:6a:de:97:5f:d2:
f4:b4:31:7c:db:aa:f5:8f:dc:3c:3e:8c:00:f9:5d:
75:38:5a:71:10:bb:c6:aa:76:0c:a7:89:69:22:3c:
0f:b9:ef:24:e4:79:52:ed:19:49:a9:83:24:91:96:
54:b6:b6:80:c6:59:71:ff:b4:0d:7e:76:45:d7:8b:
19:fc:34:85:86:7a:c9:b3:1e:f4:74:5c:7f:77:4d:
0d:a6:1f:de:61:c4:ae:a1:99:23:9f:44:c3:e6:c3:
b5:8b:b1:41:c3:99:49:67:fa:f4:b1:78:71:cb:d1:
0c:60:02:3b:a3:ef:09:f1:40:a6:01:61:73:fa:b0:
55:0a:a0:38:02:2f:21:2e:d7:84:42:bb:19:c1:f1:
43:a9:b2:f0:ee:f5:49:5f:34:43:5b:ab:da:21:4c:
46:9b:64:17:f3:bc:02:f4:83:30:fc:e4:94:25:e9:
4a:3a:76:ed:3b:8c:76:09:d3:fe:a1:e0:0b:17:e7:
6b:57:00:cf:2b:c2:80:fc:37:b8:2c:50:19:59:0a:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:61:91:7B:57:55:18:0B:21:78:28:35:D9:38:DE:4B:46:F9:F8
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/VfdhkXtXVRgLIXgoNdk43ktG-fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.142.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:38:9d:e2:26:8f:5f:6c:e5:72:35:fc:41:31:5f:6b:66:b8:
15:2d:e4:1a:5b:13:13:42:43:7e:db:c2:5c:40:9d:32:e4:aa:
69:e4:58:8a:3c:db:df:9a:b4:b1:65:bf:df:e5:e7:89:68:aa:
d6:8c:0a:8f:4b:6b:9c:06:34:03:3f:02:98:e1:d2:a3:39:ba:
dd:27:eb:80:33:ae:52:af:8b:b0:b7:4b:f8:16:0e:e1:ee:f1:
e2:e8:6a:5f:eb:0b:77:4c:66:f4:61:94:43:b9:32:f3:46:a8:
1b:37:8e:95:72:05:11:bb:90:3d:84:62:64:b7:f6:ae:b5:9a:
17:26:f6:42:c7:b6:e2:a1:f5:c2:b3:49:b2:4d:fa:57:10:17:
af:69:83:f1:93:2d:bf:1b:72:ff:8a:f7:c8:00:7a:27:b5:7a:
bc:f5:62:75:93:55:61:62:96:16:e7:3c:2e:f2:e2:28:27:4e:
50:88:74:8a:84:16:fd:60:9c:da:a6:92:e2:5f:2a:e7:e1:b3:
4d:ae:0b:bb:d4:8c:90:7d:3a:dd:cf:82:9e:0e:23:d3:42:03:
a8:1a:d4:ce:88:5c:10:92:28:40:56:03:8e:19:90:3d:09:1e:
d3:36:f1:3d:52:1c:47:a0:bd:ee:64:a0:da:fa:71:9e:4d:3a:
01:15:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:29 2023 by rpki-client on console-ams.rpki-client.org