Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/I3c_L6-VVFePdtEdKYL_ncghbZA.roa
File: I3c_L6-VVFePdtEdKYL_ncghbZA.roa (raw, json)
Hash identifier: A3RtnKImvrv+1k28Gz2TBj20ASLWfQ5i9OtRxiqbAUU=
Subject key identifier: 23:77:3F:2F:AF:95:54:57:8F:76:D1:1D:29:82:FF:9D:C8:21:6D:90
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01842F5D3BFA3846FCD4E3E7C17B0E3F0C9B
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/I3c_L6-VVFePdtEdKYL_ncghbZA.roa
Signing time: Mon 31 Oct 2022 18:45:50 +0000
ROA not before: Mon 31 Oct 2022 18:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13259
IP address blocks: 83.171.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:5d:3b:fa:38:46:fc:d4:e3:e7:c1:7b:0e:3f:0c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 31 18:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23773f2faf9554578f76d11d2982ff9dc8216d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:04:c0:2f:e7:f5:a1:a3:a7:bb:88:c5:b9:
48:12:67:93:e6:0a:88:cb:ae:89:2b:4d:2a:79:19:
3a:e9:1f:a4:01:d7:74:9d:26:2e:5b:e6:b0:b0:d1:
3b:77:ac:19:43:74:87:d5:31:b7:f2:7d:99:24:e5:
3d:ed:30:2d:3a:2d:3d:fb:92:d8:f5:f9:ea:b8:03:
bb:41:55:97:e9:f9:d4:ce:d8:4e:07:7b:15:59:96:
e8:22:e4:a8:d4:e0:8e:54:d6:46:c3:34:46:f6:b1:
35:03:cc:8b:a0:de:da:7b:22:c9:5b:d0:f3:b7:ad:
df:bd:14:38:24:e4:46:fd:15:a6:c6:a6:bb:62:d2:
60:81:29:e3:61:59:bb:c7:2d:5f:43:d7:9b:ce:4b:
30:63:7f:74:9e:db:9b:5f:ef:13:b2:92:9d:c5:2a:
7a:7f:80:65:4d:de:a3:1e:90:88:d5:6a:51:b8:e4:
c0:7f:a0:fe:39:9b:92:8e:36:25:7d:84:36:d3:e2:
1a:07:ca:61:65:22:f7:83:85:f7:9a:e3:7c:13:83:
d6:02:f4:8d:56:bb:b1:5b:80:0a:ea:a6:54:cd:69:
5e:69:e1:4c:c7:00:9d:02:d6:5d:ac:af:a7:0e:16:
b6:6f:4d:fd:c0:c5:5c:33:06:64:74:30:37:e9:3e:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:77:3F:2F:AF:95:54:57:8F:76:D1:1D:29:82:FF:9D:C8:21:6D:90
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/I3c_L6-VVFePdtEdKYL_ncghbZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.241.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c8:66:34:e8:41:c6:66:26:2d:d2:bd:3a:2b:e6:07:16:a0:
ee:36:0c:90:4d:06:83:0b:55:d9:5d:8b:60:04:66:3e:70:aa:
16:a1:51:38:f5:bf:93:a6:3c:eb:72:96:71:2b:e7:99:70:b9:
3f:5f:be:60:85:9d:16:8b:5d:0f:7a:86:81:dd:30:40:49:7f:
40:3d:ce:2b:a7:5c:7f:5d:b0:9f:36:9f:76:e9:f8:43:b5:6b:
56:aa:b3:73:78:f9:bd:0d:5e:0b:88:f4:3e:ee:98:b4:6e:56:
b9:52:57:18:cc:e5:28:5f:7e:4b:eb:f5:79:ff:00:96:25:e7:
a3:d7:e0:4b:6d:68:bb:cf:b6:6c:88:e8:e9:d3:60:ef:d8:ff:
2c:81:18:6f:cb:f4:7d:cb:25:19:53:c3:09:dd:4c:6a:37:82:
7a:91:9b:a2:e0:68:42:64:b4:a6:97:10:08:67:3c:21:51:cc:
ae:b4:52:6a:5c:75:6c:c4:5c:69:d9:e6:5b:db:e2:f0:f5:0b:
d2:d2:99:24:3a:0c:15:da:8c:d4:e6:f7:56:69:3a:78:ab:a8:
ea:0d:45:71:04:ed:6b:5c:43:0e:b2:cb:ea:cc:a9:e7:8d:0e:
ae:f1:af:b5:db:44:cc:cc:dc:d8:a0:77:52:f1:76:02:19:dc:
08:0d:90:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-ams.rpki-client.org