Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Io-vZtagtRe1-aEns5-N2Cg1alc.roa
File: Io-vZtagtRe1-aEns5-N2Cg1alc.roa (raw, json)
Hash identifier: gdMri8pR/w3n2UMyxl1lGw2do+Wg01AObaTOm5A5Uy0=
Subject key identifier: 22:8F:AF:66:D6:A0:B5:17:B5:F9:A1:27:B3:9F:8D:D8:28:35:6A:57
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018290F19C43E5EFA2D211E634EECB921792
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Io-vZtagtRe1-aEns5-N2Cg1alc.roa
Signing time: Fri 12 Aug 2022 07:25:29 +0000
ROA not before: Fri 12 Aug 2022 07:25:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204916
IP address blocks: 84.54.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:f1:9c:43:e5:ef:a2:d2:11:e6:34:ee:cb:92:17:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Aug 12 07:25:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=228faf66d6a0b517b5f9a127b39f8dd828356a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:d6:f2:b7:df:0f:93:23:36:1e:47:1e:3d:
15:e3:b1:2d:f4:f3:e1:3a:2d:df:66:c2:dd:f6:46:
1c:fe:6f:ef:67:6b:ec:63:f9:c9:85:48:a8:e6:a7:
e7:e0:3f:1e:c9:e7:58:5b:c6:a2:6b:df:89:fb:93:
f4:c0:a4:9a:3d:16:0a:56:34:1d:3f:0e:84:4f:7a:
78:3f:84:e8:73:7a:b9:76:c5:76:06:14:11:86:77:
96:56:be:c2:6b:ac:db:b1:69:bc:90:42:10:40:4b:
97:70:34:af:fa:40:15:f7:64:31:e8:00:15:68:dd:
f6:92:5f:5d:09:c0:3d:77:9f:16:a5:a8:ca:e3:9b:
bc:f7:73:d3:7a:7a:5e:0d:12:fa:09:27:b9:f6:75:
75:f8:6f:cf:71:2a:9b:97:75:b5:1e:54:9f:09:4c:
14:6f:6d:14:7e:2e:77:c7:c4:91:f5:e0:5c:e4:c1:
80:d0:26:1d:cf:f7:c1:ec:64:60:aa:bf:cb:48:ae:
a7:91:5e:67:bb:ff:f1:1f:3d:5f:22:d2:33:af:07:
c4:d4:90:27:a0:d5:13:87:1b:fe:7b:1e:39:2c:b2:
88:d8:ab:a2:93:08:1b:b8:0f:5a:c7:60:02:76:e3:
1f:37:79:bb:18:c1:66:ab:f6:d6:1b:82:d5:73:15:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:AF:66:D6:A0:B5:17:B5:F9:A1:27:B3:9F:8D:D8:28:35:6A:57
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/Io-vZtagtRe1-aEns5-N2Cg1alc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:02:9a:bb:07:40:fd:27:0f:39:6f:7f:cd:42:f5:f9:2f:15:
8b:06:6b:8d:bd:5d:cb:6d:b6:11:a5:44:46:88:5b:a8:3e:5b:
db:00:8d:42:91:86:b5:62:93:90:39:03:36:b3:43:40:9c:14:
59:da:f0:18:03:e4:47:02:ec:89:e3:94:2d:71:90:95:c8:e5:
07:0e:d4:1e:ab:da:6c:17:e1:4d:a9:60:e6:25:27:73:36:02:
0f:e6:8d:7b:92:a8:eb:6d:cb:94:36:99:de:85:14:bd:2a:9f:
3f:78:a4:26:83:fc:d5:42:58:9b:7b:82:82:4c:00:63:17:62:
d5:91:cf:d1:05:30:31:1c:23:05:1b:f1:8b:26:b7:d2:8d:64:
bb:d0:52:0c:3d:3d:a0:e6:a5:de:e4:0f:36:98:f0:c6:fa:60:
e1:50:0e:2f:b4:f3:2b:2f:f8:4d:9f:46:f4:1f:06:bf:07:c9:
73:c0:be:5d:2f:22:b6:8d:fa:ba:08:d4:6e:0e:e4:3a:58:90:
5a:a6:75:2f:71:de:8d:77:91:92:7f:66:5a:68:81:c1:4a:a6:
17:56:4d:f4:90:68:a9:8f:0f:37:85:0d:f3:98:06:93:b1:ad:
b1:7e:f7:50:d5:39:c1:4f:e3:f7:86:ea:5c:3a:9d:fb:70:33:
42:8c:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:45 2023 by rpki-client on console-fra.rpki-client.org