Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/9jRuTrXPvpAuiHkzYTjiqOV8Ey8.roa
File: 9jRuTrXPvpAuiHkzYTjiqOV8Ey8.roa (raw, json)
Hash identifier: RSLuUlEHls+RFe2BsT2E0GK6huCBx3LF9pEhR4PMa9U=
Subject key identifier: F6:34:6E:4E:B5:CF:BE:90:2E:88:79:33:61:38:E2:A8:E5:7C:13:2F
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01F1A363
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/9jRuTrXPvpAuiHkzYTjiqOV8Ey8.roa
Signing time: Sat 01 Jan 2022 15:06:17 +0000
ROA not before: Sat 01 Jan 2022 15:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 176.111.218.0/24 maxlen: 24
147.189.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32613219 (0x1f1a363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 15:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6346e4eb5cfbe902e8879336138e2a8e57c132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e5:8d:47:ce:5d:f4:8f:fd:36:a9:33:40:c8:
c9:37:32:2e:d4:a7:31:f8:88:7a:12:d6:70:40:67:
03:b0:e7:9a:b9:1f:66:bd:c1:60:48:67:f6:cd:72:
f4:83:2a:56:ad:63:6c:dd:fb:92:49:df:dd:d0:50:
7e:bb:7f:2b:b8:bb:6d:69:c9:5c:cb:cf:06:0c:2c:
34:c8:69:d0:12:2f:a7:62:d9:16:2f:e1:ec:4d:c5:
41:29:c9:16:fa:f2:0a:04:ca:b0:00:a8:a6:ba:13:
f9:0b:37:02:bc:a8:3c:d2:1f:49:b1:d0:27:0e:c6:
65:43:10:3f:c9:52:c7:ef:68:a8:f1:28:67:9a:0d:
d5:41:a5:6f:84:bf:04:41:ee:d3:95:40:76:3c:c9:
8e:08:eb:c1:03:25:f6:a2:a8:e3:64:cb:f9:66:65:
de:b7:aa:29:44:5b:01:f6:bc:87:a8:c2:fb:ae:e5:
08:09:90:06:47:7c:3d:4e:b7:26:4a:99:4b:7d:f1:
84:51:b7:d5:cd:23:65:d4:c9:7a:68:d7:90:5b:b8:
f6:58:fb:7c:aa:e4:e9:8f:5b:ea:c9:c8:e3:35:c2:
43:94:bd:b9:b6:23:cc:e0:fd:1a:8a:c1:84:6c:e3:
e5:90:6d:51:65:51:7c:60:6f:79:dd:b8:eb:57:a6:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:6E:4E:B5:CF:BE:90:2E:88:79:33:61:38:E2:A8:E5:7C:13:2F
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/9jRuTrXPvpAuiHkzYTjiqOV8Ey8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.129.0/24
176.111.218.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:39:bd:11:32:1f:ce:09:04:c1:fb:cf:c5:24:9c:f8:46:07:
d4:8e:e6:19:90:d5:e2:bc:aa:70:a3:5f:c6:b5:27:00:c5:80:
df:4d:25:79:21:5c:6c:17:51:8a:c3:e8:92:fb:5c:7c:91:64:
62:69:e0:22:8d:b0:84:32:91:21:16:84:5b:94:b6:5e:b4:ed:
bf:75:64:4d:56:12:0a:17:76:ba:13:37:2e:c6:67:a4:ca:46:
9b:c1:69:76:dd:76:99:0c:87:a1:0d:c8:09:f2:f4:c8:97:81:
be:a2:30:06:1f:60:c8:fb:47:e0:1f:a2:52:56:b8:3c:7a:35:
b0:52:26:c0:19:aa:04:b2:d0:6a:21:57:f3:fe:3c:33:63:5b:
db:68:86:ec:59:38:2e:45:26:d6:9f:55:56:2e:e3:e6:7e:cf:
cb:b7:08:e3:c4:8b:cc:f8:68:62:07:0d:23:49:c6:be:a8:e1:
7b:5d:84:3a:01:aa:5b:bb:0b:62:c3:d6:18:e8:7e:39:b7:bb:
1e:28:b2:d6:27:d5:dc:c3:33:48:f7:8c:82:06:d6:2e:46:b9:
a5:3a:18:c0:af:46:80:13:23:6c:c1:2e:3d:e9:14:d3:31:84:
bc:a7:ff:7d:f5:1f:96:98:00:13:5b:1e:ae:66:2c:a3:05:6f:
a0:33:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:48 2023 by rpki-client on console-fra.rpki-client.org