Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/i4amqCcy6PFPX4iVH_OewgqUbO4.roa
File: i4amqCcy6PFPX4iVH_OewgqUbO4.roa (raw, json)
Hash identifier: 18kZlZqVH7cJgBluGm9lUDZZzwo7O2VRT23x3EUykQo=
Subject key identifier: 8B:86:A6:A8:27:32:E8:F1:4F:5F:88:95:1F:F3:9E:C2:0A:94:6C:EE
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 0182859234AAD2FB38F333367740602F4578
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/i4amqCcy6PFPX4iVH_OewgqUbO4.roa
Signing time: Wed 10 Aug 2022 02:25:27 +0000
ROA not before: Wed 10 Aug 2022 02:25:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209575
IP address blocks: 213.208.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:85:92:34:aa:d2:fb:38:f3:33:36:77:40:60:2f:45:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 10 02:25:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b86a6a82732e8f14f5f88951ff39ec20a946cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:74:0c:64:1d:9a:22:64:7c:61:ed:81:24:
97:91:b5:ef:7c:6c:7a:02:f5:e1:5e:a9:2d:25:e2:
4d:d7:d0:70:29:83:0d:95:d9:c9:49:4d:67:e8:b3:
cd:89:01:3d:85:be:61:c0:f3:8f:50:98:63:29:43:
c6:52:84:de:85:d3:f7:93:fd:dd:15:64:eb:cc:24:
f9:ba:90:9e:94:19:29:d3:57:52:ee:e8:50:3c:ae:
9c:1e:b4:91:79:cb:3a:79:1a:3e:7b:41:4e:7d:c6:
85:bb:bf:5f:03:0e:de:05:71:d7:59:3e:c5:6d:b6:
c3:59:50:13:63:e8:f7:a9:99:f5:0f:b6:99:d6:a4:
69:db:50:dd:82:97:2d:fa:62:8f:a0:64:81:db:f8:
fe:02:50:08:b1:c8:15:68:9d:6a:be:9d:91:fb:04:
8d:d7:a5:cd:cd:49:ff:9a:5c:6d:11:73:1e:7a:76:
4d:a3:c0:7a:d4:2e:9e:32:d3:06:9d:20:f7:05:d6:
82:e4:53:e2:f2:a2:82:94:ca:0a:9f:93:4a:5a:5f:
7f:5c:74:3e:71:1c:22:f1:49:37:fd:3a:45:b1:7e:
a8:34:b9:52:0e:6c:d5:4e:98:4b:ff:45:5e:94:6e:
22:76:fa:f3:fe:82:0b:7a:55:ef:27:72:48:3e:24:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:86:A6:A8:27:32:E8:F1:4F:5F:88:95:1F:F3:9E:C2:0A:94:6C:EE
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/i4amqCcy6PFPX4iVH_OewgqUbO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.208.143.0/24
Signature Algorithm: sha256WithRSAEncryption
18:96:dc:47:cf:da:dd:ef:62:50:49:b8:43:06:90:c1:3e:48:
cd:9f:82:bb:97:2b:58:05:45:8e:fc:e3:ba:01:83:c2:77:cd:
72:10:94:18:8f:2b:3d:6c:b0:7f:c6:60:d2:b6:a0:1a:ef:5a:
92:c1:ad:a6:e7:6d:62:cd:49:42:b7:41:62:f9:6d:09:9b:79:
4b:d9:1c:64:b9:42:0d:cd:7e:f3:8d:66:db:63:72:f1:9e:88:
2d:97:2d:73:a9:e9:5f:ed:be:97:b3:03:a7:49:4c:5f:ee:83:
63:1a:9c:b2:8a:0d:9f:0c:b8:da:94:4d:39:a9:f3:74:b1:01:
b6:ff:ce:7b:15:40:a5:a9:72:94:fc:d2:73:98:17:fb:d9:75:
59:60:91:82:c7:b1:18:aa:d4:db:c3:63:cf:69:8d:49:18:bb:
de:6d:77:e2:23:c7:a1:cf:f9:4a:1d:1c:20:ed:c9:e3:39:bf:
e7:d1:35:be:75:f0:6b:c8:da:a8:fe:fa:33:62:15:fb:2f:4b:
a1:e5:64:05:5e:06:af:54:cd:2f:ad:64:b5:7b:2a:64:2c:20:
25:c5:9e:e4:c5:fd:5e:62:61:22:34:73:ef:a3:80:10:b7:5d:
72:6c:21:70:90:33:5b:ec:60:46:0a:55:17:45:57:86:dc:f6:
54:59:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-ams.rpki-client.org