Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/xzchkAizg7E_nCNIteDbKYBNXFk.roa
File: xzchkAizg7E_nCNIteDbKYBNXFk.roa (raw, json)
Hash identifier: HFxg0O6EgehqByBZRW5tzaRO/JOpv8VPnBGBLLfqfLI=
Subject key identifier: C7:37:21:90:08:B3:83:B1:3F:9C:23:48:B5:E0:DB:29:80:4D:5C:59
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 13635A74
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/xzchkAizg7E_nCNIteDbKYBNXFk.roa
Signing time: Sat 01 Jan 2022 05:58:20 +0000
ROA not before: Sat 01 Jan 2022 05:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14969
IP address blocks: 84.207.206.0/24 maxlen: 24
83.126.61.0/24 maxlen: 24
84.207.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325278324 (0x13635a74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c737219008b383b13f9c2348b5e0db29804d5c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:46:cc:ff:42:5b:20:66:83:fc:7d:8d:26:
ab:ba:95:bc:37:22:c8:d5:6a:e9:c0:99:3a:0d:fc:
07:98:49:ac:ca:2f:18:cf:aa:64:db:51:70:4c:49:
1c:d2:4b:9b:4a:14:a7:97:92:6d:3d:b2:52:03:d0:
f6:44:03:89:01:5e:6c:4d:8a:70:48:27:f5:dd:b8:
c4:22:8d:71:8a:a1:a9:7c:7e:01:eb:fb:5e:5f:17:
b1:2a:24:5a:f0:a0:ff:99:d8:82:05:10:8a:8b:28:
2f:27:ca:ce:cd:f1:5e:aa:d0:05:96:f7:02:60:d9:
a5:37:4b:c1:68:7d:74:b0:91:b4:fc:c7:07:ff:12:
9b:f8:a5:5c:87:97:08:2c:65:9b:a3:37:9f:4b:c0:
15:5a:70:9e:45:05:38:a6:72:76:5a:36:b2:f2:84:
2f:49:ac:a3:6c:fa:1b:18:db:9e:18:bc:5a:41:0b:
13:54:fd:02:8a:4f:6a:88:fb:aa:58:03:7c:20:44:
dc:b5:1c:2b:9d:83:c7:ed:7f:79:5e:67:1e:1d:9b:
99:66:a2:65:a6:c8:0e:d9:27:01:ed:fa:41:82:51:
21:a1:74:19:d5:c6:f4:7c:99:9c:75:51:14:43:c9:
9d:31:06:7a:50:10:7d:6d:13:e6:57:56:75:6d:02:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:37:21:90:08:B3:83:B1:3F:9C:23:48:B5:E0:DB:29:80:4D:5C:59
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/xzchkAizg7E_nCNIteDbKYBNXFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.61.0/24
84.207.206.0/24
84.207.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fd:17:e7:4f:7a:0f:2a:5c:80:e6:b1:5e:6d:89:4d:b0:3e:
c2:b6:b9:42:ee:a7:da:d9:43:40:aa:78:04:30:ee:96:45:48:
89:89:1d:16:ce:8d:c7:ce:e8:30:eb:5e:91:25:18:7c:c4:d7:
df:0e:69:51:5a:5a:19:2e:a1:cf:e6:7c:5f:6e:fe:30:c3:c6:
a5:d5:49:59:ab:e3:50:a5:01:55:f5:ec:a4:69:ac:d4:63:d9:
d8:3c:2b:9f:29:af:a1:42:45:c8:17:87:6d:64:75:d6:4b:b8:
47:9b:cc:eb:a2:35:00:20:cb:5f:11:16:d5:df:3e:23:5d:ee:
3c:f2:79:9e:49:a4:1e:c4:6d:6c:fd:1c:d4:63:5a:66:7c:61:
0e:b7:ed:6c:66:fb:1b:65:b9:b7:c9:5c:d6:89:08:2a:06:6c:
90:2d:20:33:62:b2:39:90:2f:4d:d8:c8:38:48:8f:42:15:bd:
47:93:cb:d1:08:db:ff:e5:27:73:d3:77:05:6d:81:28:6a:a0:
d5:2f:0e:b7:ea:e7:57:4f:38:6e:ef:fd:84:33:e6:b5:52:13:
a0:81:ed:42:fa:d7:f4:28:54:73:97:47:30:c2:a2:eb:23:43:
4c:b8:c1:d5:ad:2a:04:04:6c:8e:92:f4:c5:85:aa:bc:bf:07:
3f:14:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-ams.rpki-client.org