Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_9ePU0a2H1uPP1_xIO1jo7xGjQY.roa
File: _9ePU0a2H1uPP1_xIO1jo7xGjQY.roa (raw, json)
Hash identifier: s2m8Z6PUbvwwJ8wJKE6uz2U0e0UHkh02IJn3fS8cKvE=
Subject key identifier: FF:D7:8F:53:46:B6:1F:5B:8F:3F:5F:F1:20:ED:63:A3:BC:46:8D:06
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01260616
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_9ePU0a2H1uPP1_xIO1jo7xGjQY.roa
Signing time: Sat 01 Jan 2022 09:02:44 +0000
ROA not before: Sat 01 Jan 2022 09:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29189
IP address blocks: 217.64.208.0/24 maxlen: 24
217.64.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19269142 (0x1260616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jan 1 09:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffd78f5346b61f5b8f3f5ff120ed63a3bc468d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:f5:80:89:cf:be:5b:dd:b3:9a:de:54:2a:
ec:40:8f:63:f6:a1:5f:a2:cf:42:bf:89:e4:ef:ba:
00:d5:48:c5:c5:12:ea:84:d8:01:80:e6:50:ca:c4:
96:4c:5d:2e:1b:d9:2c:80:cc:15:2f:94:53:11:92:
34:fa:2b:08:55:40:94:72:8b:37:37:92:85:d9:9b:
82:3d:6b:34:02:37:75:43:09:4a:70:1c:ae:f8:09:
67:0e:78:a5:8d:cd:23:3b:ff:d9:96:ed:34:68:20:
b6:f2:2f:cf:1e:e5:87:1f:21:e8:81:bd:dc:07:af:
c1:22:20:ce:28:c9:23:ac:7b:5e:aa:49:2a:e8:0d:
79:29:60:c7:de:9a:25:53:99:8f:64:81:57:6b:a5:
08:c3:d0:e8:d3:30:79:35:19:e7:36:69:a0:9e:72:
98:7c:ec:b1:aa:14:85:a3:0c:27:ff:e9:d9:25:0d:
bd:81:9c:11:cc:c3:55:fd:51:9f:6a:f7:b1:d2:64:
38:71:c6:41:9d:c0:8e:d2:a8:7b:25:fe:ba:41:cb:
f8:ff:59:b5:d2:80:93:f5:cd:b5:95:f7:c8:09:1a:
8f:44:95:ae:a2:8d:5c:cf:ab:69:73:2e:6e:f1:de:
d9:a5:9c:1f:f5:e3:4e:b5:be:da:96:ee:86:71:39:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D7:8F:53:46:B6:1F:5B:8F:3F:5F:F1:20:ED:63:A3:BC:46:8D:06
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_9ePU0a2H1uPP1_xIO1jo7xGjQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.208.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e1:6f:9d:37:11:4f:c5:53:61:1b:4a:a1:81:f5:c4:a6:c7:
9f:0c:30:3c:b4:ff:f4:61:f2:ac:9f:ae:09:a8:54:87:b3:fc:
8b:c7:dc:a2:75:c9:9c:d1:82:c1:2d:51:b9:0a:9d:5a:c7:9a:
f3:b3:96:81:5f:62:2a:4e:2e:01:ab:61:0d:63:5c:19:e1:dd:
49:72:f8:03:56:c8:b7:a9:3c:51:e6:fd:32:b3:11:55:cb:08:
39:80:db:5f:67:53:c8:d3:4e:8b:f5:da:60:8a:dc:88:31:cd:
e5:72:9c:4b:4a:e8:40:41:3b:94:a4:8d:12:86:27:0d:22:d1:
a9:8f:11:fe:9e:86:3b:8c:8e:2c:37:f6:92:9f:ea:d8:55:40:
ed:c7:0f:c5:08:7a:99:fc:43:4e:58:dc:70:f9:e2:f9:2e:52:
da:66:78:ec:f4:cd:4e:05:ff:aa:80:00:f8:a9:41:10:c8:df:
59:ea:ed:0d:25:63:c3:2a:2a:97:40:6c:5d:9d:12:37:0e:36:
09:c4:78:91:b5:50:0c:48:f2:78:01:3f:53:f5:25:d1:5a:fe:
46:88:ad:bb:d2:73:0f:e7:a6:10:7b:e8:f5:2b:fc:cf:55:98:
35:9c:c2:4d:1f:97:7e:d7:72:d8:a6:c3:c0:94:d2:9b:d0:0e:
7f:c8:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:46 2023 by rpki-client on console-fra.rpki-client.org