Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/vCm4cOVmRNaueZpgBiI7RykOi2A.roa
File: vCm4cOVmRNaueZpgBiI7RykOi2A.roa (raw, json)
Hash identifier: qmubceJ1JHaeS7Mc3gYUYY4wO1dQ2UC/13mbCOySIe8=
Subject key identifier: BC:29:B8:70:E5:66:44:D6:AE:79:9A:60:06:22:3B:47:29:0E:8B:60
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 01831DC6600B47BC9F48471264A39C046DA9
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/vCm4cOVmRNaueZpgBiI7RykOi2A.roa
Signing time: Thu 08 Sep 2022 15:44:43 +0000
ROA not before: Thu 08 Sep 2022 15:44:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204437
IP address blocks: 192.33.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:c6:60:0b:47:bc:9f:48:47:12:64:a3:9c:04:6d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Sep 8 15:44:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc29b870e56644d6ae799a6006223b47290e8b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:a3:06:66:b5:93:b2:0a:bf:66:db:d0:23:
18:f9:1f:53:6b:ce:f3:2d:85:22:98:62:d2:b9:48:
48:04:bb:49:d6:88:32:0f:45:99:97:de:4d:31:8e:
4f:8b:5a:c6:70:2b:8c:8f:d4:de:28:11:d0:aa:cd:
39:e2:ef:1e:56:95:b7:72:fd:09:52:35:59:cf:90:
ac:b5:27:ef:56:55:cc:d6:f0:a5:28:ed:1d:33:ec:
03:08:92:4f:e7:db:05:2a:7a:13:60:f5:cb:58:c4:
e2:2f:bc:a5:3a:1c:0a:53:eb:80:b0:c5:ca:a1:c9:
22:8d:ee:2b:45:fa:e3:c2:f4:b1:02:e3:57:48:cb:
cd:4f:87:dd:1a:8b:cd:a3:2d:6b:e1:28:8e:d1:99:
53:99:4b:7a:1e:90:fa:a2:4e:54:45:2f:b4:5c:a8:
0b:6f:c1:48:29:fe:b2:58:38:45:39:52:7f:66:23:
01:43:f0:88:80:3d:4f:6b:85:19:02:e0:8e:11:6b:
1b:49:74:f9:fb:73:b0:59:79:d1:3a:d7:ef:1e:97:
37:b0:b8:24:6e:95:6f:ae:fe:42:ae:94:1e:ed:b6:
da:f5:2b:d3:ca:5a:d1:2b:5e:6d:dc:49:2f:11:77:
47:15:43:64:72:09:de:14:2b:b2:79:f9:9f:ee:2f:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:B8:70:E5:66:44:D6:AE:79:9A:60:06:22:3B:47:29:0E:8B:60
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/vCm4cOVmRNaueZpgBiI7RykOi2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.88.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a6:39:ee:0c:ca:21:f5:7c:94:cd:28:17:21:85:a9:a1:62:
54:58:14:b0:fb:9f:c1:ff:68:6b:16:3c:a2:a6:84:e3:63:74:
e0:42:75:d9:b8:b4:1e:22:f5:d0:b8:35:f6:d7:3f:63:45:64:
d1:95:f4:3a:d5:6d:90:6f:5e:3a:74:83:9d:54:4f:c6:9d:72:
dd:3f:15:2b:d3:fa:64:99:80:5c:1b:71:8a:d6:c0:b9:82:db:
30:90:08:d5:2d:92:57:ca:a3:2e:ea:d0:7f:4b:ba:a6:44:ec:
8c:b0:ff:a6:05:59:14:43:8e:c5:37:ef:c4:fb:64:42:b4:33:
f5:5a:d6:a8:4d:99:93:9b:f4:90:ca:49:92:83:07:88:16:54:
7c:4e:4c:34:15:f0:59:e7:98:ae:1f:55:0d:ee:62:91:33:b9:
36:80:4e:42:da:d6:ef:2e:9a:c6:ab:4d:15:95:9b:f2:c1:94:
75:e8:34:be:e9:9e:16:ca:98:24:5d:31:95:e4:51:d7:b1:98:
da:cc:65:55:7e:15:ea:f4:0e:51:33:d3:49:b6:f8:36:c9:a8:
c7:0d:99:04:df:ce:73:a9:55:13:62:d5:b2:07:7f:1d:ca:fb:
68:5d:c2:a7:bb:18:38:ba:f7:2c:ed:67:2c:a9:57:fd:e5:d4:
0b:cb:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:05 2023 by rpki-client on console-fra.rpki-client.org