Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/8UcO41kJGYKrSMzXYD0l_1ILxtY.roa
File: 8UcO41kJGYKrSMzXYD0l_1ILxtY.roa (raw, json)
Hash identifier: p94Kcgma4RT6YPo18tloyeOQxXESmWA5yd9U4Je3OSY=
Subject key identifier: F1:47:0E:E3:59:09:19:82:AB:48:CC:D7:60:3D:25:FF:52:0B:C6:D6
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17D5DC11
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/8UcO41kJGYKrSMzXYD0l_1ILxtY.roa
Signing time: Sat 01 Jan 2022 00:54:32 +0000
ROA not before: Sat 01 Jan 2022 00:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42663
IP address blocks: 213.175.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399891473 (0x17d5dc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1470ee359091982ab48ccd7603d25ff520bc6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:0e:28:76:8f:ec:01:73:0a:f2:ab:f5:e7:
50:44:25:f3:71:b1:f9:73:cd:8c:c6:97:d7:58:2f:
cd:b0:23:29:77:42:75:e8:92:ab:df:ee:03:2f:47:
79:b2:70:0f:d3:76:f0:06:6a:98:de:b2:02:33:24:
16:45:e7:65:d5:84:9e:97:e8:1e:a8:c7:4a:df:f7:
d9:f6:b5:9c:03:8b:3e:28:d4:bc:db:9c:0f:57:55:
c1:a3:25:8a:92:0b:ba:e9:ac:cb:fd:6a:d7:0e:84:
b8:84:68:b8:83:3b:40:66:08:02:0f:b0:c7:88:35:
e2:38:ce:40:37:ce:53:06:10:6c:97:f7:3d:fd:30:
1b:98:eb:51:e1:89:bf:82:06:41:3d:40:f8:40:19:
e1:77:76:e4:87:f7:ed:38:9f:b5:08:78:cc:f9:c9:
cf:b0:6a:20:a9:f1:02:ee:3a:37:e5:56:8e:5d:f3:
63:99:94:6a:d1:8c:f2:ae:5e:74:aa:9d:1e:06:f3:
0d:90:f0:b7:ce:8e:4f:f9:66:3b:e9:57:ea:69:c2:
86:9c:3e:84:d9:0e:ac:9a:10:bf:30:3b:e4:56:ea:
85:41:1e:e3:fe:aa:9b:02:47:4f:9b:8d:a9:cb:f0:
fd:c0:bc:9c:44:23:6b:4c:61:17:66:12:e6:48:0f:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:0E:E3:59:09:19:82:AB:48:CC:D7:60:3D:25:FF:52:0B:C6:D6
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/8UcO41kJGYKrSMzXYD0l_1ILxtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b7:a5:c9:62:d6:8e:09:2b:6b:20:3d:2a:2f:51:0a:84:69:
17:ff:9e:4f:d5:3b:d7:7d:e2:5e:a8:40:4e:64:40:9d:1e:84:
c3:12:a8:30:59:14:f8:5d:71:0e:11:6c:0b:cc:fe:1a:da:7f:
46:73:eb:8d:3b:0b:24:f8:88:6b:5f:7d:86:ec:a1:c4:84:00:
ce:cb:69:76:44:f6:be:22:be:78:bd:86:5d:aa:b6:69:da:d1:
8f:c0:90:c4:d0:a5:7c:44:4b:5d:c5:b0:4c:0b:42:51:54:8a:
fe:cd:56:1f:c8:b0:81:32:71:ba:27:f9:7b:50:8d:05:ff:cb:
15:47:ce:68:67:2a:45:9d:7c:ee:f2:5e:1c:0f:b0:63:94:c2:
2f:69:49:a7:b6:ee:3d:13:dc:d5:21:03:1f:b7:fd:70:ab:7b:
a5:db:c9:38:7b:84:26:b6:78:c9:d4:26:61:80:07:76:f0:0a:
a1:bd:ba:d6:de:d9:24:78:0c:27:f5:2e:27:6a:4c:d8:09:ae:
74:39:f3:ac:6e:03:41:95:85:f4:ba:78:65:4e:70:fd:4e:4d:
74:67:4c:b7:fc:4d:8f:c2:e1:03:1f:00:37:52:ff:54:76:cb:
b3:04:b4:02:40:bb:aa:89:e8:ca:81:87:ee:12:85:3c:ca:b1:
f9:0f:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org