Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/A1ax5tXgHHk4F-dnnEstYhtp_Qo.roa
File: A1ax5tXgHHk4F-dnnEstYhtp_Qo.roa (raw, json)
Hash identifier: riwbalwCC1NPADbA3wgSFNafxnYJrn0dSg+DPS+6/VM=
Subject key identifier: 03:56:B1:E6:D5:E0:1C:79:38:17:E7:67:9C:4B:2D:62:1B:69:FD:0A
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A8CFEBD7ACAAEA0EEC15593A17FA236
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/A1ax5tXgHHk4F-dnnEstYhtp_Qo.roa
Signing time: Wed 20 Jul 2022 07:40:24 +0000
ROA not before: Wed 20 Jul 2022 07:40:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202453
IP address blocks: 80.120.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:8c:fe:bd:7a:ca:ae:a0:ee:c1:55:93:a1:7f:a2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 07:40:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0356b1e6d5e01c793817e7679c4b2d621b69fd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:0c:66:fc:4f:8e:3d:0a:4a:25:47:e2:54:
13:a8:44:13:b9:58:06:99:6e:42:fd:19:2a:0b:bb:
23:0e:cd:19:bc:96:80:ab:0d:84:43:07:5a:d8:e3:
72:17:7a:e2:f5:ee:42:4e:79:48:0a:0c:33:e3:b2:
f2:44:56:49:db:82:9e:f0:32:3d:49:1f:a2:5f:98:
6d:c5:4e:4d:ee:b1:81:3b:d9:86:e4:b0:cb:20:29:
ce:d8:24:6e:cd:ed:84:7a:4a:84:43:3d:c5:09:ff:
74:a9:8c:cd:2a:d6:7d:c4:6c:5e:37:c6:e6:50:0b:
18:2a:8c:84:05:29:8b:e3:af:62:c8:2c:59:8e:e3:
e6:38:22:56:3e:12:90:db:0a:ff:c2:28:75:d6:73:
0c:3f:af:ca:77:78:2d:56:fc:4f:49:4c:7a:51:b5:
c7:29:8f:53:b4:8e:73:74:43:7e:ab:49:14:83:40:
dd:f9:5f:e9:1b:b4:f8:cb:40:cb:33:cf:0f:6e:88:
5c:86:48:cb:ef:b8:d0:0f:95:ee:b9:2a:36:0d:c0:
b5:73:13:2a:42:02:dd:1b:fc:29:03:7c:46:a3:57:
4d:e4:28:3a:36:dd:21:25:e4:ee:fc:51:6b:97:fc:
7f:0a:3f:af:ae:a0:cc:04:0d:26:69:19:5b:8e:6f:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:B1:E6:D5:E0:1C:79:38:17:E7:67:9C:4B:2D:62:1B:69:FD:0A
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/A1ax5tXgHHk4F-dnnEstYhtp_Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.13.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e8:0f:90:21:9e:16:6a:1d:e7:e4:89:d2:0e:63:da:c2:50:
b2:c1:9f:9c:87:e5:e2:3e:07:97:10:6e:9f:73:17:88:b1:bc:
a4:34:99:9e:28:29:2c:14:01:c0:72:fe:92:62:b3:f2:b7:11:
5b:c3:ee:5c:c2:13:33:9c:af:bd:b5:ee:31:81:e1:96:9b:da:
78:7a:c2:f6:28:b5:7d:73:f4:fd:39:f6:f0:9b:6b:17:7f:c9:
70:a2:54:5a:65:56:1b:58:18:26:03:46:5a:4e:a7:94:44:9d:
1b:ed:18:d1:8a:1c:8b:0d:8e:12:7a:dd:d2:d2:9e:41:59:a3:
a0:68:8a:92:8e:71:d8:c5:3c:4f:61:e9:e0:28:9f:5c:e3:6a:
45:28:ba:3a:cf:9b:1b:e1:34:93:97:eb:64:e8:2b:5f:75:7f:
2a:11:fd:cc:d7:c4:06:26:a7:57:30:ce:99:83:36:45:69:c8:
2c:33:5c:0a:ad:a2:62:5d:08:88:5b:d0:25:07:67:e9:49:2a:
40:43:e2:b6:0d:92:92:fa:49:ad:89:da:29:6e:db:c9:4e:13:
39:fd:2a:4f:a8:b1:7f:26:89:9e:c0:f8:a5:0e:db:9f:2c:be:
77:da:1e:be:d4:e0:c5:8d:11:9b:d9:9c:41:1c:88:3f:59:67:
46:5e:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-ams.rpki-client.org