Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XfMdGDB00Wt0h595ZXgA2EpEcfA.roa
File: XfMdGDB00Wt0h595ZXgA2EpEcfA.roa (raw, json)
Hash identifier: L+7eOGA7Qo7KCDJtga9UemfwN4ZyQwsj1NoUXzY8hvo=
Subject key identifier: 5D:F3:1D:18:30:74:D1:6B:74:87:9F:79:65:78:00:D8:4A:44:71:F0
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01852B8B0F9AF8A4B4B6EB1ABB46ED117EE8
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XfMdGDB00Wt0h595ZXgA2EpEcfA.roa
Signing time: Mon 19 Dec 2022 18:00:11 +0000
ROA not before: Mon 19 Dec 2022 18:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 80.246.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:8b:0f:9a:f8:a4:b4:b6:eb:1a:bb:46:ed:11:7e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 19 18:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5df31d183074d16b74879f79657800d84a4471f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:4c:85:c9:78:ee:c4:56:15:68:40:9b:26:
4a:80:c4:e0:da:c4:a0:72:62:59:08:7d:5d:76:2c:
29:ce:ac:7d:9e:45:df:9a:69:ba:12:9c:68:54:bf:
af:19:6d:b6:f2:89:25:a2:e4:a3:30:67:16:2e:2b:
7e:57:f0:be:46:a9:56:4d:60:6f:c2:0a:3c:e0:1d:
08:53:44:11:10:29:37:72:c6:96:17:d4:1b:87:eb:
fd:b1:a8:ad:de:7c:79:de:b5:ee:0c:d2:7c:f7:bf:
14:1c:c9:4d:88:54:fc:5f:a4:15:6d:34:9d:25:f9:
c3:53:f3:73:1b:cf:45:b7:ae:68:2e:a6:69:bd:6c:
72:f8:f8:a2:b5:08:c2:5e:0b:a3:e6:79:7a:f2:fa:
73:e7:1b:19:b8:68:d1:01:c2:60:c8:7a:d6:bb:8e:
df:95:70:12:a2:e4:60:56:96:b2:86:0f:fd:dc:f7:
95:f0:e8:83:43:25:ca:cf:17:0e:c9:ac:a1:97:b1:
72:13:a8:d5:02:b8:d0:37:6b:a4:1b:d8:27:a8:fa:
19:53:d3:77:29:f1:d0:e5:69:97:32:c4:5b:c1:5b:
c3:84:68:56:94:ac:d5:33:53:28:ef:55:50:c3:25:
39:b6:6a:15:e5:fd:74:fc:f9:e3:60:95:67:e3:e0:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F3:1D:18:30:74:D1:6B:74:87:9F:79:65:78:00:D8:4A:44:71:F0
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/XfMdGDB00Wt0h595ZXgA2EpEcfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
Signature Algorithm: sha256WithRSAEncryption
34:66:de:4d:4f:13:95:a8:34:fa:9b:7c:75:b5:81:31:3b:b9:
be:87:7e:57:f1:21:b9:98:3e:22:0d:19:75:0e:02:ca:23:13:
07:a0:33:ec:40:bf:77:db:58:67:fc:ac:e9:54:fe:43:9c:39:
75:8b:77:d0:bc:72:62:bc:8f:84:e9:50:ae:d4:0f:93:23:c5:
55:10:34:f1:ef:1d:88:9b:be:b4:dc:c0:e6:bc:13:d3:d4:64:
a5:2c:b7:0c:13:90:d1:18:1d:22:e2:ac:6d:46:81:35:c8:b7:
db:54:cf:44:ee:57:03:18:2c:7f:ec:4f:40:1b:18:96:be:4b:
20:b6:69:c1:8a:dc:9e:ec:05:51:db:50:53:0a:af:b1:13:4d:
c6:c2:07:05:3a:44:e3:7e:74:22:e7:80:1d:8d:0e:83:67:93:
ad:ff:76:bc:12:f8:3c:28:8f:92:04:16:c6:3c:8b:2a:70:e6:
47:52:3c:f8:6e:3f:76:ba:6a:9f:5d:13:c6:db:ec:1f:25:e9:
6c:74:05:92:66:3d:1d:bb:95:1a:e0:61:80:96:0f:30:45:51:
67:84:82:45:97:20:17:54:f6:85:65:cb:41:38:09:dc:25:ca:
79:c2:f7:77:79:98:49:41:d5:07:f3:33:ed:0e:8e:af:78:18:
54:12:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org