Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/XF6Y-CIOpbioKbp59xQbcMg45qc.roa
File: XF6Y-CIOpbioKbp59xQbcMg45qc.roa (raw, json)
Hash identifier: sgNG3y0PTiXzpnJSB9/T3xdifgESSptmqzxjotD3Ce4=
Subject key identifier: 5C:5E:98:F8:22:0E:A5:B8:A8:29:BA:79:F7:14:1B:70:C8:38:E6:A7
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0185114E287FBED2B9175C28CA4B17D407DF
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/XF6Y-CIOpbioKbp59xQbcMg45qc.roa
Signing time: Wed 14 Dec 2022 15:43:32 +0000
ROA not before: Wed 14 Dec 2022 15:43:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200598
IP address blocks: 121.127.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:4e:28:7f:be:d2:b9:17:5c:28:ca:4b:17:d4:07:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Dec 14 15:43:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c5e98f8220ea5b8a829ba79f7141b70c838e6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:21:7f:7a:9b:c6:74:91:67:44:29:e3:21:d2:
cb:a1:85:45:af:b3:ce:87:ce:80:e2:5f:aa:e5:3e:
3e:34:73:23:b8:78:7e:e7:a0:3a:7c:24:aa:d2:00:
41:dc:09:78:84:74:bc:e1:00:02:3d:50:bd:0f:f3:
8b:06:1e:9c:ba:3a:fd:8f:57:b1:ff:3d:74:3d:32:
c4:65:b4:2b:eb:c6:7c:e5:67:9a:66:67:f8:90:47:
8b:49:c1:e8:71:ca:2a:4e:d1:ad:03:2b:44:26:b3:
a6:98:db:ad:6c:e2:4c:80:f2:71:0b:5a:24:dd:ac:
e6:49:a8:bd:99:77:4f:7e:19:6a:21:51:80:22:38:
63:85:c4:d8:f4:15:b0:f2:ae:fc:5c:6d:e0:c0:0d:
20:1f:6d:ae:2b:e1:d8:9a:66:da:7b:07:89:27:95:
3b:13:fd:bf:68:16:90:95:ff:44:44:56:b2:d2:e5:
14:4c:83:4e:73:ed:62:b9:32:08:0c:b4:4c:86:9f:
e9:63:b7:29:15:4b:4a:48:e3:8d:90:d7:32:04:dc:
01:c2:32:3d:40:c1:b7:1d:e8:20:88:b4:b8:61:f7:
94:76:29:69:d1:d1:bc:61:54:28:f1:69:13:78:f7:
9d:59:4b:96:3b:bc:ac:cb:29:36:93:06:59:72:b0:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:98:F8:22:0E:A5:B8:A8:29:BA:79:F7:14:1B:70:C8:38:E6:A7
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/XF6Y-CIOpbioKbp59xQbcMg45qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.127.48.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:7b:7a:e3:b5:83:f8:56:93:8f:50:45:46:14:9d:83:0e:cf:
50:75:96:3b:76:df:2c:da:00:38:97:95:dd:33:f6:db:f4:39:
61:7e:10:58:e2:25:3e:ab:60:c9:54:3b:a3:d1:45:72:45:30:
f7:ed:3b:90:61:72:67:7d:c0:4b:99:33:56:90:85:ba:b5:a4:
00:b0:2d:90:7b:e8:63:96:5c:5b:38:70:ea:0a:09:a8:e1:db:
5b:be:8d:ce:65:4b:33:8e:2d:99:ae:c6:5d:d0:45:5b:66:1f:
eb:42:b0:cd:17:37:7b:d7:c0:07:16:5f:3b:e1:bf:b4:c9:42:
7c:69:17:64:a1:77:9c:29:41:4a:3b:5d:72:a6:86:06:fd:60:
c5:a5:39:0a:ae:5e:26:6d:ca:47:52:cb:f3:66:5b:1f:b1:3d:
05:a2:bd:75:1d:0e:c9:79:a0:aa:f1:5a:0e:9b:a9:84:c2:58:
14:00:14:af:5d:c3:97:08:86:6b:c3:49:99:fd:b5:96:4f:08:
3b:7e:23:66:97:96:c8:cf:11:aa:de:d8:57:46:a5:83:1f:49:
f5:6c:f0:08:0a:cd:1d:5e:05:cd:86:ca:f6:b3:05:c8:30:56:
97:97:7d:de:58:f6:f7:7a:4e:45:3b:66:d5:e0:02:ff:5e:91:
bd:d6:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:47 2023 by rpki-client on console-fra.rpki-client.org