Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/_9N1uc0EoszZlKrXSUfy4W2kacA.roa
File: _9N1uc0EoszZlKrXSUfy4W2kacA.roa (raw, json)
Hash identifier: 3sercTCQmGP7ikTJJ5TkKs/ywreT7kKDCls3RJdhtTo=
Subject key identifier: FF:D3:75:B9:CD:04:A2:CC:D9:94:AA:D7:49:47:F2:E1:6D:A4:69:C0
Certificate issuer: /CN=85af77d448a811387a71527fc334dcc4ff71de8f
Certificate serial: 022182AF
Authority key identifier: 85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/_9N1uc0EoszZlKrXSUfy4W2kacA.roa
Signing time: Sat 01 Jan 2022 14:59:05 +0000
ROA not before: Sat 01 Jan 2022 14:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 192.175.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35750575 (0x22182af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af77d448a811387a71527fc334dcc4ff71de8f
Validity
Not Before: Jan 1 14:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffd375b9cd04a2ccd994aad74947f2e16da469c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:52:b3:85:8e:d3:62:8b:a4:c0:d4:6c:98:
39:24:7c:e2:4b:e1:e1:a1:98:18:1e:da:7b:64:85:
71:dc:07:88:c6:cb:4d:fe:a1:f1:d7:d3:a9:83:32:
68:be:53:0d:9c:c8:64:40:c1:70:f4:e9:dd:d6:ff:
d7:d5:b4:19:ac:fe:a1:cf:97:c5:15:c7:ba:70:93:
f5:aa:02:ce:29:94:c4:78:5b:8a:bf:11:d5:3e:6b:
da:d6:0c:8e:90:17:3b:b9:41:18:7d:0a:90:4a:90:
8c:4f:97:77:34:4f:34:3e:c0:fe:53:34:7b:44:85:
40:8d:31:fa:cc:fe:e0:d9:02:54:35:17:ae:a3:8e:
de:e0:ef:89:f0:14:37:c2:43:21:c2:b1:33:cd:6d:
8d:16:3d:85:9e:f5:ba:74:d6:c4:e7:60:49:32:b9:
c6:1a:bc:d9:57:6f:be:03:76:e7:80:07:10:88:4f:
d4:8f:c9:c9:f0:17:76:38:a9:b4:38:23:67:3e:ef:
35:d2:95:8d:9f:0b:4e:ea:00:8e:41:6e:9d:be:61:
5b:09:c5:0a:4f:24:75:0f:c6:db:d1:b2:56:3f:6f:
ba:ca:48:e0:d6:4d:38:78:18:43:d7:38:cf:eb:05:
e9:73:14:fb:3a:12:96:8c:c0:d2:c2:93:a5:86:d8:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:75:B9:CD:04:A2:CC:D9:94:AA:D7:49:47:F2:E1:6D:A4:69:C0
X509v3 Authority Key Identifier:
keyid:85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/_9N1uc0EoszZlKrXSUfy4W2kacA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.175.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6c:cd:47:37:15:44:a3:79:ab:c1:57:ef:66:c6:49:a5:db:
7e:7d:ba:0f:4a:d2:38:23:e2:99:1d:56:e4:a7:f4:0b:d0:e8:
00:e4:b4:c5:a0:16:5f:f5:28:c0:e4:5d:99:1c:48:c4:9b:f1:
01:3f:b1:18:ff:28:e9:4d:e8:df:eb:ba:ff:4b:2a:a8:a6:b8:
af:66:62:6f:a5:db:16:00:94:7d:39:c4:6a:26:76:6c:4e:b1:
78:98:ec:33:44:16:6d:bf:c0:98:2d:b7:22:f4:e7:8f:a4:3a:
3e:7c:be:12:9a:e7:e6:c9:ab:fe:58:58:a0:40:99:30:25:81:
86:b6:41:d3:5d:a1:ba:33:4d:2d:f3:43:c4:38:c0:29:2e:f5:
20:4e:ad:eb:6f:79:5a:53:36:93:5e:b6:b7:da:a2:a7:36:2b:
36:96:fa:d1:db:7b:ca:65:32:2e:32:57:4c:90:c9:d6:f8:c3:
d3:7f:14:70:cc:1c:bc:08:c6:20:3f:71:94:28:8f:b3:10:e5:
e2:86:e7:b5:78:20:ea:15:a5:9b:c2:47:0a:e1:aa:fa:92:53:
d7:ce:f5:c8:fc:30:f5:b9:f5:8e:88:03:34:b1:88:7e:d1:50:
4d:30:de:e0:bc:d4:6d:10:e4:51:d3:00:7b:9e:d6:69:b3:0a:
43:ef:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:51 2023 by rpki-client on console-fra.rpki-client.org