Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/poVjNHYzonOtnj3-Oau44kBgImc.roa
File: poVjNHYzonOtnj3-Oau44kBgImc.roa (raw, json)
Hash identifier: VAVayhHg1CwsnDKBSAicwtH2/ZHfRQkA/pqPYC5/bSk=
Subject key identifier: A6:85:63:34:76:33:A2:73:AD:9E:3D:FE:39:AB:B8:E2:40:60:22:67
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018283A6C8FEA15CE444E49D5498574B5903
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/poVjNHYzonOtnj3-Oau44kBgImc.roa
Signing time: Tue 09 Aug 2022 17:28:41 +0000
ROA not before: Tue 09 Aug 2022 17:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56309
IP address blocks: 203.159.92.0/22 maxlen: 22
141.98.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:a6:c8:fe:a1:5c:e4:44:e4:9d:54:98:57:4b:59:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 9 17:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a68563347633a273ad9e3dfe39abb8e240602267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:25:29:88:9c:5c:3b:cb:71:3e:f3:1f:32:
9d:7d:38:98:c2:36:82:b1:ba:15:d5:d1:36:d7:a0:
98:2b:2f:8f:ed:57:87:2f:d8:b2:16:da:e7:13:81:
84:4a:47:37:b0:11:6c:24:f6:05:49:66:a3:67:ed:
4a:4f:3c:6e:89:7f:09:4d:e7:31:0a:d5:11:41:02:
ac:2b:8f:6d:99:0a:e1:d4:e5:f9:53:e2:e4:c6:9d:
8b:d5:d7:4d:13:8c:55:e4:a1:22:b4:24:99:80:93:
03:54:a8:20:84:ea:c3:f1:0b:26:33:55:0b:c0:ea:
16:b5:15:29:b4:db:45:e6:c7:35:0e:b2:29:7c:49:
8e:e0:9f:f2:f2:0b:2e:f7:ad:ac:24:dd:48:1e:53:
05:73:e1:8c:dd:ca:44:89:5a:2e:f3:2a:08:b9:90:
6f:08:6a:64:70:e1:36:ef:2e:33:04:0a:c6:5c:4d:
48:43:df:bc:12:9d:02:c2:7e:a8:04:54:2c:0f:02:
b6:7e:f6:72:bc:b4:02:48:5f:ca:86:be:e9:2d:02:
5b:9f:c8:3a:54:b4:8f:7f:f7:31:60:83:4d:64:d7:
29:46:4f:66:df:08:66:dd:4e:bb:e7:1c:fe:d1:48:
fc:26:c8:f2:54:4b:c6:2c:e4:23:a0:41:81:c2:96:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:85:63:34:76:33:A2:73:AD:9E:3D:FE:39:AB:B8:E2:40:60:22:67
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/poVjNHYzonOtnj3-Oau44kBgImc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.16.0/22
203.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
24:39:1b:73:84:8a:5f:4f:a0:f1:70:3a:c0:80:05:d1:75:84:
9f:10:6f:38:14:5f:d8:64:a6:e7:aa:f0:80:dc:d1:39:72:bc:
39:b0:f8:ce:d5:6d:af:12:3c:7d:62:56:0a:12:04:73:da:fc:
81:64:80:1a:5f:e7:19:22:97:83:d5:35:a1:c7:b1:1a:56:eb:
4d:c5:83:35:f5:c1:86:c9:09:61:9a:80:28:97:f9:ba:cd:7e:
3a:1c:20:b2:bf:b8:93:0b:27:4c:f5:71:a8:11:18:2e:11:17:
6e:e0:be:77:5c:aa:ce:0a:79:7e:32:ae:03:1e:31:bf:94:f7:
cf:20:d3:cc:97:4a:ce:0d:b4:04:92:9a:94:66:28:1d:bf:44:
44:a7:bd:0f:3d:bf:91:2e:1f:d6:0a:3d:b4:d7:c9:64:ed:8f:
9a:4f:00:f0:04:3f:5f:46:29:c9:14:43:24:b8:72:8c:e5:cc:
19:2c:30:86:77:6a:f8:56:38:ba:df:82:65:1f:3d:38:7f:4f:
bf:ec:a2:ff:d3:17:de:b5:09:3b:33:ac:89:ad:d3:70:b9:6d:
73:9f:b2:e2:9f:1a:a9:03:46:79:08:94:73:70:2e:bf:82:d0:
39:db:a1:70:42:c5:a9:11:4f:15:ed:8f:82:06:5b:2b:3e:97:
75:31:c8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org