Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/c-CIz-VLC1J78zL7-RxVxHSAUrc.roa
File: c-CIz-VLC1J78zL7-RxVxHSAUrc.roa (raw, json)
Hash identifier: F/kjCe6/qI7o0G2S2/kh1bCotHfZPZlc2TTyGg1ajKo=
Subject key identifier: 73:E0:88:CF:E5:4B:0B:52:7B:F3:32:FB:F9:1C:55:C4:74:80:52:B7
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 116BB7
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/c-CIz-VLC1J78zL7-RxVxHSAUrc.roa
Signing time: Sun 03 Jul 2022 06:42:25 +0000
ROA not before: Sun 03 Jul 2022 06:42:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 209.127.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141687 (0x116bb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jul 3 06:42:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73e088cfe54b0b527bf332fbf91c55c4748052b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:37:6b:55:b8:a8:55:2e:00:69:76:5c:56:
6a:67:48:9e:99:71:09:93:2c:ac:53:ab:78:a9:e7:
b0:d2:b0:d8:ed:ad:7b:82:3a:9b:80:a7:a9:14:b7:
30:aa:e9:eb:51:2f:7d:e8:d7:77:a5:a5:25:13:1a:
95:47:b0:5e:26:40:32:6b:df:ca:49:8c:fa:e2:87:
f7:5d:c3:9f:1f:c6:39:95:7e:15:01:ed:aa:77:76:
db:26:32:d1:1f:5c:ba:b6:e0:b1:4b:ea:4f:35:b1:
69:16:57:c0:65:67:d2:a1:75:6b:54:90:07:da:24:
23:b0:67:b9:5e:0b:70:5d:27:87:ad:82:e5:c4:2b:
32:03:1b:93:73:06:cd:bc:73:52:bf:ba:58:5f:8a:
b2:3f:87:74:26:1e:2f:d1:39:6a:20:b8:64:57:0d:
3e:f2:62:a9:64:2a:1c:c3:aa:de:bd:22:c6:54:43:
56:61:53:53:ad:bd:ef:59:d1:a4:23:ca:ab:c5:97:
13:e4:0d:c0:73:1e:e0:6a:c4:d3:c9:bc:73:42:78:
8a:bf:6a:28:c5:6f:bd:1f:8c:c4:45:b7:c4:17:e8:
ac:b9:1b:c3:2a:5b:30:92:1b:6a:55:e2:ed:13:8a:
d8:18:e4:40:35:09:31:8a:97:84:d3:d1:f7:61:a8:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E0:88:CF:E5:4B:0B:52:7B:F3:32:FB:F9:1C:55:C4:74:80:52:B7
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/c-CIz-VLC1J78zL7-RxVxHSAUrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.127.220.0/24
Signature Algorithm: sha256WithRSAEncryption
44:db:ff:8d:a1:0e:4c:e5:e1:e6:6a:44:9c:1b:8c:34:46:d7:
24:18:5b:1d:f1:37:0d:21:c6:2d:a0:eb:24:90:70:c4:1f:4e:
9e:4c:10:9b:ef:0a:c7:3b:50:74:47:19:a1:14:fc:25:1d:fd:
d9:49:55:9c:4c:6b:75:a7:de:a2:7a:6c:8a:0f:dc:94:bf:65:
9d:bd:de:0e:d7:bd:6a:b3:d2:0d:e5:21:6a:33:ea:77:84:f6:
da:45:86:b6:ef:c9:e4:90:7e:0f:27:79:6e:af:3f:26:93:9b:
7a:c8:07:34:3c:a3:eb:b8:c3:04:7c:2e:a0:c6:d8:27:2a:0d:
2c:f8:5c:2d:79:5d:9a:23:b3:f3:8a:7f:29:ec:96:45:3c:e0:
de:bd:0c:a1:59:aa:bf:fd:68:87:4a:d3:16:67:cf:09:07:22:
8b:26:64:b1:a2:0f:f3:a5:36:0a:f2:09:0a:44:e4:f2:00:47:
05:87:bb:cf:cd:7b:4e:8b:13:94:a9:12:75:c4:e2:58:4b:f6:
34:5c:d2:26:6c:6f:e2:1d:96:18:bc:2a:e4:aa:57:b3:7c:9c:
cc:f2:60:79:9d:5c:60:93:7a:f5:db:0f:b9:8e:2a:aa:9d:db:
ea:eb:1c:e2:7e:94:33:4c:20:4f:d1:85:db:16:d5:c4:3a:72:
be:41:45:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:54 2024 by rpki-client on console-ams.rpki-client.org