Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/lgYwrhZvUqyGhkGKXYBy4oOljNQ.roa
File: lgYwrhZvUqyGhkGKXYBy4oOljNQ.roa (raw, json)
Hash identifier: at+XlL1zZ6jKZ4qqYDEJ04JEfbu+FhlqthO6zXXECS8=
Subject key identifier: 96:06:30:AE:16:6F:52:AC:86:86:41:8A:5D:80:72:E2:83:A5:8C:D4
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08ABD361
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/lgYwrhZvUqyGhkGKXYBy4oOljNQ.roa
Signing time: Sat 01 Jan 2022 11:04:14 +0000
ROA not before: Sat 01 Jan 2022 11:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62904
IP address blocks: 63.246.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145478497 (0x8abd361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 11:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=960630ae166f52ac8686418a5d8072e283a58cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:92:22:71:8a:62:b3:10:50:48:74:e0:ec:
71:51:9a:8c:8c:45:36:bb:78:39:73:f4:b5:ba:84:
0c:51:7b:37:86:f3:83:28:7a:98:92:1e:cf:05:b7:
33:2e:b3:e2:07:90:89:c5:4a:bc:a9:5d:98:69:f8:
01:d6:dc:87:a0:fb:38:b7:8f:d5:6a:21:df:17:b2:
0b:16:29:30:e3:47:4d:55:6a:5e:54:ee:af:ae:8f:
0d:5d:67:4f:70:2a:71:29:de:12:89:ef:eb:37:41:
00:d8:89:ed:f5:92:ae:f5:da:e5:9b:fc:6a:2e:58:
72:d4:b1:db:31:af:6d:ee:d3:ab:3a:26:e8:f1:1a:
b0:8f:a7:61:c8:41:bc:b8:f1:ba:e8:45:43:02:27:
79:0f:ce:17:59:22:bb:05:78:67:80:b9:4a:62:1f:
b1:a8:e9:a5:0a:44:35:12:d3:1b:a0:3f:10:09:79:
7f:2d:17:8c:2c:f5:2c:4f:e4:57:3e:c6:87:76:28:
35:55:d6:14:94:8c:74:dc:72:46:c6:e5:0a:f7:38:
15:8f:90:e1:81:ee:3c:f8:3e:e9:8b:b9:16:32:1f:
c4:2e:f7:16:11:e4:e5:55:e5:e1:a4:3a:49:79:76:
9d:b8:f1:be:8a:3e:5b:7a:e6:6b:1b:ce:98:03:0b:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:30:AE:16:6F:52:AC:86:86:41:8A:5D:80:72:E2:83:A5:8C:D4
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/lgYwrhZvUqyGhkGKXYBy4oOljNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:dc:59:35:d2:e4:85:7a:6f:4a:61:07:f7:ff:e8:98:32:21:
a5:80:bd:ed:fd:3a:3c:84:d9:eb:4a:5e:4e:a7:8f:0b:9b:70:
fd:ba:56:b6:0f:59:aa:a3:ee:b7:dc:0c:7a:a0:0d:91:ed:e3:
3f:d1:88:42:0e:e6:5f:49:31:8f:a8:2c:cc:87:51:ee:14:c1:
45:dd:38:80:0c:ae:2c:63:db:11:be:10:3b:81:fe:2c:c5:1c:
83:ed:7f:6d:c6:85:70:3d:67:57:66:db:7e:45:0d:e1:63:75:
1f:80:cb:e7:96:b0:f7:a2:ff:e6:11:c1:e0:3f:b4:4c:72:33:
66:ee:d9:5d:f8:6b:17:f9:e1:65:cb:ae:a4:ad:f0:49:a5:f5:
d6:3e:7b:12:64:58:2d:12:cf:00:f2:4b:4f:5a:2c:d9:70:ea:
e6:79:2a:cd:4f:18:ae:79:0a:cb:2f:3e:b3:76:86:09:83:1d:
45:66:5e:f2:69:01:80:85:2a:37:08:6f:1b:58:57:3c:ff:ee:
02:de:e6:3a:8b:07:e0:d8:e3:73:86:1e:97:b9:63:65:35:ae:
1e:06:f2:ef:7c:8f:91:bc:c0:99:33:20:42:19:32:e5:8e:ca:
04:3c:5b:af:4e:c8:9c:2b:b9:c2:2a:4e:6c:84:3e:be:a6:c0:
99:81:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-fra.rpki-client.org