Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/2aasC0aY5F0CTAfbSrFt9F09uY8.roa
File: 2aasC0aY5F0CTAfbSrFt9F09uY8.roa (raw, json)
Hash identifier: ZwKzn9lf+/r4hJrYR1IUiPSzZvr7iUk89YV2oZC0W3I=
Subject key identifier: D9:A6:AC:0B:46:98:E4:5D:02:4C:07:DB:4A:B1:6D:F4:5D:3D:B9:8F
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 54C6EC
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/2aasC0aY5F0CTAfbSrFt9F09uY8.roa
Signing time: Wed 30 Mar 2022 10:15:30 +0000
ROA not before: Wed 30 Mar 2022 10:15:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208346
IP address blocks: 217.198.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5555948 (0x54c6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Mar 30 10:15:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9a6ac0b4698e45d024c07db4ab16df45d3db98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:8b:91:b3:43:a4:a5:ae:4b:e7:16:4f:63:
8f:3d:ad:87:d2:f9:87:11:31:af:19:64:75:b1:6e:
c9:d1:aa:7c:60:0b:07:87:d6:06:71:3a:20:1e:f6:
c4:f5:70:e1:9b:1e:95:a8:80:d4:9d:02:b7:33:c6:
c6:54:50:98:98:c5:fd:2d:85:15:02:1d:f6:f9:90:
45:32:c7:ee:bb:9c:42:f0:f2:71:fc:34:74:4e:8e:
18:ee:ed:1e:55:05:cd:86:8f:56:eb:82:24:16:16:
81:1d:53:7f:a3:c8:54:57:47:b1:9f:bf:91:45:25:
35:0e:0e:76:55:47:e9:37:6d:03:c0:d8:3c:d3:ed:
6a:ea:4b:78:ec:61:4a:60:c0:eb:18:2d:d8:da:25:
73:3a:8e:1b:97:51:50:1d:b8:ae:3a:68:b5:ff:9e:
cf:5f:7c:c7:b3:58:ac:f0:94:18:ae:a8:82:66:d1:
a1:5b:fb:7e:15:32:5d:65:1a:e6:0e:1e:24:6b:98:
5d:d1:88:cb:d9:aa:c7:6a:90:ec:c3:db:ad:54:81:
ee:ef:5a:4c:e7:82:61:43:05:f1:bd:db:31:ac:77:
26:6b:d0:34:cb:51:cc:c3:9e:37:d1:bb:84:1e:b4:
af:cb:c1:9c:20:ea:1a:b4:ea:9d:fa:c8:a0:1c:21:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:AC:0B:46:98:E4:5D:02:4C:07:DB:4A:B1:6D:F4:5D:3D:B9:8F
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/2aasC0aY5F0CTAfbSrFt9F09uY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.186.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6c:10:8b:15:01:44:4b:9d:3b:67:8d:83:00:e4:5a:a8:93:
21:86:0d:68:5e:ad:27:b1:f3:1d:fc:63:10:ea:fa:5c:33:a1:
c0:aa:04:aa:67:0d:6d:0f:e3:cb:de:ad:9e:1e:ab:14:ba:e6:
fb:47:5e:57:9f:42:2b:bc:75:8b:ee:a2:eb:a4:f8:e5:19:50:
06:55:d3:00:eb:08:19:af:06:6a:63:ca:1d:df:b1:28:08:d5:
a2:43:44:2d:dd:12:a4:95:8c:f7:e4:e5:55:07:06:00:d7:82:
d1:8b:3f:af:28:39:f0:d8:b8:34:5d:09:43:8e:bb:01:85:0e:
84:b0:79:df:2f:56:d8:9e:90:7a:c4:c1:84:52:1a:dd:e8:6e:
4e:e3:ab:b9:0b:16:8c:cb:54:9a:51:df:3d:9d:b3:fc:6e:c4:
aa:cb:e9:94:3b:f5:a9:4e:b4:8e:50:d7:18:44:5c:e1:5d:95:
01:bb:74:c4:ca:7d:f7:58:9d:41:35:3d:e0:b6:e8:07:e3:34:
4c:e7:b3:6c:9d:43:b9:ef:50:d4:2a:d3:a0:8c:b7:5e:a2:1d:
c5:32:ef:e6:7a:d6:b1:c8:15:ac:e3:c6:aa:05:10:cc:39:d4:
8c:00:72:48:f0:37:b5:50:bd:7a:41:9d:62:53:48:44:b1:95:
55:52:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:07 2023 by rpki-client on console-fra.rpki-client.org