Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/xhYHkXyYTo8hqV_VNPYFykkxJ8Q.roa
File: xhYHkXyYTo8hqV_VNPYFykkxJ8Q.roa (raw, json)
Hash identifier: lQlaDoLi9oiilZDsImTZOpQHG4DRtjMZfYNqG9xl+yA=
Subject key identifier: C6:16:07:91:7C:98:4E:8F:21:A9:5F:D5:34:F6:05:CA:49:31:27:C4
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 179EEE99
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/xhYHkXyYTo8hqV_VNPYFykkxJ8Q.roa
Signing time: Sat 01 Jan 2022 13:03:27 +0000
ROA not before: Sat 01 Jan 2022 13:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207439
IP address blocks: 5.1.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396291737 (0x179eee99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 13:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c61607917c984e8f21a95fd534f605ca493127c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:e5:7a:dc:fc:e8:63:bd:06:d0:21:49:d4:
f9:8b:91:16:16:d3:d7:13:5b:7a:03:26:ee:c3:d6:
fd:92:06:38:93:71:5a:fb:8d:d2:13:de:6c:76:04:
8e:b6:5e:91:36:97:38:bd:7a:09:05:d0:2f:80:51:
b6:8f:e0:bd:bc:54:6a:a1:4f:fe:b1:72:dc:a4:70:
d8:6d:08:e2:d6:69:d3:84:d5:a4:97:b7:2c:25:41:
9e:d7:f3:0e:35:ca:a1:2c:c2:82:96:6a:04:a5:19:
13:88:6f:f8:8b:ee:cb:00:6d:e5:2c:d1:6c:3c:c5:
5c:97:40:c4:17:6e:98:98:0f:a2:e1:15:71:7e:56:
cb:0c:40:57:a6:9b:99:3c:97:f4:25:83:64:dc:22:
46:90:73:58:b1:30:8b:ed:88:e1:98:b3:74:55:f3:
e6:3a:54:81:77:ab:cc:71:5d:ac:5d:43:71:b8:f6:
88:64:b1:69:28:6e:b9:f0:33:7b:0e:31:95:4c:54:
92:b5:7f:78:30:dd:b2:8d:4a:59:5c:92:f3:27:9b:
3e:a9:a2:aa:78:86:4b:f9:58:a9:0b:ba:ac:eb:42:
ad:a7:92:c6:b1:8a:2f:2f:37:bb:48:ec:43:79:09:
9e:e0:35:d8:2d:ae:a7:21:b8:b4:c4:7c:df:9b:3c:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:16:07:91:7C:98:4E:8F:21:A9:5F:D5:34:F6:05:CA:49:31:27:C4
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/xhYHkXyYTo8hqV_VNPYFykkxJ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.67.0/24
Signature Algorithm: sha256WithRSAEncryption
25:75:e3:c2:40:f9:8d:8d:ad:0d:eb:aa:15:31:42:4e:89:30:
ee:6b:c2:de:7d:0c:21:82:78:92:f3:cf:dd:24:42:73:54:a2:
16:4b:cc:fd:12:62:dd:cb:c0:42:45:71:98:13:84:19:28:b2:
59:83:b2:3f:71:8a:21:44:5d:98:32:76:58:3f:78:52:ad:12:
be:a1:1b:d9:e2:b9:16:ce:97:6c:ff:a0:da:b3:55:57:47:85:
cb:8a:a8:29:a9:8c:d5:ea:e0:70:a4:0c:b6:28:8f:f5:7d:d9:
13:75:03:07:f3:bf:f2:e6:ca:d1:a7:72:0a:eb:78:e2:9f:4a:
5c:ea:b3:35:fa:88:d9:8c:b0:c2:3c:a9:9c:6d:96:ce:50:f3:
4b:e1:e8:d2:f7:06:6e:68:2d:37:23:8e:b7:70:43:ed:93:ef:
bf:28:11:0c:f8:72:b5:f5:2c:d1:c3:3a:e0:5f:bf:70:20:a1:
4f:a7:af:c6:3e:6e:7f:65:7c:c0:63:29:ff:28:80:29:23:da:
9d:07:53:98:78:84:73:0a:2b:c7:29:72:2e:15:1a:54:b1:d2:
10:58:5c:a1:e7:f3:97:b9:6d:45:11:fc:10:22:c2:ce:66:0a:
41:45:84:c1:8d:70:dc:1a:46:33:96:e2:5d:9b:36:3d:23:b6:
0e:20:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org