Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/RQilKTr-mnt9C500lqOREG5q744.roa
File: RQilKTr-mnt9C500lqOREG5q744.roa (raw, json)
Hash identifier: C9EhTo1md58JvQf0SbSYzdGClm0/BTTU5THUzodnRvc=
Subject key identifier: 45:08:A5:29:3A:FE:9A:7B:7D:0B:9D:34:96:A3:91:10:6E:6A:EF:8E
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 1708544E
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/RQilKTr-mnt9C500lqOREG5q744.roa
Signing time: Mon 02 May 2022 12:21:10 +0000
ROA not before: Mon 02 May 2022 12:21:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34309
IP address blocks: 217.74.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386421838 (0x1708544e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: May 2 12:21:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4508a5293afe9a7b7d0b9d3496a391106e6aef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:48:6f:65:be:d6:a6:fe:48:db:88:3b:74:
c0:c5:b3:be:53:22:b1:c1:ab:5b:86:6b:dd:d5:96:
77:db:a7:3b:3a:2c:f9:09:09:e4:d8:da:bf:21:30:
d1:1a:51:32:b1:28:61:7a:94:2a:7d:fa:8d:dc:25:
58:93:7c:8b:cf:dc:f8:ab:cd:c9:28:44:52:45:a0:
a4:4b:e4:8c:83:ff:2e:2d:33:58:02:fc:bb:4d:70:
f9:64:a6:8d:99:43:bc:59:7a:41:53:20:d7:dd:3b:
3f:ea:a4:d9:96:17:36:cc:81:52:10:28:13:c3:c5:
16:54:54:9c:5b:ab:25:d8:9d:32:1d:8c:97:5c:a1:
42:6e:7f:54:2b:37:55:9f:c7:4a:13:61:80:7d:d9:
ed:76:0e:4f:50:00:29:b4:31:c5:0b:f2:e8:5a:12:
2a:2c:55:e0:fd:85:0c:cf:21:e7:68:59:69:4d:28:
8a:20:62:df:ef:df:40:d6:e9:17:7d:62:0b:93:4c:
9a:74:02:c8:7f:cc:97:b1:60:db:9b:5e:55:ef:87:
e7:00:95:09:65:9d:21:ff:cb:74:11:6a:f3:e3:1f:
95:86:f4:f6:bd:80:87:62:66:6d:d5:02:53:63:c2:
44:c3:77:19:eb:b4:7d:19:4a:6c:d4:24:3b:f5:bd:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:A5:29:3A:FE:9A:7B:7D:0B:9D:34:96:A3:91:10:6E:6A:EF:8E
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/RQilKTr-mnt9C500lqOREG5q744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.200.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f1:a3:a5:5c:f8:82:dd:07:9e:56:d0:11:42:df:6b:41:39:
51:40:5c:f4:6e:f1:23:27:2e:f7:05:f2:78:ca:96:21:df:6a:
66:d7:5e:2b:7f:9d:8c:6f:5c:ed:ff:98:ec:88:0f:9e:37:99:
72:79:fe:fb:ef:a5:31:2a:e1:e8:ac:22:e9:93:0a:cd:f5:3a:
fa:dc:0a:f9:fa:dc:9c:46:cf:da:1b:8e:38:66:1a:1f:81:19:
1f:28:13:5e:2d:8d:c0:53:50:5c:9e:91:e3:a7:4f:df:b1:d9:
e2:23:b3:b0:19:d9:b2:f7:5a:75:ad:51:53:16:29:f8:d1:81:
6e:9c:af:26:de:90:0f:df:58:0f:21:3e:cf:45:8d:16:e0:41:
0d:b0:c2:6f:57:53:38:20:90:59:41:23:08:72:d8:97:89:31:
ee:07:8d:95:64:99:22:ea:83:a1:6d:39:e8:0f:62:41:2f:5b:
07:d6:36:77:43:5a:c9:4b:ca:8d:08:ea:18:a1:1e:a9:f2:13:
7f:7a:02:33:42:72:f7:d2:d1:f8:5d:28:33:2b:29:d1:a9:89:
1b:c2:2e:97:ac:d8:3c:b2:1a:dc:5b:2a:68:3b:e1:44:92:36:
5a:c5:d8:4d:e0:2f:ff:d3:6d:56:32:8e:3d:f3:2e:36:c5:26:
d7:13:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org