Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/9jPldB3mKPpapmLaObMMQ89fj9A.roa
File: 9jPldB3mKPpapmLaObMMQ89fj9A.roa (raw, json)
Hash identifier: XmxMfVf2yyiDjGUYP+vOI1lHdYrrYcwP+BhuC7ftci4=
Subject key identifier: F6:33:E5:74:1D:E6:28:FA:5A:A6:62:DA:39:B3:0C:43:CF:5F:8F:D0
Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial: 016BD1
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/9jPldB3mKPpapmLaObMMQ89fj9A.roa
Signing time: Thu 09 Jun 2022 08:25:02 +0000
ROA not before: Thu 09 Jun 2022 08:25:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25545
IP address blocks: 217.15.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93137 (0x16bd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Validity
Not Before: Jun 9 08:25:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f633e5741de628fa5aa662da39b30c43cf5f8fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:e1:f5:c4:59:a1:c2:05:7d:66:a6:84:bf:
21:44:32:2e:c1:08:9d:a8:2f:48:f9:59:84:de:d8:
d0:00:5b:6e:97:f2:3e:92:00:c5:39:75:43:70:02:
1e:e7:1b:3a:11:59:9f:d5:be:49:ba:87:6c:09:44:
13:26:cb:f0:3c:63:f3:9b:ab:f2:25:62:2a:5f:92:
e9:38:d6:af:e9:61:be:7d:3c:47:e0:c9:32:57:cd:
cd:21:df:1b:11:0e:7f:bf:b7:50:72:db:cc:43:da:
1f:a1:02:98:88:7a:60:ca:9c:ce:84:56:8c:9b:d2:
a0:71:e8:c2:70:fe:98:2c:9d:29:e3:7a:3a:4c:25:
88:16:b8:9a:26:bf:c6:8e:23:c8:d7:16:ba:78:c3:
e9:97:ce:ea:cb:17:a8:32:6a:5c:bf:b1:fd:e4:ba:
92:5e:c2:a0:6e:37:7c:a5:74:52:2e:08:0c:40:69:
e1:ed:eb:84:d2:2b:b9:76:60:a4:ec:f2:d0:da:02:
6e:9e:5a:70:58:0c:1d:fc:79:0a:07:9a:44:70:a9:
66:49:47:ca:48:27:0f:8f:e2:b8:7b:2d:f8:d4:04:
d5:ec:5b:58:9e:6f:5e:5a:68:49:e6:e0:ad:0d:7f:
42:c2:cf:0c:77:84:b7:9b:71:73:6a:2a:df:b1:af:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:E5:74:1D:E6:28:FA:5A:A6:62:DA:39:B3:0C:43:CF:5F:8F:D0
X509v3 Authority Key Identifier:
keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/9jPldB3mKPpapmLaObMMQ89fj9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.15.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:82:34:ae:c2:03:8b:46:f1:a7:7a:df:b9:6b:d1:6d:54:bc:
60:93:90:16:63:ca:9a:c1:03:e5:ad:61:53:2a:7c:d8:b2:1a:
63:53:6b:a9:ff:35:61:52:f9:4d:23:39:f0:2d:eb:63:32:e2:
fb:de:39:66:fe:94:27:05:e0:26:cd:2f:1f:ff:31:e3:41:76:
a0:3b:72:e2:9d:a0:b6:c4:6f:3f:81:b8:6e:73:fc:7a:ab:a2:
52:54:53:7b:2b:44:d0:09:49:64:89:30:e3:95:95:2f:0b:98:
52:72:d8:bc:81:50:7d:d7:04:37:41:ca:3f:b6:c4:cf:27:5f:
b2:ce:a5:3b:13:56:ec:15:ca:f3:c4:36:24:cd:4f:af:72:87:
10:bb:80:ee:86:fb:3e:7d:30:31:63:31:14:d9:3f:9b:9f:cf:
5d:45:2b:14:f1:64:67:44:23:da:15:10:32:8e:14:2b:80:14:
f1:1b:d7:f7:50:50:c8:89:a7:9b:af:05:9f:ad:1d:11:8d:b7:
f3:40:b5:df:76:ac:5d:d4:aa:8d:83:f4:c7:d4:01:51:17:86:
0b:f4:76:b0:85:c5:2f:fc:12:6d:07:95:f6:59:4c:d1:55:a0:
82:58:43:ee:d0:3a:66:5a:9d:c0:b9:c9:b3:b5:94:05:e8:42:
f2:13:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:05 2024 by rpki-client on console-fra.rpki-client.org