Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/veWDZFkcpSL9MNr7ZEC_Xc7YwPg.roa
File: veWDZFkcpSL9MNr7ZEC_Xc7YwPg.roa (raw, json)
Hash identifier: dcYMVddMPScC9dE+nhzjmy9tlQjzQq1Dn1LGYm0CGcs=
Subject key identifier: BD:E5:83:64:59:1C:A5:22:FD:30:DA:FB:64:40:BF:5D:CE:D8:C0:F8
Certificate issuer: /CN=7ffa51abea3e1f4223f540ef0d85b8dd99ee8bf6
Certificate serial: BAE7F4
Authority key identifier: 7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/veWDZFkcpSL9MNr7ZEC_Xc7YwPg.roa
Signing time: Sat 01 Jan 2022 06:53:25 +0000
ROA not before: Sat 01 Jan 2022 06:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 217.114.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12249076 (0xbae7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffa51abea3e1f4223f540ef0d85b8dd99ee8bf6
Validity
Not Before: Jan 1 06:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bde58364591ca522fd30dafb6440bf5dced8c0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:39:dd:2a:8e:e9:04:2d:69:21:ad:09:18:
71:ca:3d:42:25:70:99:6b:e2:36:08:b4:07:d7:a4:
56:f6:60:b8:d3:61:5a:5d:26:6e:8e:c6:99:a3:c3:
8a:5b:91:bc:fd:85:6a:f2:ab:0d:3e:49:ac:7e:5e:
0f:72:bf:fd:03:67:a0:3c:c2:8f:8b:59:3e:a1:b8:
3d:21:3c:03:d0:3b:1b:6d:6b:11:72:9c:3e:08:86:
38:15:1d:4a:29:96:30:05:95:4e:82:10:ee:d5:19:
ca:d7:11:36:8b:cf:10:1e:ea:0e:33:0d:35:f8:6b:
1d:5d:29:3c:50:59:79:2c:92:be:93:af:02:bf:cb:
a6:dc:88:33:0e:be:25:37:46:6a:4d:2d:e7:55:da:
aa:61:58:a6:dc:c4:35:81:dc:2d:90:5a:95:09:3f:
66:f6:21:a9:7d:dd:e9:97:00:e3:a2:51:1d:73:d5:
58:44:72:2a:40:5f:61:79:9c:8c:ea:46:ee:01:06:
63:27:cd:ca:b8:04:f7:66:be:45:21:98:6f:2b:57:
a0:2e:c3:d4:e6:47:d5:c1:3a:aa:d7:b2:ab:c6:55:
6f:44:77:ea:e3:4e:37:54:9c:0b:0d:43:d0:2f:10:
39:c1:25:9e:ca:77:37:3f:39:98:39:63:4a:56:f5:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:83:64:59:1C:A5:22:FD:30:DA:FB:64:40:BF:5D:CE:D8:C0:F8
X509v3 Authority Key Identifier:
keyid:7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/veWDZFkcpSL9MNr7ZEC_Xc7YwPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/f_pRq-o-H0Ij9UDvDYW43Znui_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.33.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2e:e6:e2:70:dd:18:b2:61:2f:f7:d0:43:4f:ec:a0:4c:91:
d4:e8:0b:e1:ff:34:11:3a:a6:c8:6f:e4:e0:52:cb:fb:61:9e:
b6:b4:00:20:b7:a6:8e:c4:dc:4f:55:0b:79:12:f4:c5:ce:59:
de:43:bd:96:f2:55:5d:ae:6b:d3:30:96:c0:4e:ac:2a:10:09:
5f:80:89:8c:b3:cb:ca:4d:1f:65:b0:2f:15:c2:50:4e:0c:9b:
ca:0b:63:e7:d2:e8:aa:a4:ac:54:53:b1:90:c0:5f:42:0f:6d:
7d:cc:32:a3:39:b7:1c:5f:2b:a5:1d:72:85:33:f8:15:61:a6:
d3:53:3c:5c:07:e7:f1:14:56:d5:b6:8e:43:f9:47:00:9e:0c:
76:e8:8a:85:2a:bf:59:0f:8e:08:6e:5b:ab:58:50:7d:33:6e:
cd:61:59:23:b6:e9:a8:2d:68:3b:b2:25:93:00:97:30:14:0f:
a3:80:bb:6b:5c:98:9a:4c:59:da:a0:66:9a:d5:d1:9e:8b:b9:
69:86:1f:ae:ac:24:4e:19:de:2e:ee:45:6c:54:aa:08:b3:3f:
7f:8a:76:23:50:8f:88:50:32:6b:da:73:fb:eb:9a:d3:f4:c9:
e9:6f:88:c2:24:49:18:52:bd:b5:7d:23:14:0f:aa:cb:f6:c3:
11:f6:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:28 2023 by rpki-client on console-fra.rpki-client.org