Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1vh-J9afrrixxEwy3ZpyQIaodBY.roa
File: 1vh-J9afrrixxEwy3ZpyQIaodBY.roa (raw, json)
Hash identifier: 4ibHMVz5E3C/U5F+/nAd5YHra/LuUZ8giLdImQCFRW0=
Subject key identifier: D6:F8:7E:27:D6:9F:AE:B8:B1:C4:4C:32:DD:9A:72:40:86:A8:74:16
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 425C7D50
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1vh-J9afrrixxEwy3ZpyQIaodBY.roa
Signing time: Sat 01 Jan 2022 14:03:02 +0000
ROA not before: Sat 01 Jan 2022 14:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 192.36.247.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
192.71.255.0/24 maxlen: 24
192.71.254.0/23 maxlen: 23
192.71.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113357648 (0x425c7d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6f87e27d69faeb8b1c44c32dd9a724086a87416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:b0:e0:92:19:b5:66:3d:63:e8:17:5e:be:
4d:00:fb:a2:76:dc:a4:33:ee:62:5f:91:f7:c9:62:
59:ad:b0:a1:97:a7:97:47:c6:64:3c:cb:05:fe:c8:
66:f6:2d:27:96:bf:77:76:50:56:8c:83:4b:22:da:
29:c0:a2:26:da:eb:4d:f8:f8:ca:4a:b9:b1:10:db:
ed:89:b2:26:11:a5:4c:7a:6d:09:fe:c3:55:05:af:
e2:09:75:2d:4f:41:cd:d0:26:ab:9b:13:d6:f9:76:
49:1a:b5:a8:1d:8d:87:f0:f3:09:35:b9:7f:f6:e1:
4c:ce:26:a7:5e:57:b1:64:56:75:11:71:2d:9d:ca:
e5:d1:74:3c:4e:bb:79:5b:8f:8a:cb:f6:a8:13:8b:
c1:d6:3c:5f:70:a1:d8:f4:ff:9b:ab:2d:36:c9:70:
0d:e0:be:84:ef:75:60:ea:64:9e:75:85:e0:60:0f:
42:b4:a1:b0:de:03:ab:2d:f6:49:b0:07:cb:a0:45:
bc:0d:1c:d1:e5:92:89:0f:2c:76:55:cd:9c:c1:76:
1c:2d:05:4b:a2:59:3d:bf:2d:9f:09:26:d4:91:93:
ba:61:74:e0:01:fc:a3:0d:9f:79:74:2f:61:81:c7:
18:b2:ac:bc:1a:85:3d:76:cc:98:ee:3a:69:ae:a7:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:7E:27:D6:9F:AE:B8:B1:C4:4C:32:DD:9A:72:40:86:A8:74:16
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1vh-J9afrrixxEwy3ZpyQIaodBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
192.71.84.0/24
192.71.254.0/23
193.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
63:f3:34:5c:ab:1f:90:1c:8d:70:fb:fa:d6:4b:f0:8e:79:d9:
06:48:a0:fc:ec:b1:d9:05:fe:f2:24:95:1e:1f:2f:3e:62:1b:
31:92:c0:f3:8f:4e:8e:ae:77:52:63:d1:67:91:9c:be:89:39:
a9:3e:c8:c9:dd:09:91:a7:eb:f7:2d:a5:ed:ea:70:3c:b9:dc:
33:58:28:14:45:cf:6b:f0:a1:fc:bd:a8:51:b5:4d:1e:be:a3:
03:85:87:d0:d1:a4:ff:64:f9:35:f3:e4:b6:c8:00:08:17:cb:
5e:72:6e:5f:8d:d1:cd:31:d1:32:c8:03:33:ac:79:4a:2c:d3:
7d:b2:22:92:45:e5:ea:fc:bc:55:36:7c:ce:83:cc:ea:c0:76:
5f:12:f8:8f:0e:c8:ad:cc:13:f7:07:21:73:01:7a:f7:c4:f5:
64:83:d7:de:f0:c1:d6:5f:a8:33:1e:9f:3b:33:ba:6b:12:d8:
a4:9e:a0:a8:19:20:24:66:9d:6e:cd:17:04:76:43:4a:0e:71:
f9:05:00:9e:d8:05:0c:0c:3a:6a:77:f6:c5:5e:31:59:6e:6e:
54:34:c1:67:60:1d:c3:50:3e:6c:43:5d:59:3f:62:d2:3d:71:
2b:a1:1e:12:e0:0b:68:57:02:32:b2:81:cb:6e:82:ec:d7:1e:
3a:4f:b7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org