Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/238c_6IqUY8r18ooDC67ehCbloc.roa
File: 238c_6IqUY8r18ooDC67ehCbloc.roa (raw, json)
Hash identifier: Hc2VAPG02SY8coPowyh53YDVe2wuAtAyhveAGCsQICE=
Subject key identifier: DB:7F:1C:FF:A2:2A:51:8F:2B:D7:CA:28:0C:2E:BB:7A:10:9B:96:87
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42959B6F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/238c_6IqUY8r18ooDC67ehCbloc.roa
Signing time: Sat 01 Jan 2022 14:03:31 +0000
ROA not before: Sat 01 Jan 2022 14:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209797
IP address blocks: 192.71.208.0/24 maxlen: 24
192.71.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117100911 (0x42959b6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db7f1cffa22a518f2bd7ca280c2ebb7a109b9687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:67:14:ac:51:3e:ed:6f:1e:05:d9:f1:76:
60:c4:32:e8:c7:8f:42:91:23:aa:57:e3:4a:d2:5f:
83:19:ae:be:fc:22:e3:92:fe:b7:1b:57:b2:af:e2:
26:b1:eb:cc:4d:da:ac:b7:c8:06:2c:95:7d:d2:31:
06:7e:23:9d:f8:17:df:8a:3e:f3:13:f1:6a:74:ef:
a4:ae:e4:2a:48:1d:3d:0f:2e:7c:b8:ba:4c:b4:34:
3f:f9:27:c2:fb:dd:67:cc:ea:3e:9d:f2:53:d5:8c:
ed:eb:70:b1:dc:95:93:98:1e:0a:1a:ba:eb:4f:10:
47:fd:f3:aa:ca:57:6e:b7:fc:1c:fe:55:50:06:f9:
21:38:7e:f5:b9:46:65:54:55:26:f2:5d:48:4c:81:
fe:73:c9:96:46:41:ea:e6:35:f6:ee:e5:bb:8f:f3:
1b:50:8c:63:8c:b3:b7:6a:01:70:43:25:7e:bb:38:
91:8a:de:8e:51:ca:08:ed:89:fb:69:6a:37:8c:1c:
62:5f:be:dc:91:79:74:b0:f3:4b:30:b3:13:2e:d9:
f3:4b:95:e3:b7:2d:c1:9a:9e:c8:48:0a:6c:1a:37:
3e:25:94:2c:81:63:f8:60:dc:8f:52:f0:12:4e:ff:
ab:89:01:83:39:a0:6f:fc:a7:2a:86:43:9b:f3:e9:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7F:1C:FF:A2:2A:51:8F:2B:D7:CA:28:0C:2E:BB:7A:10:9B:96:87
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/238c_6IqUY8r18ooDC67ehCbloc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.207.0-192.71.208.255
Signature Algorithm: sha256WithRSAEncryption
bf:6e:32:a0:2e:c9:72:1a:e3:03:33:18:f5:6e:36:b6:a5:17:
e9:ae:2e:96:ba:ad:59:92:9b:29:59:3a:cf:30:10:bf:c3:5d:
c6:5f:f0:bc:5f:f2:50:98:fd:26:f4:77:f7:a6:79:25:5e:d2:
fc:7d:78:57:92:65:9f:cf:eb:2c:23:43:01:db:8f:63:59:32:
4d:4e:6a:a5:25:9e:bf:fa:3c:10:8c:05:58:93:51:a4:6e:ad:
2b:7b:45:04:01:ff:96:6a:ef:37:00:9c:9d:b0:2a:84:fa:ad:
ba:5b:18:80:77:2b:46:bd:4f:3c:f3:7b:c1:b3:67:33:85:9d:
f4:26:64:f8:ab:2a:9a:5c:db:94:36:53:5a:a9:cc:5b:84:18:
db:67:c5:75:55:1d:67:ba:f3:4f:31:e2:b1:b0:4f:7e:19:8c:
bb:23:b2:0a:07:1a:47:4f:3c:3b:a6:ba:61:94:eb:0a:3d:78:
52:91:8b:47:11:78:cd:71:e0:28:3e:df:d9:28:ae:15:3f:5b:
e7:c5:3c:c5:00:0e:e3:44:07:0c:7b:97:64:b3:30:24:3b:47:
b2:e7:2a:70:b1:6f:c0:df:eb:4f:5c:61:7a:4f:84:98:ef:36:
77:0c:1e:19:b5:65:52:5d:44:3d:68:41:72:d0:2b:af:1e:df:
f1:bb:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org