Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XA54bfoZDuZbyE3HlUW_VOXha8.roa
File: 2XA54bfoZDuZbyE3HlUW_VOXha8.roa (raw, json)
Hash identifier: CY5mX6OeqMD7UY8MB6A4vZGSGnLQ7lBYk0LAzWHDnfY=
Subject key identifier: D9:70:39:E1:B7:E8:64:3B:99:6F:21:37:1E:55:16:FD:53:97:85:AF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0182CAA1C6421C06F9F44B4481E3F2519EC8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XA54bfoZDuZbyE3HlUW_VOXha8.roa
Signing time: Tue 23 Aug 2022 12:16:15 +0000
ROA not before: Tue 23 Aug 2022 12:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47527
IP address blocks: 192.121.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:a1:c6:42:1c:06:f9:f4:4b:44:81:e3:f2:51:9e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 23 12:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d97039e1b7e8643b996f21371e5516fd539785af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:2c:a0:c5:c7:6f:ce:ae:ac:fd:36:09:ac:
2f:16:bb:55:ad:01:f7:ab:43:21:13:48:8c:28:93:
18:96:d9:1e:d2:9a:c1:71:b4:d8:f9:6c:73:67:51:
3c:e6:2e:46:9a:bd:13:ff:81:a6:ad:2a:f4:fe:b9:
2e:0e:9b:53:5b:64:cc:9c:45:fc:08:8a:b9:ea:d4:
1e:1b:ec:e8:b3:46:07:bd:7e:05:1b:32:53:81:0c:
c6:cb:5a:6d:8c:7d:5e:90:e6:56:9d:9b:63:be:88:
c0:95:c1:7f:6b:28:45:ae:e3:10:bd:b4:7e:ed:e1:
5c:8c:eb:6d:91:52:55:45:bd:0f:b6:49:6f:e2:ad:
67:27:63:5f:65:c7:93:ec:7c:85:80:17:8e:08:26:
ee:4a:e5:d2:82:4a:d4:24:14:f5:7b:71:1e:c1:b0:
65:e1:98:be:26:c0:b2:a6:4e:5e:77:af:08:f3:13:
5a:a5:c4:1c:82:ac:5a:c7:6c:4a:07:ed:b8:d7:6d:
84:c5:cc:ca:26:ed:06:65:f7:98:87:d4:48:83:c7:
c1:e9:d0:b7:e2:ed:73:c6:d9:55:96:9a:63:fb:f4:
64:ef:cc:9b:b7:36:7a:f7:20:98:37:08:50:89:22:
48:b3:8b:e9:0e:28:55:ab:6d:89:d5:13:e8:88:0f:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:70:39:E1:B7:E8:64:3B:99:6F:21:37:1E:55:16:FD:53:97:85:AF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XA54bfoZDuZbyE3HlUW_VOXha8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.236.0/24
Signature Algorithm: sha256WithRSAEncryption
75:90:b9:58:8b:10:70:23:f2:4e:53:6c:8e:9d:e6:35:e7:92:
10:91:b7:21:5a:8b:06:b6:71:ba:74:52:32:1e:9f:e4:99:3f:
7b:36:8b:43:e2:5c:8a:f2:fa:ac:7b:ee:14:14:3f:96:09:b9:
7c:02:51:79:90:3f:07:57:e4:bd:43:23:09:3f:16:e5:f1:58:
6a:3d:fd:be:bc:4d:d3:b1:83:32:39:fe:47:67:83:65:05:69:
2b:00:00:72:19:f5:82:0e:c5:1d:17:16:0c:78:b9:18:58:7b:
9c:72:d5:eb:37:ef:76:e9:cb:fb:31:8d:26:d5:f7:5c:e6:d9:
f9:dc:d3:11:61:e0:49:bc:0f:c3:4e:30:a5:49:12:08:0f:02:
32:f7:9a:8c:c2:ff:23:46:e2:37:b9:4e:36:f9:b7:d5:09:61:
1c:e0:3e:39:61:d4:07:0c:2b:c3:33:91:5b:9b:cc:f9:d3:75:
4c:68:3c:fb:e7:b9:af:a6:4f:7e:24:1a:f8:2b:5c:76:8f:df:
95:ea:9c:c7:09:aa:5d:0d:41:1b:19:b6:79:ad:fd:9e:0f:1a:
72:fb:49:6c:c5:ae:4c:fa:9a:ca:2b:d8:ef:b2:b8:60:4d:f2:
44:40:e3:d1:ab:1e:a9:3f:18:6f:07:b0:3a:49:5f:94:5c:a8:
8d:80:25:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org