Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_jLjE5f553YMVCWcRygE8FUto3Q.roa
File: _jLjE5f553YMVCWcRygE8FUto3Q.roa (raw, json)
Hash identifier: 8aCne2o14YIT0KzQJxupkWX8QcbNlyWGucoKG8zfOug=
Subject key identifier: FE:32:E3:13:97:F9:E7:76:0C:54:25:9C:47:28:04:F0:55:2D:A3:74
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 426574F5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_jLjE5f553YMVCWcRygE8FUto3Q.roa
Signing time: Sat 01 Jan 2022 14:03:07 +0000
ROA not before: Sat 01 Jan 2022 14:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39020
IP address blocks: 192.71.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113945333 (0x426574f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe32e31397f9e7760c54259c472804f0552da374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:12:65:cf:ac:68:5e:f1:b3:c9:48:92:62:
4a:14:4a:4d:16:be:d6:17:e7:69:08:82:a5:fa:8c:
20:7b:71:13:2e:f1:00:07:90:ac:b6:29:c6:7f:cf:
a9:3a:25:da:ee:5f:11:2f:fc:1c:7f:a6:01:e3:f1:
3d:11:89:51:d2:c7:6c:dd:cd:f4:18:f2:3e:fb:2c:
d5:22:27:59:e1:a9:d0:02:ec:a0:ef:30:97:ae:83:
1e:73:d9:dc:90:87:c8:91:86:a5:53:aa:25:79:21:
78:60:ee:28:81:86:68:a3:7b:f9:e5:c9:1d:07:07:
40:03:4f:79:2e:49:58:56:2a:85:08:e7:95:74:a8:
f4:20:a0:52:96:fd:4a:52:06:68:6d:e2:14:15:46:
92:47:50:b4:49:21:12:c6:d8:7a:b8:37:ea:b0:2f:
d2:45:75:b3:2f:80:27:5c:5e:5e:93:1a:d5:bf:90:
eb:ca:cb:8f:43:c6:da:20:13:3e:2f:3b:c1:9c:8e:
51:9b:76:90:c4:9a:8c:61:9c:4a:99:78:e3:bd:68:
10:fc:35:37:f2:dd:9d:72:ff:59:5e:0d:22:fc:46:
52:ca:3d:48:39:24:31:fa:65:74:e6:e9:e2:6c:36:
fe:a3:0c:01:a7:4b:6d:e9:c9:69:4a:1a:9d:f7:c4:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:32:E3:13:97:F9:E7:76:0C:54:25:9C:47:28:04:F0:55:2D:A3:74
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_jLjE5f553YMVCWcRygE8FUto3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.213.0/24
Signature Algorithm: sha256WithRSAEncryption
af:20:9e:c1:5e:a6:c8:06:d6:b3:96:8a:5a:d0:65:cc:57:b0:
fa:f5:c0:57:8d:47:74:31:3d:05:2b:8c:ef:19:bd:87:5a:fd:
a5:f2:7c:ca:27:27:bf:08:1e:cc:67:a5:0f:65:02:bd:f0:d4:
1e:57:1c:02:5e:93:c7:84:b2:68:40:90:5f:33:0d:f1:4a:53:
f9:c0:83:f4:20:45:eb:bd:b0:8f:8d:41:3b:43:41:e8:3e:fc:
92:ad:ef:ed:be:7f:ee:d7:91:a0:ed:1e:fc:72:45:0a:d2:34:
0d:5a:96:56:96:68:32:e2:54:97:79:2c:04:e2:a7:40:04:83:
4f:94:98:28:7c:62:ae:f5:f6:78:29:63:a3:65:82:a0:60:cd:
3f:2b:d6:93:4e:20:21:8b:9d:0c:dd:83:47:75:35:78:14:f5:
9a:f5:4a:e5:a6:94:4b:5d:2c:b8:77:cf:26:b2:fb:80:87:60:
e0:c4:65:7d:82:c5:4d:88:fb:40:63:e3:98:bd:7f:eb:51:3e:
63:f6:38:e9:05:7b:5a:cc:86:0f:f6:6e:bf:f4:3a:f8:0f:7c:
b3:e9:8e:e2:73:ef:21:b5:29:3b:34:c0:7f:55:74:d7:69:2e:
fe:46:1f:cb:39:78:ef:a7:7a:05:00:d9:d7:18:dc:c7:75:48:
a1:f1:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org