Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h_KgD9YH2O4AQKwrIjAOJgutblY.roa
File: h_KgD9YH2O4AQKwrIjAOJgutblY.roa (raw, json)
Hash identifier: Wi9nfWhnNCboCEqP0KAiw2NZ8yldZVQTuM8qJZiekCs=
Subject key identifier: 87:F2:A0:0F:D6:07:D8:EE:00:40:AC:2B:22:30:0E:26:0B:AD:6E:56
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 43D0D3F9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h_KgD9YH2O4AQKwrIjAOJgutblY.roa
Signing time: Thu 05 May 2022 09:40:49 +0000
ROA not before: Thu 05 May 2022 09:40:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57602
IP address blocks: 193.180.239.0/24 maxlen: 24
193.180.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137759225 (0x43d0d3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 5 09:40:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87f2a00fd607d8ee0040ac2b22300e260bad6e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:a2:0d:94:f5:c7:13:86:92:70:e0:cf:c1:
f3:19:7d:81:b5:29:64:91:13:40:16:7e:27:a1:1b:
33:e7:f6:11:df:4b:fc:5e:2a:38:6e:40:40:c3:d0:
11:96:d0:c2:1e:0f:23:f5:b2:22:99:49:c2:fd:1d:
4e:59:57:1f:3f:4c:6c:bb:cc:c3:0f:83:2f:f3:47:
d0:2c:fd:b7:21:1b:04:14:6c:13:e6:a3:24:62:fc:
47:ca:21:f6:ed:76:a1:6c:cf:00:db:9c:8c:65:ec:
1e:70:64:50:83:ef:98:04:66:72:13:40:0c:c1:a8:
19:fa:89:0a:a1:cc:b7:42:8d:1a:f8:4f:b4:51:4d:
a9:30:d1:fe:f1:c8:79:5c:06:90:d4:8b:37:b8:9a:
62:3d:b2:04:e7:97:eb:cc:ec:ad:9e:ed:7d:58:ee:
1a:e3:65:3f:a4:e0:1a:12:fc:2d:b6:7e:b4:d6:8f:
1b:32:53:04:46:88:51:9b:b4:89:cc:82:c0:7e:9f:
90:e0:99:4d:d2:99:b1:c4:4e:bf:24:33:b0:17:48:
f4:75:91:bf:d8:4c:bb:3a:70:e4:a2:c4:88:9f:00:
1a:ac:47:a5:30:ff:19:61:1d:e5:ab:b3:36:01:61:
95:07:9b:e7:47:6c:56:46:d5:97:45:76:39:4a:84:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F2:A0:0F:D6:07:D8:EE:00:40:AC:2B:22:30:0E:26:0B:AD:6E:56
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h_KgD9YH2O4AQKwrIjAOJgutblY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.238.0/23
Signature Algorithm: sha256WithRSAEncryption
32:66:39:77:5c:21:a7:be:af:93:6e:ff:74:1d:ab:b4:47:8d:
86:ad:a6:c2:3b:4a:ab:82:eb:e8:ca:53:43:9b:f2:c1:1c:8d:
29:d6:13:03:c1:bc:81:72:6d:1b:c5:d0:53:0c:54:41:b0:78:
ed:c6:fe:8f:68:a7:48:cc:90:e4:59:b2:0a:b2:db:35:c7:a7:
f4:03:9c:e5:7f:df:02:bc:53:08:96:d6:cc:e0:02:dd:be:17:
81:b8:21:02:74:a0:d8:4a:6a:5d:28:10:b4:1d:46:ac:d7:1f:
23:e7:8a:1e:72:1d:47:40:df:46:a3:15:54:e4:2f:cc:f2:b5:
19:ab:d2:8a:95:c9:9c:83:1b:49:7c:9b:ac:51:58:c0:d3:5d:
8f:06:72:ef:ba:10:e3:3d:dd:06:f6:88:d1:0d:37:c5:ff:d3:
a1:ed:e6:a3:6c:cf:3f:b2:d8:00:22:17:0d:ba:47:c0:b7:04:
d0:e3:0f:95:d7:d1:f3:32:7c:82:da:b4:a1:04:f3:c1:5c:ea:
5d:f1:35:d9:cf:a9:3b:5f:bd:9e:61:14:b7:f9:7b:75:9a:c9:
0d:84:46:aa:e8:8a:0c:51:4a:17:ad:69:34:2d:e2:26:a2:02:
8e:ff:93:5d:c1:fe:6a:23:01:53:8e:dd:66:e4:7c:4a:8d:5c:
e9:b3:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org