Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mXO2nrq1Dhz9cS-L26MRhtkky-A.roa
File: mXO2nrq1Dhz9cS-L26MRhtkky-A.roa (raw, json)
Hash identifier: ohGyUUjsx+GiKRcbCweXH/iA0r2KLHgn10KdnGRs8K4=
Subject key identifier: 99:73:B6:9E:BA:B5:0E:1C:FD:71:2F:8B:DB:A3:11:86:D9:24:CB:E0
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 426F9AE8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mXO2nrq1Dhz9cS-L26MRhtkky-A.roa
Signing time: Sat 01 Jan 2022 14:03:15 +0000
ROA not before: Sat 01 Jan 2022 14:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48894
IP address blocks: 192.71.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114610408 (0x426f9ae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9973b69ebab50e1cfd712f8bdba31186d924cbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:41:6a:a3:f9:e6:ad:01:b4:3a:6b:96:6b:
5c:1f:fe:53:4d:04:3f:e1:c9:d8:14:ce:9c:59:22:
e2:2f:27:3a:2c:fd:a3:5a:6d:52:8f:de:1d:83:4a:
31:f2:f3:40:8b:2a:8c:98:01:37:19:01:26:c3:fe:
f9:3a:25:b7:9e:0e:95:c1:fc:27:a8:62:ec:d3:e5:
02:25:c4:ee:71:ef:d5:f6:53:5f:9d:9b:67:58:6a:
1a:92:51:9c:be:c9:54:53:53:8d:ca:61:e7:b1:91:
ce:19:d2:79:de:10:f5:df:b4:69:b0:56:32:4d:5a:
bb:b5:35:b0:0c:00:5d:05:a9:f0:02:9f:f9:1e:4b:
ac:82:27:df:7d:e4:7a:3d:a2:45:bd:ca:c7:ce:7d:
ec:75:48:0e:42:f6:32:72:7c:ed:c0:50:38:1c:59:
8f:b3:db:98:0b:ce:9e:81:c6:3f:8b:66:81:ce:68:
7e:4a:6d:99:2d:f6:7e:ee:aa:35:fa:bc:6c:0b:39:
5b:37:76:f6:2c:9d:10:9c:56:6d:2c:68:67:5f:08:
6e:3b:b1:28:a9:44:c7:13:db:12:8b:d0:96:27:99:
76:94:7c:3d:e0:9e:1d:a5:30:e7:b1:1a:12:af:0f:
b1:fd:8b:f8:9f:94:a3:60:82:b8:f5:6f:83:95:f4:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:73:B6:9E:BA:B5:0E:1C:FD:71:2F:8B:DB:A3:11:86:D9:24:CB:E0
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mXO2nrq1Dhz9cS-L26MRhtkky-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.244.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4e:e4:9f:96:6c:f7:42:3f:b4:5a:f1:5b:56:97:63:9c:bf:
be:93:be:d7:23:77:86:4f:d1:e9:c9:9c:dc:ca:23:cf:b0:01:
40:2c:df:e0:cb:ae:c4:e5:de:08:66:bd:13:78:a0:73:b2:bf:
30:4c:a4:d6:2a:4e:ca:19:38:c1:fc:e9:42:c4:86:c2:27:1c:
fd:96:2f:26:23:20:5f:8e:72:ca:eb:d0:ae:b2:f7:0c:fd:12:
a8:8d:0a:06:be:c9:11:05:e9:6d:44:e0:39:e0:42:57:3a:08:
b7:b1:57:39:cc:c3:4c:40:bc:7a:fa:b0:8c:c8:95:a9:af:2e:
2f:ab:8d:5a:24:6a:89:0c:de:d3:ec:d3:7b:ee:5a:9c:e9:8d:
6b:38:21:d8:48:c2:94:a7:6b:36:df:d1:ca:1d:e4:67:37:b7:
1b:6a:79:f3:cc:9c:5a:a3:ac:1c:a8:fb:da:c3:17:6d:2d:25:
1d:a3:c7:20:53:0e:63:f7:80:e5:d9:d7:4a:e5:10:a5:93:c8:
83:e4:c3:70:4a:39:3f:ea:bb:49:04:fb:04:ca:b9:f6:f3:43:
9c:07:20:0c:f3:99:ce:ce:ae:ff:e2:ec:3a:ca:29:62:b1:3b:
90:4a:59:c2:d9:8f:c2:d2:e7:57:6c:1f:a1:2d:45:f6:32:7d:
a3:3f:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org