Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n8dm1iPk_IW3apc3num2m2J6pZs.roa
File: n8dm1iPk_IW3apc3num2m2J6pZs.roa (raw, json)
Hash identifier: XrQUSOqpCGipvWcvJDkLw1R5GHcwbPe5X+8r7+4P3Wo=
Subject key identifier: 9F:C7:66:D6:23:E4:FC:85:B7:6A:97:37:9E:E9:B6:9B:62:7A:A5:9B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42984490
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n8dm1iPk_IW3apc3num2m2J6pZs.roa
Signing time: Sat 01 Jan 2022 14:03:33 +0000
ROA not before: Sat 01 Jan 2022 14:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211564
IP address blocks: 192.165.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117275280 (0x42984490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fc766d623e4fc85b76a97379ee9b69b627aa59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:97:6a:f5:1b:9b:53:ac:30:a6:5f:d4:c9:
89:be:0e:26:cb:3e:bf:72:e1:f0:2a:a8:35:3e:2a:
d8:61:2b:e3:64:8e:cc:6b:c5:2a:5d:49:66:6d:43:
3e:87:17:e8:a1:b0:f2:b0:c1:3d:96:ae:f5:66:14:
e2:11:8c:fd:01:2d:71:71:ab:c9:93:55:a6:fa:3c:
db:39:3f:ae:fe:a7:08:84:fe:8a:0f:7f:92:8d:3a:
6c:8d:7c:01:b3:69:4d:00:3b:81:f8:5a:f5:06:b4:
e4:0a:7f:71:dc:c0:24:99:ad:cd:bf:98:d0:b2:cf:
3e:6d:65:5d:3b:ef:3d:70:04:e9:09:fb:5d:c8:46:
ea:7f:12:09:44:79:2c:00:eb:18:c6:5f:e8:84:40:
a6:bd:29:6d:d4:b5:5e:c5:1c:12:39:4a:8d:8c:62:
9a:45:be:02:13:11:a5:a3:fb:53:a7:44:13:f1:20:
d7:58:33:76:36:d2:68:56:de:a8:61:6c:4a:27:a1:
5d:ab:af:57:ae:e3:25:49:d7:58:9b:f7:1f:c8:e3:
4a:2a:8d:f0:bc:9f:1f:40:ca:8b:83:e9:aa:af:2e:
f8:58:25:22:8e:bd:80:85:e0:f4:2d:a1:fa:af:5d:
02:50:8d:4e:c6:35:6a:51:75:53:8b:20:de:17:f5:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C7:66:D6:23:E4:FC:85:B7:6A:97:37:9E:E9:B6:9B:62:7A:A5:9B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/n8dm1iPk_IW3apc3num2m2J6pZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.11.0/24
Signature Algorithm: sha256WithRSAEncryption
21:35:30:7b:48:b6:5c:83:e9:12:1d:a6:a7:8a:f0:a6:c6:7e:
8a:80:d6:63:77:02:b0:2a:2f:b4:71:5f:8e:f4:2e:d2:f9:64:
45:9c:f2:97:62:bb:32:29:2f:62:3c:20:2e:59:32:4a:05:ba:
49:0a:2d:85:d1:a9:cc:7e:70:af:53:d3:a8:b2:dc:a0:e9:45:
e6:3e:51:63:33:6e:44:4c:ab:8d:bb:78:1b:34:ed:a8:e6:0e:
cd:3c:b8:c1:7c:d9:9b:ea:38:6c:d2:cc:75:73:a9:1a:c5:b2:
09:68:26:d0:9c:6c:88:e1:73:f0:9f:da:6e:f0:ed:23:d1:30:
3c:4a:32:68:93:ed:c9:91:a1:f7:aa:73:1b:a3:86:01:58:c3:
63:c4:91:3a:7f:6b:4a:d6:74:c2:d4:da:ee:ed:34:3b:1f:4a:
d9:3f:59:eb:bd:75:80:31:6c:74:2a:62:87:76:52:09:f0:43:
6c:c1:4c:7d:6a:04:1a:8e:db:8c:af:d8:11:e9:0f:9a:f7:39:
b9:04:0a:64:a3:82:c9:a5:ac:9c:7c:ec:b7:d9:57:14:33:c4:
54:c0:6e:56:72:4d:09:6d:e8:82:bc:d6:59:8d:ea:35:fd:47:
08:98:88:ca:24:96:bf:e4:71:00:a6:68:be:71:be:71:68:19:
a8:12:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org