Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/1tobWFrzbVbyVl6jLRslypVRY60.roa
File: 1tobWFrzbVbyVl6jLRslypVRY60.roa (raw, json)
Hash identifier: tI7VR9YLeOWBeWywoMzdymYTrgBWvG5xZEyZk6Pqnwk=
Subject key identifier: D6:DA:1B:58:5A:F3:6D:56:F2:56:5E:A3:2D:1B:25:CA:95:51:63:AD
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 012D99
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/1tobWFrzbVbyVl6jLRslypVRY60.roa
Signing time: Fri 11 Feb 2022 06:30:48 +0000
ROA not before: Fri 11 Feb 2022 06:30:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209956
IP address blocks: 217.119.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77209 (0x12d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Feb 11 06:30:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6da1b585af36d56f2565ea32d1b25ca955163ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:53:e9:d3:d2:69:05:61:ac:b5:f0:38:99:
46:f2:17:ae:87:7d:8f:6c:29:d9:63:23:a9:db:d0:
bf:b1:c7:20:20:62:17:d8:20:62:de:01:5b:01:aa:
10:09:9f:03:5a:14:ed:02:41:ee:ed:b9:3b:2d:e1:
64:73:5a:15:1b:96:2e:1d:61:e5:ec:c9:04:b8:85:
88:af:29:fe:5c:98:d0:72:dc:c2:de:19:6d:c4:c3:
05:7f:2e:a5:1b:d5:82:54:e2:86:2d:1f:9a:c6:57:
6e:7b:11:42:50:74:f6:c4:0d:0d:ba:37:d3:0b:90:
1d:3c:08:31:f4:59:af:94:90:74:f2:bc:b7:c5:f9:
28:4b:5c:c2:87:c0:7c:11:6a:70:85:3e:87:fc:1b:
0b:85:18:13:ae:c5:ef:cb:26:57:ff:be:d1:46:f5:
8a:0b:43:88:c9:6e:33:bd:fe:c0:06:22:56:5e:65:
82:b1:44:38:dd:65:bf:2a:f5:b9:cf:1f:bc:40:ca:
ba:1f:30:11:a4:92:85:b3:4d:2f:1d:de:bb:27:0a:
41:0c:7d:d1:57:6a:09:38:15:ee:dd:0b:17:6f:7f:
d2:ec:53:e8:53:c1:97:cf:46:7d:92:78:c0:ef:8d:
4c:06:75:dd:c6:6a:b4:ef:e4:19:02:7e:66:0b:ec:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:1B:58:5A:F3:6D:56:F2:56:5E:A3:2D:1B:25:CA:95:51:63:AD
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/1tobWFrzbVbyVl6jLRslypVRY60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:50:07:93:32:c4:d3:0e:69:6e:8b:00:0d:76:67:c9:32:8a:
ef:5f:ba:f8:6d:a7:68:5c:a6:50:ad:df:30:31:2c:1b:c7:8c:
05:93:43:6f:25:57:85:b6:c4:9d:1b:f0:a8:86:05:1f:9f:64:
77:3a:3c:5c:e6:c1:ed:aa:b9:53:a0:11:6c:fc:54:34:cd:79:
9e:76:9a:9c:a7:fa:5c:b0:88:fd:01:bb:11:2d:34:c5:44:df:
40:67:56:77:5d:63:8c:73:10:3e:6c:af:d7:6f:68:91:11:18:
8b:9f:e8:6f:48:12:64:50:1a:65:39:68:74:40:68:8e:3d:5d:
3b:59:b1:40:dc:66:50:61:5b:90:33:b4:82:27:7b:69:b2:84:
0a:55:ee:3a:a6:69:2a:4b:89:7e:f2:64:93:f7:68:2f:e1:7d:
22:af:bc:c0:5a:49:39:21:c9:aa:11:db:d3:20:c4:34:eb:90:
9c:f0:74:87:a8:a9:ac:8f:7e:d1:6f:a3:34:fe:fc:d6:8d:36:
c3:22:15:0c:bd:54:ee:5d:3a:78:1f:2b:d2:40:0e:00:56:f5:
5e:39:f8:3a:8d:2b:30:f0:77:d8:c5:e5:d0:ce:55:4b:46:b1:
37:78:40:94:a2:f3:c4:01:63:4e:c1:6f:89:ad:52:61:75:89:
f1:75:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:29 2024 by rpki-client on console-ams.rpki-client.org