Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Y9_Ph1DCouV3Sox0GwLleX0BzxM.roa
File: Y9_Ph1DCouV3Sox0GwLleX0BzxM.roa (raw, json)
Hash identifier: 59r+nY+CsTCYbeOpmCr9XqQ06p1mCnjJEjR7VwRvaAQ=
Subject key identifier: 63:DF:CF:87:50:C2:A2:E5:77:4A:8C:74:1B:02:E5:79:7D:01:CF:13
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0181DDDE51E535FCFB86AA68FA289A1D8238
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Y9_Ph1DCouV3Sox0GwLleX0BzxM.roa
Signing time: Fri 08 Jul 2022 12:52:23 +0000
ROA not before: Fri 08 Jul 2022 12:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 217.25.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:de:51:e5:35:fc:fb:86:aa:68:fa:28:9a:1d:82:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 8 12:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63dfcf8750c2a2e5774a8c741b02e5797d01cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:55:ae:81:c6:87:39:fb:f3:c8:0c:4f:63:
6a:71:41:0e:3a:06:95:80:00:15:67:fc:19:53:32:
c6:84:00:93:49:f9:7a:23:b0:ff:7c:49:a8:1c:a8:
bf:66:cb:1f:62:54:48:ca:1d:f3:f8:c8:ab:82:7d:
95:69:e7:2a:90:dc:20:b9:75:dc:1f:b8:36:83:1a:
91:59:31:cc:b8:ff:16:2a:b5:72:c3:6b:2a:7a:a2:
02:0d:85:11:78:70:10:ef:d8:7b:30:bd:dc:9e:a7:
77:57:0a:15:04:a5:67:14:ed:58:eb:0d:0b:a0:a6:
8a:4f:33:3b:ca:36:9f:cf:35:e0:21:8a:e1:4c:57:
40:ae:48:b7:fb:6e:7a:29:43:2e:9a:4c:ff:aa:3c:
17:dd:c6:b6:52:ff:74:99:1b:fb:85:74:e1:e4:a9:
5f:5f:4d:92:9c:4a:27:8e:88:ec:85:b2:7f:03:1f:
55:56:65:9b:c1:0f:39:a4:9a:c1:58:1a:5b:d4:4a:
47:a2:13:07:b1:d0:42:04:33:34:93:95:b8:8b:9c:
a8:81:6b:d2:69:0c:9d:a1:a2:47:ef:d4:21:39:73:
c9:71:02:5e:9b:f1:11:a5:ca:0e:23:28:b6:4e:04:
bb:f7:66:30:ef:d9:5a:9a:40:de:c1:b0:d3:bf:00:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:CF:87:50:C2:A2:E5:77:4A:8C:74:1B:02:E5:79:7D:01:CF:13
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Y9_Ph1DCouV3Sox0GwLleX0BzxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b9:13:89:fc:85:11:a8:59:7b:4e:da:8f:7c:ee:f9:53:5b:
41:62:0e:35:22:5f:74:f7:87:a4:ff:7d:05:63:15:8c:f9:f1:
31:d9:bb:b0:aa:f9:3f:79:a1:d3:fe:6a:8f:f1:f5:9c:1a:02:
5d:87:10:c1:b3:9b:51:41:74:e2:c5:34:b9:2e:1e:4d:07:8a:
07:57:5b:38:a0:41:16:8f:4c:c0:02:6e:4c:f7:bd:ee:51:05:
a0:df:19:ca:3a:95:20:07:9b:d6:ba:82:42:65:ef:0f:20:35:
a0:88:b5:28:ea:19:4b:cd:c4:fc:c2:3a:d6:7a:a7:26:3c:82:
94:40:3c:32:5b:47:a6:69:8e:d4:fe:df:7b:84:60:26:6f:51:
c5:ce:82:20:0e:18:8b:38:c7:fd:b5:99:b7:12:29:80:bd:43:
b4:29:a9:4f:1c:3d:56:cf:ff:28:e6:79:63:19:f8:30:d0:5d:
2f:0b:74:ed:5b:b4:69:15:21:ad:b0:59:a2:d3:cc:b7:2a:6e:
8c:cb:a1:a1:c7:af:4b:94:7b:4b:b9:a3:fe:42:b4:ba:e1:5f:
73:77:f0:84:f2:7c:61:1a:f7:b1:b5:cd:2b:48:78:25:89:89:
78:b5:41:d2:71:10:29:e9:ed:df:3b:24:4f:4a:d9:98:75:f8:
89:0c:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org