Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/xCmtKE875C1CgW5QIaK97R_C-0E.roa
File: xCmtKE875C1CgW5QIaK97R_C-0E.roa (raw, json)
Hash identifier: UGEGFqCv+prqAIoI2igwkdCZnQpqjmeSXDxS5AyFX8Q=
Subject key identifier: C4:29:AD:28:4F:3B:E4:2D:42:81:6E:50:21:A2:BD:ED:1F:C2:FB:41
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01847589003104E59A658BFDF672F3F3853E
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/xCmtKE875C1CgW5QIaK97R_C-0E.roa
Signing time: Mon 14 Nov 2022 09:47:03 +0000
ROA not before: Mon 14 Nov 2022 09:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 217.25.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:89:00:31:04:e5:9a:65:8b:fd:f6:72:f3:f3:85:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Nov 14 09:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c429ad284f3be42d42816e5021a2bded1fc2fb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:f9:be:35:bb:3f:06:3c:89:7d:44:3d:d1:
da:68:6b:3b:1d:d3:e4:73:52:86:98:61:45:3a:ba:
a0:20:40:53:64:76:ae:ac:65:68:df:34:42:dd:c8:
e1:c7:10:c9:db:96:09:34:56:2c:13:53:10:ed:30:
05:b0:ed:a7:cb:af:06:e4:6d:40:24:cd:29:47:91:
68:71:b1:b4:3b:f3:54:54:6e:9a:c8:80:89:7c:76:
3a:88:9c:71:4e:e9:78:29:41:b7:97:7d:f5:10:10:
33:aa:a3:33:2f:70:00:71:24:ac:14:13:d8:e5:a8:
3b:54:75:d7:0a:d6:41:1f:66:16:27:3a:1f:2c:1a:
e2:40:0a:0c:e2:18:8e:ec:f2:74:40:f7:c1:5a:1a:
11:60:c5:0b:15:2c:82:73:1f:d8:f7:bd:ff:31:6d:
16:3b:00:22:ee:78:98:b8:7b:8a:2f:a0:67:41:27:
ce:e4:db:03:55:4b:40:15:0e:84:a1:e3:df:80:3c:
c9:71:60:86:b9:c7:35:b1:49:9a:40:e3:3e:25:a6:
02:75:38:a0:37:34:a4:bb:1c:76:e6:84:8a:32:13:
33:08:db:88:a7:78:30:0d:e9:52:1f:a7:cb:77:84:
4e:54:f0:24:1e:58:38:32:04:5f:09:4c:34:ac:84:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:29:AD:28:4F:3B:E4:2D:42:81:6E:50:21:A2:BD:ED:1F:C2:FB:41
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/xCmtKE875C1CgW5QIaK97R_C-0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
18:cf:e9:43:56:c8:ae:56:62:67:d8:01:6e:bc:68:21:83:b2:
86:55:c7:18:ac:a7:8a:c6:a9:58:2c:14:64:63:a5:f3:cf:86:
51:77:cf:aa:77:86:32:41:6b:fe:d7:c9:8a:aa:8b:00:48:03:
14:7c:fa:08:03:e5:54:c2:2a:85:80:56:59:09:7f:f0:db:2a:
6e:91:a9:b8:2e:b1:5a:3c:23:4e:f7:6f:64:3d:8c:c7:11:67:
29:6e:9c:a5:07:eb:a7:5f:7a:67:97:50:de:43:c6:c8:53:38:
08:18:a4:6a:6d:88:1e:11:ad:61:87:2c:61:e8:9b:70:5e:b7:
8c:17:1e:c7:78:99:a1:8a:00:7a:28:89:7f:c4:fe:f5:3b:ae:
61:c9:54:e7:c6:f0:bf:6a:ab:bc:43:45:60:85:0b:fe:0b:c7:
a1:a5:cd:86:f4:e5:6c:32:b8:57:08:c3:11:9c:76:e2:0f:6e:
dd:9f:a1:07:cf:89:a5:22:49:70:00:71:d1:2d:37:37:8c:7b:
9e:95:c6:c7:7a:18:17:26:4a:9c:8c:92:9f:d8:43:29:53:a3:
5c:8a:94:f0:b8:b0:8c:6c:50:34:c2:78:60:13:1e:f5:01:08:
6b:15:bb:b2:8f:4c:a5:63:e4:e0:e4:3c:5d:63:fd:39:be:40:
29:5d:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:39 2023 by rpki-client on console-ams.rpki-client.org