Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/yEslUygiYvbCw5f1O5cq11YcA9c.roa
File: yEslUygiYvbCw5f1O5cq11YcA9c.roa (raw, json)
Hash identifier: cW2LMue4jSeIc8gMDgBeqRite+dv3CGbLh+LL7HjpOI=
Subject key identifier: C8:4B:25:53:28:22:62:F6:C2:C3:97:F5:3B:97:2A:D7:56:1C:03:D7
Certificate issuer: /CN=b192bf0a867a04a0b607687ae90c447ae62513a1
Certificate serial: AEDE17
Authority key identifier: B1:92:BF:0A:86:7A:04:A0:B6:07:68:7A:E9:0C:44:7A:E6:25:13:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZK_CoZ6BKC2B2h66QxEeuYlE6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/yEslUygiYvbCw5f1O5cq11YcA9c.roa
Signing time: Sat 01 Jan 2022 00:52:34 +0000
ROA not before: Sat 01 Jan 2022 00:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 217.119.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11460119 (0xaede17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b192bf0a867a04a0b607687ae90c447ae62513a1
Validity
Not Before: Jan 1 00:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c84b2553282262f6c2c397f53b972ad7561c03d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:72:05:fd:bb:ce:1a:bb:43:0f:df:bb:fe:
a7:22:31:de:c5:b3:c4:3f:59:f9:44:e5:0b:59:ad:
5b:2b:11:76:1b:21:8a:9a:4f:f6:cc:1a:93:60:9a:
de:d7:bf:c1:33:e5:4c:b4:bc:3e:f0:75:ac:3c:9f:
54:9b:4a:ad:d8:f9:44:f7:93:19:d4:cc:f3:d2:be:
33:d3:32:d6:3f:2b:49:89:5b:00:9c:ac:a9:52:df:
49:85:26:cc:56:82:00:03:6e:00:43:0b:e9:22:3d:
b6:70:ae:1c:19:7b:02:14:0c:21:41:bb:66:2a:8a:
fe:15:e5:75:a8:4b:5e:ce:90:73:e9:4b:ab:57:82:
54:d5:04:e9:b0:36:f9:ac:a3:a1:d8:7c:f1:8f:ac:
85:57:2a:03:c8:54:b1:47:53:ab:c8:c5:c4:6a:f0:
b8:be:a6:7b:2a:14:58:73:bf:1c:ad:12:3b:38:9c:
29:a6:10:ad:1a:55:ab:58:71:dd:d8:30:7d:7e:ff:
a6:78:26:41:c8:00:4e:3e:9a:bb:6c:7e:24:d0:a9:
5d:b1:42:97:da:96:1f:ae:cb:cd:78:21:84:aa:ec:
98:55:58:ec:13:e3:38:56:dc:d9:6e:65:b7:b3:2a:
03:db:2e:0b:25:10:af:a0:31:c5:97:80:23:0d:70:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4B:25:53:28:22:62:F6:C2:C3:97:F5:3B:97:2A:D7:56:1C:03:D7
X509v3 Authority Key Identifier:
keyid:B1:92:BF:0A:86:7A:04:A0:B6:07:68:7A:E9:0C:44:7A:E6:25:13:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZK_CoZ6BKC2B2h66QxEeuYlE6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/yEslUygiYvbCw5f1O5cq11YcA9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/sZK_CoZ6BKC2B2h66QxEeuYlE6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.135.0/24
Signature Algorithm: sha256WithRSAEncryption
81:12:06:2e:d5:14:12:48:ca:de:c6:7e:1b:a1:fd:d7:83:f4:
ca:ea:25:60:17:7f:f2:c3:c1:40:94:8f:1a:84:a7:24:f3:15:
0c:76:78:37:2c:06:d9:a0:cf:2f:e6:c6:3f:99:7e:89:c6:d4:
6b:18:f6:ff:83:d2:ac:86:11:e0:39:53:18:b6:9e:ed:0f:bf:
b7:a3:05:0e:c8:05:17:97:5a:3c:9d:f3:fd:48:b0:a1:a9:17:
e2:d8:93:e8:46:d1:a3:18:81:8e:c6:62:b8:39:ad:1d:85:8d:
fc:e3:68:91:48:1c:36:57:ea:72:f8:23:40:7c:53:28:20:37:
d0:a0:04:dc:a2:25:ba:50:26:2a:e5:03:a8:6a:99:5f:a5:fa:
94:97:ac:73:1b:88:da:21:6a:81:46:49:9e:a3:a2:f1:d2:f9:
45:3d:f9:ea:63:62:08:63:8d:cf:21:17:d3:82:71:34:31:a4:
d4:4e:96:96:d1:ba:d9:b1:67:35:5e:2c:54:01:47:a2:58:ac:
08:4e:5c:48:a0:15:dc:13:a9:6f:56:d1:53:48:01:94:05:db:
7a:d9:5c:e0:3e:b6:f0:4d:72:27:0d:54:fd:d9:89:29:5d:67:
4d:4f:43:fe:fb:58:af:19:22:fd:2a:2b:e3:be:db:59:bf:ac:
ae:53:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:52 2023 by rpki-client on console-fra.rpki-client.org