Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/CjkpuRKcEn36SykEYWE6xgp61fE.roa
File: CjkpuRKcEn36SykEYWE6xgp61fE.roa (raw, json)
Hash identifier: 0C+Yo7l4TvIuMOWlyWVSNTjqks0b1Yqqh2aN1xHbh9c=
Subject key identifier: 0A:39:29:B9:12:9C:12:7D:FA:4B:29:04:61:61:3A:C6:0A:7A:D5:F1
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 154C63B4
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/CjkpuRKcEn36SykEYWE6xgp61fE.roa
Signing time: Sat 01 Jan 2022 13:56:57 +0000
ROA not before: Sat 01 Jan 2022 13:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30741
IP address blocks: 83.145.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357327796 (0x154c63b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 13:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a3929b9129c127dfa4b290461613ac60a7ad5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:e8:a6:43:9a:ff:33:60:91:33:9d:cf:5d:
f2:4f:20:a5:44:a8:a7:01:08:01:18:ef:12:7a:db:
87:d1:f4:c8:54:37:c3:e2:24:0b:ca:a4:93:90:fb:
9e:50:a7:6f:a0:0b:c1:1f:4b:ea:f1:72:4b:90:7a:
37:16:4d:d3:ea:28:46:4d:48:25:5d:98:a7:9a:3c:
ef:53:e9:98:fa:f2:e2:34:d4:c5:42:04:5c:e3:ab:
9e:0d:17:ff:f6:42:ca:34:9d:37:bd:de:3f:b2:d2:
61:38:d8:95:21:82:49:e3:28:5d:23:26:2b:cf:8a:
e3:27:5c:ea:0f:c6:66:3d:7a:24:5c:df:f2:45:8e:
45:11:a3:90:6c:a5:67:9d:83:af:9f:14:1c:8f:4b:
fc:93:a9:a1:0d:e5:d6:84:d7:aa:0a:fa:9f:db:fe:
e2:10:ee:b6:99:c0:fd:0d:62:97:e1:19:5a:12:99:
77:90:07:12:64:14:0f:83:d4:5e:0f:5a:d9:d4:9f:
7a:70:99:64:eb:5e:b0:00:48:02:3a:f4:40:17:e1:
91:aa:55:be:89:63:7b:12:55:0d:fb:de:b8:6c:f2:
6c:87:13:53:88:ab:dc:eb:dc:53:db:c8:9c:ef:3b:
e5:b9:4f:a8:31:98:cb:09:72:3b:07:59:68:17:54:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:29:B9:12:9C:12:7D:FA:4B:29:04:61:61:3A:C6:0A:7A:D5:F1
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/CjkpuRKcEn36SykEYWE6xgp61fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.145.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6c:5c:ee:53:fe:9c:73:b1:36:49:c9:8e:db:df:fa:f6:9a:
f6:5b:1e:78:ff:8d:8c:aa:a7:9c:da:c9:e3:66:f3:c1:a5:f4:
b4:06:29:bc:19:b8:20:a6:51:8a:31:06:ee:83:ad:ab:f6:9b:
71:b8:84:9b:d6:22:43:d0:95:e5:df:b1:b5:db:b6:41:16:be:
42:7a:06:fa:3e:d0:69:e1:05:82:c1:04:85:38:f5:48:59:28:
9f:84:3e:c1:13:ac:2e:65:07:7f:28:a6:d2:89:87:0e:b1:7b:
ae:5c:e8:88:46:7b:9b:26:68:74:d3:7e:25:e5:f1:ec:70:b6:
ea:fa:c8:7a:14:db:99:23:bd:5b:9e:e5:1a:54:0e:ab:c2:2c:
1f:85:79:12:7c:51:f0:09:17:fb:97:ca:28:d2:04:ad:89:44:
65:89:43:f9:0c:f3:97:56:48:84:76:79:1d:eb:b7:5d:4d:14:
21:7b:a0:b1:28:f0:f7:15:29:80:31:86:17:5e:cd:5c:51:df:
70:0d:cb:3f:1f:a8:09:ad:f3:9a:de:a6:1f:32:13:c2:f4:f7:
11:1c:fd:55:c4:30:06:7a:ae:cb:5b:ea:36:88:1f:3f:f0:12:
9c:36:17:96:7a:7a:be:40:96:43:0c:f3:ce:07:57:e6:03:48:
27:df:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-fra.rpki-client.org