Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/K1E5qgEKTCTav7nuU1JOoeFSAqs.roa
File: K1E5qgEKTCTav7nuU1JOoeFSAqs.roa (raw, json)
Hash identifier: Y3jrXFYep+nd/lADpbItRIxz+KySfshqJkskgsnMevQ=
Subject key identifier: 2B:51:39:AA:01:0A:4C:24:DA:BF:B9:EE:53:52:4E:A1:E1:52:02:AB
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 662CED
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/K1E5qgEKTCTav7nuU1JOoeFSAqs.roa
Signing time: Wed 23 Mar 2022 15:54:38 +0000
ROA not before: Wed 23 Mar 2022 15:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200420
IP address blocks: 192.109.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6696173 (0x662ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Mar 23 15:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b5139aa010a4c24dabfb9ee53524ea1e15202ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:1d:0f:7a:0e:8d:ce:18:f0:fb:33:4d:cc:
c1:8a:51:d7:88:4f:2e:04:7f:d4:58:31:89:45:c2:
27:85:24:a2:32:16:ba:1e:c6:2a:7f:9c:7b:c5:9f:
9d:98:26:41:12:d6:02:a5:ef:2d:27:7f:34:16:6a:
62:2b:f6:d5:72:b3:56:9d:0e:fe:4b:87:5b:78:e6:
18:7a:a8:81:6c:d3:0f:7a:08:4b:d7:29:d8:dc:21:
d4:dc:73:9d:df:97:63:b7:22:87:b7:2a:c2:b0:b9:
bf:10:17:cc:bf:6f:50:a5:9d:e2:45:35:a8:89:d7:
27:75:f9:29:ef:0a:2c:be:fe:35:e1:a6:e6:3d:02:
5d:63:7f:c9:38:ac:a7:98:ef:c7:0a:01:8f:69:ef:
b9:91:c0:b7:6a:26:b1:00:7a:bb:74:ea:33:68:04:
da:52:de:e7:9a:7a:f6:fc:f8:89:c9:d5:95:4c:95:
b4:43:a9:12:9f:dd:a9:e0:0e:a6:f0:4d:0f:d6:8e:
db:d1:6f:9e:c4:68:99:ff:a2:5d:9a:41:99:97:c1:
0f:e4:09:e0:e0:33:57:50:6c:4b:f4:18:98:6c:37:
3c:7e:b0:44:ce:16:8e:6f:29:aa:04:49:15:ab:4e:
3f:e5:da:dc:cb:6b:80:7b:72:8d:1f:c1:51:c4:5f:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:51:39:AA:01:0A:4C:24:DA:BF:B9:EE:53:52:4E:A1:E1:52:02:AB
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/K1E5qgEKTCTav7nuU1JOoeFSAqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ba:96:e7:a1:c6:7f:aa:9f:9f:66:e5:ba:bb:d1:8d:d5:34:
0c:0e:b1:2d:3c:72:29:de:18:06:7b:f8:f1:5c:5d:28:1e:57:
7f:2a:94:bb:67:fa:ed:30:2a:24:3b:20:ab:22:ef:53:e2:a2:
93:42:31:82:3f:a7:37:a1:5a:f2:34:c5:3f:83:05:8d:1c:d3:
24:40:bc:10:e4:b3:c6:7f:de:62:c0:67:9a:de:8b:9e:58:bf:
12:d1:cd:bf:37:0e:c6:72:78:9c:46:92:64:c9:4e:a1:1c:30:
51:af:9f:df:2f:6f:9e:77:fb:be:e2:37:d1:43:5f:44:7c:06:
64:9f:c3:fe:c7:09:6a:05:14:55:7e:7d:91:39:51:dd:98:8d:
e7:98:a5:c3:c9:56:9c:5f:42:76:57:82:be:60:50:e8:46:11:
00:31:ee:e0:0d:a6:99:c8:3d:c6:d0:88:84:c5:c5:d7:c2:7e:
c8:b4:59:e5:cf:5a:b9:86:a9:81:09:42:08:d4:f3:97:ab:bf:
dd:d2:8d:58:7a:f0:ea:af:e9:94:61:f5:ea:64:cf:c9:ad:7e:
a3:02:b9:b3:56:48:95:85:1e:2c:0f:da:8a:61:fd:ee:0b:4f:
f8:d3:fe:bf:a2:be:27:4b:33:b4:90:ff:22:5f:95:70:c1:f1:
31:7b:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:06 2023 by rpki-client on console-fra.rpki-client.org