Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/n--ISLGe1mPubi3CWwg0ymCvJrE.roa
File: n--ISLGe1mPubi3CWwg0ymCvJrE.roa (raw, json)
Hash identifier: YDvwF/H9oMLbdSt+ZcLHBjwvnhgz69jDkKPIw1G8tHk=
Subject key identifier: 9F:EF:88:48:B1:9E:D6:63:EE:6E:2D:C2:5B:08:34:CA:60:AF:26:B1
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 09D7CAAA
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/n--ISLGe1mPubi3CWwg0ymCvJrE.roa
Signing time: Sat 01 Jan 2022 15:57:53 +0000
ROA not before: Sat 01 Jan 2022 15:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209947
IP address blocks: 212.119.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165137066 (0x9d7caaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Jan 1 15:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fef8848b19ed663ee6e2dc25b0834ca60af26b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:0c:96:46:ab:02:ad:e0:44:13:8c:bc:45:
95:72:de:b1:a4:8b:0c:01:aa:36:ba:25:36:a8:03:
c7:0d:b5:63:2c:ab:e9:c9:ac:84:54:16:59:48:40:
c1:a2:e2:00:85:78:f3:cf:15:ca:22:1e:37:b6:2c:
16:84:15:a9:bb:2d:85:2f:6f:f8:a5:8a:2d:f7:cd:
d3:e7:66:a5:41:5e:09:11:56:b0:bc:ed:c9:65:01:
d0:94:65:59:a4:9b:c6:b7:4b:db:06:01:d5:73:ae:
22:05:ff:97:47:ac:b8:2b:2a:4f:59:91:8a:e6:59:
25:3d:5d:53:c9:c7:fd:aa:68:20:32:9f:d5:08:d0:
9c:3d:d6:c7:4d:98:c2:76:f3:1b:01:1a:b7:96:a3:
5e:be:00:78:ff:fa:e9:5f:0a:10:1b:05:00:8e:47:
47:2d:e3:69:24:b8:97:24:ad:65:8b:26:a5:fa:57:
c9:de:bb:a3:ad:4f:44:d0:c3:46:ea:fe:dd:2f:b9:
21:f1:76:8f:77:8b:61:57:ba:d8:36:e9:56:ba:3c:
35:98:42:64:fa:2a:a1:50:76:7c:d4:02:f6:f0:3e:
f6:22:21:e9:c3:ed:66:4e:76:ec:b1:8b:df:05:34:
36:a6:8c:cb:39:b1:77:a1:70:02:5b:c9:aa:64:f8:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:88:48:B1:9E:D6:63:EE:6E:2D:C2:5B:08:34:CA:60:AF:26:B1
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/n--ISLGe1mPubi3CWwg0ymCvJrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.36.0/22
Signature Algorithm: sha256WithRSAEncryption
16:19:65:be:b0:9e:57:07:08:81:bb:41:f4:24:ea:7e:a8:2a:
4c:67:43:f5:65:a6:51:90:da:8e:6a:b2:28:b0:e2:d8:17:e0:
2e:9a:a7:0e:ca:4e:04:24:75:3d:a0:d2:7f:9e:59:f3:19:0a:
07:48:99:d1:a1:29:7a:30:43:e8:b3:86:35:bc:f8:21:3c:7d:
b4:ae:85:12:82:e5:4e:33:ea:fb:eb:1f:af:47:83:42:8c:48:
a6:ca:72:31:34:a0:0b:97:73:ce:e5:c0:f4:ca:e5:5d:49:c6:
0a:08:85:c1:64:6c:09:5c:db:62:cf:c5:78:41:da:1d:5b:70:
e4:3c:10:14:77:33:9a:8b:79:9c:88:3d:55:0e:2b:66:08:1c:
d7:4c:ef:44:93:f7:62:81:94:60:e0:0b:ac:94:4f:a6:56:f3:
03:38:41:66:5f:00:d1:18:47:ef:7a:e9:09:e3:58:93:44:b9:
45:63:d1:5e:91:87:f8:a1:40:e9:51:7a:00:e6:5d:52:f5:9e:
21:16:e9:80:17:f2:0e:e6:18:0f:78:c7:4f:d7:b0:66:a7:16:
bc:e0:e4:f3:eb:13:f3:8a:22:83:c2:6e:0b:73:ff:ac:6e:2d:
d2:a5:b4:e1:7c:07:4f:db:c1:de:1f:8e:14:b5:ed:4d:82:01:
fd:8a:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org