Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/l6xuLOKBORgHT8btgL6GP5CEjFo.roa
File: l6xuLOKBORgHT8btgL6GP5CEjFo.roa (raw, json)
Hash identifier: SIXIDQSLkZ7PY2/WQcrGFC3hf2Tejv38XCf01EiU5L0=
Subject key identifier: 97:AC:6E:2C:E2:81:39:18:07:4F:C6:ED:80:BE:86:3F:90:84:8C:5A
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 05AB291E
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/l6xuLOKBORgHT8btgL6GP5CEjFo.roa
Signing time: Sat 01 Jan 2022 00:56:29 +0000
ROA not before: Sat 01 Jan 2022 00:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 212.19.236.0/24 maxlen: 24
212.19.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95103262 (0x5ab291e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jan 1 00:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97ac6e2ce2813918074fc6ed80be863f90848c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:ec:59:d2:4b:39:9b:38:33:ec:1e:b8:e4:
59:21:d6:65:8f:a1:ee:ff:88:76:90:b3:4a:c4:2f:
d4:2f:52:be:95:59:a3:da:43:9d:e3:ec:1c:ea:67:
ae:42:26:18:bb:92:50:f4:ea:92:bc:5d:67:24:4e:
22:77:2a:30:fe:00:73:df:7e:35:d6:0f:5c:5c:94:
ae:af:84:8c:b8:5d:ca:44:74:83:40:7e:73:5c:56:
76:7c:a1:f4:49:31:9b:82:da:45:5e:59:c9:e0:14:
08:d0:3a:f2:d5:41:1e:3b:aa:27:de:75:5c:bd:02:
8d:8d:f3:42:1a:35:90:b5:0b:77:42:06:da:3a:d7:
27:e0:5e:02:d2:d2:ea:cb:3b:be:8c:16:42:6f:16:
03:48:e1:6f:e9:7a:33:53:ad:ad:50:74:6a:ae:cd:
f7:55:17:dd:78:b3:40:9a:5d:60:dc:ec:57:97:8a:
f5:17:6a:ad:b0:1f:de:99:b4:a4:48:f0:88:1f:cb:
ea:f8:c4:91:af:3a:76:c9:ee:10:f4:61:75:01:ec:
b7:b2:a1:21:68:e4:f2:8d:de:65:1e:25:62:13:0c:
78:8e:76:e2:5c:c7:fc:62:d0:ef:4b:68:ac:70:90:
14:7e:81:18:a4:a7:88:5e:75:f3:f8:fc:41:51:f4:
a3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:6E:2C:E2:81:39:18:07:4F:C6:ED:80:BE:86:3F:90:84:8C:5A
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/l6xuLOKBORgHT8btgL6GP5CEjFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.19.235.0-212.19.236.255
Signature Algorithm: sha256WithRSAEncryption
8f:70:a8:10:3e:69:27:bd:f3:16:1c:10:e4:e4:2a:03:6b:7c:
bf:a3:68:9a:64:93:ac:22:6c:ed:d5:76:f1:46:cb:2a:a3:e8:
7e:ba:1a:08:79:e3:af:51:8a:e6:c5:16:6d:07:ac:a7:ce:1d:
eb:6a:f9:64:a8:03:88:cc:31:9f:c6:40:9c:78:50:b2:38:c6:
8e:4c:8f:03:18:b8:f6:67:bd:72:1f:d8:a4:cc:f9:0b:a1:91:
d4:69:81:a8:93:af:e9:6d:e3:41:de:31:a3:ea:07:8d:fa:82:
16:e0:5f:9c:55:42:ec:63:5b:c0:c9:fb:a4:f8:79:4d:00:09:
c5:f6:aa:e2:fa:ff:b6:ac:28:d1:3e:58:db:b7:d1:d4:34:d3:
8f:be:68:33:f7:0b:45:a3:45:21:29:e2:cb:ee:56:5e:73:26:
b1:13:52:ff:70:59:e4:b2:3e:1a:23:dd:19:e2:79:02:a3:e6:
1c:cd:40:1b:c7:b8:0c:66:de:33:6d:64:9c:23:63:69:03:6b:
80:92:58:73:b9:71:97:d2:6a:bf:69:58:23:6a:c5:63:a7:25:
39:3f:24:39:49:5e:77:48:9d:8e:24:8b:7a:13:d8:a6:a5:77:
06:ad:59:c0:07:06:f0:79:13:fd:e1:db:32:f2:ba:7a:96:d6:
c5:4d:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:30 2024 by rpki-client on console-fra.rpki-client.org