Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/2PgSd7mXT3AirOLzWM6WfWuMim8.roa
File: 2PgSd7mXT3AirOLzWM6WfWuMim8.roa (raw, json)
Hash identifier: F9uUGtpOmFTDn2tWfW0BiQ2sMy1YMmd5pI/Ue/DHgWA=
Subject key identifier: D8:F8:12:77:B9:97:4F:70:22:AC:E2:F3:58:CE:96:7D:6B:8C:8A:6F
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018535DE2C854D22933A489BAA82A0D22296
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/2PgSd7mXT3AirOLzWM6WfWuMim8.roa
Signing time: Wed 21 Dec 2022 18:07:10 +0000
ROA not before: Wed 21 Dec 2022 18:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 212.113.117.0/24 maxlen: 24
212.113.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:35:de:2c:85:4d:22:93:3a:48:9b:aa:82:a0:d2:22:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Dec 21 18:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8f81277b9974f7022ace2f358ce967d6b8c8a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:37:a4:5d:83:f6:46:e5:ce:25:4e:ec:fa:
e2:4d:28:43:e1:55:3d:26:58:12:17:66:d7:15:f9:
3f:fa:5c:f1:4a:75:7b:d9:40:3d:c2:df:f0:9f:84:
0c:e5:6b:27:83:be:cf:48:0f:be:42:1a:3e:cb:84:
82:4c:31:02:c9:10:03:c3:e8:ff:7b:26:32:cf:18:
74:9f:e3:3c:bd:e6:6e:6a:a8:df:cf:22:42:ed:c5:
b0:3d:d0:18:53:78:7a:fc:70:ab:c6:6e:c3:6a:d7:
11:88:8b:e0:59:4f:fa:4b:8b:2e:8f:ae:bb:71:43:
24:75:45:10:a6:cb:42:f8:09:02:b8:0a:cc:7c:78:
cd:e3:18:f2:ea:e7:67:bc:3c:22:2e:17:00:9a:5d:
74:e3:89:70:83:a7:ca:9e:4f:83:51:6d:af:ce:16:
b7:f8:2c:8b:66:56:d6:53:9b:9b:72:cd:61:5f:fb:
6b:ce:e2:a2:e8:14:03:50:9d:7a:d0:a1:18:65:15:
6a:37:27:73:2b:e3:b7:1e:7f:1a:dd:26:ed:f4:83:
01:ba:c7:46:0c:52:94:b5:ca:db:3c:fb:26:3b:1b:
0b:26:60:82:7f:06:66:44:c3:a8:bf:9f:62:5a:4c:
13:53:c9:f6:01:57:62:be:cf:f2:cd:f4:31:f4:d9:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:12:77:B9:97:4F:70:22:AC:E2:F3:58:CE:96:7D:6B:8C:8A:6F
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/2PgSd7mXT3AirOLzWM6WfWuMim8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.116.0/23
Signature Algorithm: sha256WithRSAEncryption
05:79:6d:5f:39:7c:ff:47:92:00:60:72:c3:43:67:e7:87:6e:
2e:e4:43:25:43:ee:a0:ee:38:02:88:da:00:2e:b1:5b:ee:e9:
83:7f:1f:2c:1f:83:c6:57:88:45:c0:6c:3c:44:11:0b:5a:2a:
54:b6:2d:a7:c6:c5:ff:9e:cc:5b:6a:89:73:70:30:37:d6:7b:
d3:ea:f0:ff:56:99:97:80:ee:99:c1:32:cf:28:30:ae:79:01:
62:b3:8d:9d:1b:91:dc:2b:89:6a:bb:8d:58:d5:f2:d1:db:80:
3b:e2:55:0f:19:07:d1:b1:79:44:57:06:fb:a4:af:6a:09:82:
b7:2a:cc:4d:c2:43:b6:07:4d:8f:84:33:28:51:34:d5:73:70:
70:50:4f:a3:21:ee:34:fe:81:3e:8b:3a:73:8e:1a:38:70:01:
78:36:05:59:03:d5:8b:91:da:4c:41:98:ee:6f:b8:4a:aa:b0:
56:b7:5b:38:bc:25:2a:67:d8:df:6b:03:62:5d:96:86:58:04:
a1:82:3f:ba:99:ba:86:19:0e:56:8d:dd:8e:45:62:70:6c:cb:
5d:c9:3e:c7:92:3d:0d:dd:72:3c:21:a7:7a:b3:2d:fd:6b:3b:
2b:e3:63:6f:ae:38:0b:07:3e:c5:79:82:1c:5e:cc:13:a4:93:
24:cc:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:33 2024 by rpki-client on console-fra.rpki-client.org