Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/jgf9BQndpxWz0gjm03c_lo84U0A.roa
File: jgf9BQndpxWz0gjm03c_lo84U0A.roa (raw, json)
Hash identifier: V0b9dkuc7cZffh5yguTCU0U3r3ivmhQXopnxWB2wOeg=
Subject key identifier: 8E:07:FD:05:09:DD:A7:15:B3:D2:08:E6:D3:77:3F:96:8F:38:53:40
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018311B6C93838851126920BEC87CE504A97
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/jgf9BQndpxWz0gjm03c_lo84U0A.roa
Signing time: Tue 06 Sep 2022 07:32:15 +0000
ROA not before: Tue 06 Sep 2022 07:32:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206248
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.112.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:b6:c9:38:38:85:11:26:92:0b:ec:87:ce:50:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Sep 6 07:32:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e07fd0509dda715b3d208e6d3773f968f385340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:01:62:26:f1:4c:91:4e:98:27:57:4a:b3:37:
89:e8:ad:a5:b4:98:d2:dc:b6:1d:1d:84:d9:bb:fe:
b0:e0:b9:d3:6f:fc:bb:64:0d:3e:81:94:cf:43:6d:
57:ca:81:60:2d:80:ce:58:87:f7:3b:0e:a3:d1:83:
18:f1:bd:0f:61:c8:19:83:30:63:e3:d9:60:58:a9:
6e:16:d2:79:48:72:2c:92:03:8d:ea:0f:9f:07:97:
2a:57:32:48:c7:17:9a:bf:79:2f:7b:e4:23:ae:4b:
54:ef:1e:5b:d0:a2:59:28:c3:9a:16:7e:0a:10:a5:
06:31:8f:76:4b:c0:8b:4e:86:8f:e3:06:ad:02:d3:
98:25:0c:4c:f9:9d:e3:91:2b:20:4a:2e:4c:01:54:
82:c5:c4:d2:f0:c8:30:c8:21:46:4b:df:84:e5:ae:
96:49:33:b2:fe:97:13:fa:87:f1:f2:82:1c:ec:69:
c5:8c:b6:62:f7:17:57:fd:61:2b:29:46:68:33:5a:
3e:5f:84:3e:d4:42:e2:f9:5b:e6:1a:91:44:a6:ac:
07:8f:3a:35:4c:09:61:8a:cf:e1:ed:05:5e:d2:a0:
7d:0e:b3:ed:8d:50:db:c8:d5:87:c7:d1:7a:d6:b6:
d4:35:e9:db:52:fd:ba:5e:7a:e2:58:3c:2f:c3:f3:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:07:FD:05:09:DD:A7:15:B3:D2:08:E6:D3:77:3F:96:8F:38:53:40
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/jgf9BQndpxWz0gjm03c_lo84U0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.109.0/24
212.113.112.0/24
Signature Algorithm: sha256WithRSAEncryption
34:37:29:42:17:8f:d6:2a:3c:20:57:a9:06:33:b3:f0:9f:3c:
e8:df:91:42:18:f2:4b:32:3f:17:e1:8b:ec:06:c8:18:10:94:
b4:98:1a:fe:ab:6e:53:a4:36:8f:e9:f5:50:96:63:79:43:67:
bd:ae:4f:a1:66:23:6f:68:56:5d:e3:53:52:47:5b:08:ce:d2:
d6:a4:d1:c9:e7:9e:0e:d6:78:02:a9:0c:9b:0f:c3:c0:2c:a1:
25:eb:3b:66:9a:99:1b:74:35:29:59:35:67:e3:fe:3d:ff:47:
1c:de:ba:2f:f3:fd:4d:28:d1:9e:76:58:51:e7:66:29:f0:5c:
d3:b2:2e:48:e8:7f:be:00:c6:d5:7c:a1:3d:24:47:5a:99:ba:
3f:8f:c5:84:f1:d3:a6:cd:96:e9:00:c9:8d:44:c7:20:31:f6:
26:ef:45:2a:01:19:3e:76:d3:7e:be:f5:c7:95:45:6d:f9:44:
3c:83:39:27:93:78:cd:30:7f:23:2e:d7:bb:2d:34:28:41:e1:
4b:3a:ea:58:e7:9c:76:ef:bf:39:16:37:98:9e:82:c4:44:54:
fa:d4:1f:da:f8:cd:0f:8d:e2:be:14:b3:8c:8c:65:01:9d:14:
34:66:e7:f0:87:8d:77:fc:4b:82:8a:83:21:7a:3e:1c:5e:ff:
e0:61:39:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:33 2024 by rpki-client on console-fra.rpki-client.org