Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wvsgO03qjXrf1g-tcny0FpKBvUc.roa
File: wvsgO03qjXrf1g-tcny0FpKBvUc.roa (raw, json)
Hash identifier: AL1CVS0ejy9C5x0ZmaWDcQ0kLT7D/vy/fBiY5GcC8l4=
Subject key identifier: C2:FB:20:3B:4D:EA:8D:7A:DF:D6:0F:AD:72:7C:B4:16:92:81:BD:47
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 083CF6A2
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wvsgO03qjXrf1g-tcny0FpKBvUc.roa
Signing time: Sat 01 Jan 2022 07:56:17 +0000
ROA not before: Sat 01 Jan 2022 07:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209655
IP address blocks: 212.22.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138213026 (0x83cf6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 07:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2fb203b4dea8d7adfd60fad727cb4169281bd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:82:be:15:cb:d4:99:48:ec:d6:36:10:28:
f3:04:7d:de:1b:20:71:12:83:48:9f:b2:a7:3f:63:
e5:a7:d4:e6:60:70:d7:4c:f5:03:d4:d9:d5:89:09:
2d:8c:bd:f7:53:81:e0:6e:cd:33:ab:5c:30:3f:47:
0a:fe:2f:fd:e7:83:39:8a:ef:2c:a1:5f:93:e3:2f:
1a:e1:20:bd:17:db:76:de:8d:2f:80:a9:11:9d:86:
ce:e7:d3:f7:a8:2c:8c:58:d4:9a:1c:35:d7:dd:8a:
29:a9:ea:c9:ba:88:88:db:64:3f:97:5f:61:00:6f:
30:7c:0d:2c:97:a1:ed:b6:05:2f:b2:10:6c:49:de:
b0:52:cb:c2:1e:a8:d0:af:a5:b3:e0:ab:43:8b:35:
f8:8b:a4:35:bc:44:98:e4:5c:d9:8e:28:c7:69:d4:
52:2f:22:f2:90:ca:95:e4:56:d9:81:66:43:20:28:
7f:11:14:18:6d:c1:ab:ba:aa:0f:77:7e:8d:58:0d:
6f:d0:ee:c6:bf:57:cd:c0:7c:89:2f:1b:46:7f:ab:
99:ad:13:59:0c:7e:1d:fd:fb:c1:18:05:9c:e6:29:
e9:b4:33:5c:d9:ab:2b:09:d9:98:3a:02:eb:9b:ba:
12:6c:00:11:7e:31:f1:15:4a:ec:f4:23:73:52:0e:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:20:3B:4D:EA:8D:7A:DF:D6:0F:AD:72:7C:B4:16:92:81:BD:47
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wvsgO03qjXrf1g-tcny0FpKBvUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b8:06:29:c9:18:e7:0b:79:2d:11:6e:03:84:82:81:58:a6:
bd:d8:9b:86:d2:a3:75:28:43:9d:48:a1:d5:8d:20:4e:50:d4:
53:c8:35:e0:a5:6f:fc:e2:84:85:a6:f4:5d:72:26:10:bc:93:
28:a1:b4:92:75:01:c9:1e:04:ec:2d:36:b0:93:ae:a9:ae:12:
d3:82:42:bf:64:e8:8c:21:47:7e:59:41:82:a0:9c:1c:cc:cd:
d5:09:32:0f:7c:71:dd:6c:3c:bc:69:f4:d1:b1:6a:af:17:1d:
e0:a5:5e:95:e7:c4:e1:5a:1d:4a:24:07:8d:da:4a:b0:d2:73:
ba:c4:0b:ba:3d:ab:e4:e1:41:6f:a8:9c:d6:e2:57:a0:af:30:
8c:5d:1b:d1:fb:b6:54:1a:c3:58:a0:c7:32:80:39:3b:ea:6a:
5b:8f:c4:dd:7b:2e:76:62:b4:23:98:33:99:a2:84:d1:d3:64:
58:11:cc:0c:21:13:67:ad:58:e5:63:c7:3a:d4:e8:cc:d1:59:
78:76:1e:94:d5:9e:e5:4e:87:b7:b1:ae:1a:0f:48:02:85:3b:
14:67:bf:8a:68:86:eb:c3:c3:a7:f4:0b:7e:eb:ba:78:3f:c8:
aa:2a:ab:40:5e:6f:2b:3d:96:4f:fc:1d:c3:40:1d:72:7a:62:
33:a6:16:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org