Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AOu4dYo7M-TaTlnT7L9O9L50Y0Y.roa
File: AOu4dYo7M-TaTlnT7L9O9L50Y0Y.roa (raw, json)
Hash identifier: z/AhhikGyQ0VUvLldnPnEmI2mtfDrCiG5EGVqYgOabc=
Subject key identifier: 00:EB:B8:75:8A:3B:33:E4:DA:4E:59:D3:EC:BF:4E:F4:BE:74:63:46
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 448C95F0
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AOu4dYo7M-TaTlnT7L9O9L50Y0Y.roa
Signing time: Sat 01 Jan 2022 03:58:37 +0000
ROA not before: Sat 01 Jan 2022 03:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47127
IP address blocks: 212.234.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150064112 (0x448c95f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00ebb8758a3b33e4da4e59d3ecbf4ef4be746346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:51:22:3a:53:5e:05:13:09:5c:2f:34:44:
75:4e:b8:62:87:55:3b:bc:fd:35:44:a5:a8:78:8f:
81:b8:59:e1:dd:46:ab:e7:4a:78:4d:8c:56:4d:50:
43:e6:ae:1e:b7:83:82:ac:a5:6d:3a:3f:b5:88:28:
7e:90:ab:9e:66:71:fc:68:44:43:df:1f:29:97:4a:
dc:58:5c:db:76:2a:db:f0:6d:3e:09:0e:ff:08:ad:
8d:54:18:34:85:04:99:f0:bc:1f:16:77:1c:04:9e:
28:35:a4:e6:60:c3:f8:a8:8b:26:e7:a5:66:26:3f:
16:c1:5f:ea:07:72:06:7e:8d:07:5f:f5:41:8f:7c:
50:de:04:43:77:0e:24:1d:46:dc:97:04:13:af:e1:
76:5e:5c:47:21:af:a2:ec:4d:de:57:a8:b0:c5:85:
be:09:e7:a5:47:b1:32:be:53:e6:58:af:49:9f:3a:
52:20:1e:4c:16:d5:0f:fb:d8:b3:ca:fe:8d:a6:58:
16:27:49:8f:aa:76:35:35:39:15:72:60:bf:04:66:
2b:71:1e:da:0a:ef:33:13:e4:ec:39:72:6a:da:99:
90:ed:ae:40:26:ca:99:e9:39:04:7c:11:34:54:f4:
36:a5:18:83:a8:d9:ed:72:e9:81:6d:5e:07:87:bc:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EB:B8:75:8A:3B:33:E4:DA:4E:59:D3:EC:BF:4E:F4:BE:74:63:46
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/AOu4dYo7M-TaTlnT7L9O9L50Y0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.234.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:45:74:1c:f9:84:5e:ae:4c:1b:a2:49:2f:ad:af:4b:f0:72:
95:ec:97:b3:ac:ad:5f:c3:6d:0b:15:f2:0b:5d:fb:ab:97:c9:
53:6b:af:ec:b0:78:3e:fd:94:d7:43:37:90:af:eb:c2:bc:33:
e2:f0:2a:bf:a9:64:21:e9:34:76:04:d5:df:30:bc:d6:93:e0:
ff:56:b7:4a:76:31:ac:79:35:40:df:74:06:8a:e3:c6:c3:07:
29:d5:3d:db:2f:53:d8:f7:45:7f:e3:1f:86:69:dd:84:06:2b:
a6:cf:5a:9e:c1:00:f1:25:1c:db:51:3c:a5:90:c4:12:cb:40:
3c:65:8c:8d:f1:3f:70:7f:3d:af:a3:76:f7:12:af:07:8a:d4:
cc:a3:4e:c1:97:db:54:0a:38:e9:2d:c2:7a:22:7c:b0:e4:c7:
5f:0d:12:18:71:46:96:9d:32:b8:1c:75:29:c9:85:25:38:88:
15:b5:67:70:63:54:79:b1:08:9a:8e:30:0c:b0:58:53:6b:34:
21:9f:df:6b:5f:86:e3:7d:82:54:45:d0:77:18:07:46:47:be:
34:1a:67:fb:d8:93:43:ef:ef:56:80:52:6c:f1:65:9a:9f:d7:
94:99:09:85:94:ca:2f:68:0e:25:a9:74:e6:05:5e:c7:e5:a0:
24:1b:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org