Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/DK0S5zSTwOPEWG-xhH4iHeByhjw.roa
File: DK0S5zSTwOPEWG-xhH4iHeByhjw.roa (raw, json)
Hash identifier: xbwLMHsBn6SDT9sTUBb9ReG/O6wKm60uY/Ps44osxcI=
Subject key identifier: 0C:AD:12:E7:34:93:C0:E3:C4:58:6F:B1:84:7E:22:1D:E0:72:86:3C
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 4486A301
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/DK0S5zSTwOPEWG-xhH4iHeByhjw.roa
Signing time: Sat 01 Jan 2022 03:58:34 +0000
ROA not before: Sat 01 Jan 2022 03:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38926
IP address blocks: 212.234.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149674241 (0x4486a301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cad12e73493c0e3c4586fb1847e221de072863c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:76:d9:f6:e9:db:0f:46:18:9e:d5:6c:ae:
ca:12:7c:bc:19:a2:34:f1:f9:24:30:3e:50:70:6e:
49:76:3d:a1:00:24:56:f6:8d:76:a0:9b:f1:06:48:
f2:c2:1f:4e:f1:7f:c8:1a:97:55:d9:d2:b9:32:8e:
2d:0e:48:57:b2:6d:2d:d8:cf:6f:7f:54:60:bc:1c:
1c:89:5c:b0:8c:f9:44:55:44:f0:9f:18:9a:ce:6c:
93:db:2a:60:67:2b:21:65:cb:b8:32:a3:e7:42:58:
7a:1c:d6:02:e0:22:9f:dd:0f:47:b1:7e:c4:3b:24:
a8:89:e5:a5:45:01:a3:51:b4:2e:aa:2b:b8:f9:c3:
58:41:0e:4d:f6:2b:72:b8:03:74:0c:67:54:d0:ae:
dd:32:e3:f2:71:d9:35:bf:ee:6a:64:39:89:e0:45:
48:57:76:4e:8a:1e:c7:4d:8f:6c:98:da:39:69:e7:
75:b8:b2:a7:7e:3a:04:3b:ca:80:5d:96:6a:1b:7a:
8f:bf:ee:c0:0b:99:9a:0b:2d:a6:fb:f5:40:5f:15:
3f:aa:71:06:fe:8e:be:b0:2d:71:87:1e:b3:0c:fe:
c4:d3:a8:b2:12:68:0b:59:57:cc:c8:24:b1:cb:b5:
c7:00:9c:f1:2f:cd:7c:5a:4c:16:82:6d:f5:18:58:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:12:E7:34:93:C0:E3:C4:58:6F:B1:84:7E:22:1D:E0:72:86:3C
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/DK0S5zSTwOPEWG-xhH4iHeByhjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.234.39.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:18:20:c6:8c:9f:64:9d:ad:31:e4:96:a2:ca:6f:b2:ef:03:
26:ad:33:7f:1f:ce:0f:d8:51:d3:d4:c8:48:fc:bd:4b:9e:5a:
a6:59:ea:d8:36:80:40:86:0e:8f:a2:26:64:fb:7c:a5:bb:76:
48:17:2a:c8:61:2e:61:f6:47:5f:20:de:be:33:3e:e5:19:69:
89:bd:b7:a5:08:81:d0:a5:f4:f2:80:da:3e:3c:a9:2d:81:6c:
40:c9:cd:ca:7e:d6:2c:4a:89:5e:8a:a4:f4:f0:90:45:21:97:
1d:ad:98:a9:5d:a1:89:04:a8:9f:2a:20:1f:07:0d:34:ce:b9:
34:4c:31:c6:76:46:5a:da:fe:62:ec:47:9c:05:29:9c:24:cb:
54:dc:07:dd:17:2d:c0:5b:62:f3:c4:78:bc:59:10:66:d1:26:
0c:ad:eb:35:25:4b:8d:34:ff:77:8e:73:86:4b:9e:30:3e:72:
24:fe:f0:06:ea:01:a9:fc:bb:1f:c8:2d:27:90:30:21:58:e5:
2a:a0:b9:cc:c6:af:0b:00:13:af:2f:e3:a1:a1:f2:35:2a:3a:
5b:04:f4:e6:51:6b:2b:36:0b:aa:90:6c:53:13:27:f2:7b:e4:
99:67:a0:46:05:87:05:4f:63:c5:66:69:0c:de:ae:3c:62:e4:
af:bb:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org