Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/p9ntFnodyxo0hmLe3X8QeTi1jOM.roa
File: p9ntFnodyxo0hmLe3X8QeTi1jOM.roa (raw, json)
Hash identifier: YZawe3dZHPMruujnHdnICCVFe8HihPuU8uhU8a+jlyk=
Subject key identifier: A7:D9:ED:16:7A:1D:CB:1A:34:86:62:DE:DD:7F:10:79:38:B5:8C:E3
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 042257A8
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/p9ntFnodyxo0hmLe3X8QeTi1jOM.roa
Signing time: Sat 01 Jan 2022 04:58:48 +0000
ROA not before: Sat 01 Jan 2022 04:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39729
IP address blocks: 213.158.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69359528 (0x42257a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jan 1 04:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7d9ed167a1dcb1a348662dedd7f107938b58ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:65:30:65:3e:78:d1:b1:68:d1:da:41:4b:
11:c7:01:27:70:88:24:c0:12:a0:0f:58:c4:d7:6e:
dc:b3:6d:08:b5:03:d3:66:9a:f8:c0:4b:c2:19:aa:
5a:93:e1:03:56:d8:1f:94:ae:54:1c:3d:69:85:2f:
53:51:12:f3:57:de:9d:76:6b:3a:bb:b2:d7:f7:1c:
25:b4:9b:ac:1c:35:a3:2c:92:ab:3a:44:8a:77:25:
e9:e9:86:32:53:fd:d2:35:e1:25:76:26:ec:1e:f2:
ec:0b:0d:47:4f:41:71:a1:82:d0:32:25:57:d1:4d:
bf:f7:f3:49:e2:27:1e:53:8a:7d:a0:02:7c:38:c1:
af:f7:a9:04:3a:59:ce:3a:ee:1a:1b:5b:87:54:48:
e7:e1:15:ae:b8:9a:6d:07:25:c4:2e:c9:28:24:1e:
5b:b6:ae:a6:b4:fb:37:0f:dc:22:47:c9:8e:78:c6:
86:fd:78:9c:c1:1c:8c:a4:e0:57:06:c1:de:dc:84:
fc:6b:0a:a4:05:df:1d:bd:8b:38:51:06:23:67:9e:
b1:45:67:b3:3e:5f:bb:97:0d:46:27:69:66:e1:10:
9d:2f:01:2a:59:90:ec:c2:b3:4f:ec:99:0f:d4:2b:
73:a0:b4:fb:8d:cd:38:ac:61:e8:18:f3:e2:df:25:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:ED:16:7A:1D:CB:1A:34:86:62:DE:DD:7F:10:79:38:B5:8C:E3
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/p9ntFnodyxo0hmLe3X8QeTi1jOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:39:1c:60:85:35:eb:52:4d:a3:8d:81:59:e7:6b:eb:91:a9:
0d:dc:68:9b:04:e2:ab:4e:55:0a:1d:d9:40:cb:8e:42:d8:63:
75:96:5b:93:d0:9d:18:9d:2e:21:27:f6:b5:cc:e0:dd:c2:fa:
b4:07:08:de:04:78:fe:2b:a6:53:e5:c7:44:c9:00:f9:c6:8c:
8d:4f:57:10:a6:93:16:9b:38:1d:a3:44:e6:2e:a6:f8:86:3f:
51:5e:2c:bb:d2:3b:ac:20:4f:8c:05:5e:bc:81:84:98:41:07:
89:66:38:df:b4:b5:43:2c:fc:b6:bf:18:ae:6e:35:c4:8c:46:
c4:bc:25:6e:ee:b6:e3:2c:e3:ae:7b:31:11:b7:b6:3e:50:54:
b6:1d:52:9e:68:b1:7d:37:8b:af:ed:24:eb:ee:ff:6d:cc:8c:
44:f3:e7:bb:b1:9d:22:45:39:52:e1:57:e3:4f:89:2f:f2:98:
0d:89:fb:2f:d8:5b:26:7d:47:4c:d9:f2:39:c1:41:c5:3b:95:
ce:2f:c5:52:a5:dc:35:48:e3:08:3b:c8:d5:57:e8:88:29:ba:
98:93:d9:3b:de:97:f6:7f:d3:42:90:e2:8a:7a:7c:f3:62:1b:
90:a7:0a:9a:44:54:8d:47:52:d2:49:7e:e9:fb:27:86:e1:98:
01:be:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:33 2024 by rpki-client on console-ams.rpki-client.org