Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/qfSNnbZaKIZK42YLzHzC2-Ragxs.roa
File: qfSNnbZaKIZK42YLzHzC2-Ragxs.roa (raw, json)
Hash identifier: B2xvoxF0925vrem92ESvq3eMMosHDaQy+srTixxtKog=
Subject key identifier: A9:F4:8D:9D:B6:5A:28:86:4A:E3:66:0B:CC:7C:C2:DB:E4:5A:83:1B
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F86B4CE
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/qfSNnbZaKIZK42YLzHzC2-Ragxs.roa
Signing time: Sat 01 Jan 2022 08:05:06 +0000
ROA not before: Sat 01 Jan 2022 08:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61265
IP address blocks: 212.192.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260486350 (0xf86b4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9f48d9db65a28864ae3660bcc7cc2dbe45a831b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:34:00:c0:b6:83:36:fc:e2:03:d4:25:3f:
dc:d1:62:cb:c1:4f:f2:4e:9b:e1:79:c0:31:7f:1a:
cb:2a:04:79:ab:2c:61:ba:5b:39:97:8b:4b:66:d5:
36:09:d3:96:3e:6b:d7:07:39:a0:89:f3:ae:06:3b:
55:69:6b:9f:7e:b5:95:a9:9a:42:d2:fa:ad:57:c9:
1d:93:9c:fc:85:dc:37:8f:b4:36:04:0f:28:fb:64:
73:ce:79:da:72:23:06:1d:75:a7:45:cd:db:a0:ab:
f9:41:e6:e4:2c:5c:53:41:a0:09:0f:45:5a:2d:c5:
a0:ae:46:e4:9f:ad:12:01:5b:47:20:1d:86:2a:01:
ac:c0:54:b5:43:b7:21:67:58:6e:b2:fd:7a:3c:22:
bf:ca:48:58:06:e1:95:c0:31:20:d4:b6:b0:a4:0e:
56:b8:30:81:43:11:13:57:00:cd:27:8f:e5:63:68:
80:03:5d:13:6b:2f:0a:be:f7:70:a3:17:e8:99:8a:
a9:44:7c:68:76:7f:0a:ee:77:ff:82:4d:51:d6:70:
69:c2:cf:83:70:ba:cc:72:84:e6:37:cb:b0:90:5a:
4b:78:7c:a0:13:49:81:8a:75:c3:6c:7c:33:06:21:
f5:e1:ae:d8:27:d6:52:63:06:9a:7c:24:4f:c8:ec:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:8D:9D:B6:5A:28:86:4A:E3:66:0B:CC:7C:C2:DB:E4:5A:83:1B
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/qfSNnbZaKIZK42YLzHzC2-Ragxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.226.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:04:6e:28:a7:76:fc:cf:9e:be:68:58:0a:cb:68:d4:c7:fe:
a0:37:b5:a5:d3:18:81:ec:be:e3:94:2d:ca:e6:a7:99:01:6d:
7e:ea:bf:99:af:11:b0:62:f2:1b:a1:16:19:88:2c:eb:27:15:
2e:cf:32:f6:5a:cb:6b:2e:da:d4:c5:65:4b:7b:a7:5e:a8:5d:
d2:44:20:d6:e7:3d:de:30:a0:b6:d1:67:1c:e9:d1:96:34:b9:
28:4f:a2:dc:8e:76:d8:d1:3e:6e:5d:88:6b:cf:a7:26:aa:5c:
40:a9:54:1a:2b:27:44:63:e3:bf:ba:25:49:83:ed:26:7a:90:
6f:ca:94:25:86:63:5c:eb:0b:14:7a:0c:8c:19:8e:02:91:6f:
08:57:c5:ae:2b:18:08:d8:9e:43:33:04:0f:b8:75:84:5c:cc:
ab:9a:86:ac:5d:0b:6d:12:73:2b:26:b6:1f:9d:68:ec:3a:9c:
b4:60:71:c4:75:e7:41:15:14:a6:9c:8e:45:8f:14:4c:45:ef:
5c:32:72:ed:da:d4:e8:ba:f6:fe:1e:82:ef:5f:45:8f:df:ef:
63:25:dd:78:51:ca:4c:6e:fb:0a:12:ac:c2:af:65:9e:ef:c2:
f8:1f:72:54:6d:5f:ba:e0:9e:b4:14:ca:a1:ca:39:1a:f5:bc:
d9:6b:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org