Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/Y13cRSzC1ksUqdy13bxLyytqRlU.roa
File: Y13cRSzC1ksUqdy13bxLyytqRlU.roa (raw, json)
Hash identifier: 0qslAASuKvJOuM8AUexIjYIY+bb0nMwyzwnxYNZBmFc=
Subject key identifier: 63:5D:DC:45:2C:C2:D6:4B:14:A9:DC:B5:DD:BC:4B:CB:2B:6A:46:55
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 0184CEBE7FA3BA0675E5FCDD159176679809
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/Y13cRSzC1ksUqdy13bxLyytqRlU.roa
Signing time: Thu 01 Dec 2022 17:31:41 +0000
ROA not before: Thu 01 Dec 2022 17:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 212.68.168.0/22 maxlen: 22
212.68.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:be:7f:a3:ba:06:75:e5:fc:dd:15:91:76:67:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Dec 1 17:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=635ddc452cc2d64b14a9dcb5ddbc4bcb2b6a4655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:86:90:33:ca:a4:bf:15:c7:2c:bf:98:93:
8b:16:e6:51:ca:ff:91:ae:5b:11:77:d9:97:d0:fa:
87:0e:ed:e1:ba:42:bd:b4:76:98:15:5b:32:00:68:
cf:f2:7e:76:81:af:73:13:7e:12:51:b5:55:b9:54:
37:a8:1d:03:24:5b:4a:7f:6c:3e:5b:f7:6a:3f:b4:
26:f5:b2:bc:fe:d1:0f:26:c4:64:9c:65:bb:2f:39:
f4:99:c1:b6:7a:45:58:e2:1e:dc:69:4e:56:8c:0a:
07:49:ee:c9:ea:55:bc:01:df:f9:7d:d0:dd:c0:42:
cc:d6:3e:7a:c9:0c:2e:82:09:6c:e4:ec:72:71:bc:
cf:5a:f8:d7:c3:f3:b4:0a:68:00:1f:de:31:34:61:
43:7d:46:3a:f2:b2:c6:55:54:66:37:b2:a2:66:e7:
7f:a3:a9:c5:34:55:49:59:3d:1a:2c:2e:20:d2:26:
50:05:8e:8c:55:7a:2e:54:f7:17:db:d1:69:ba:cb:
fc:5d:b8:c0:58:f1:c0:02:a6:76:fa:df:e6:8b:67:
e2:19:6f:54:57:6f:fc:7b:89:c8:09:bc:e8:d8:46:
f5:71:da:25:38:a8:eb:7d:d3:8e:ee:0f:51:e0:ce:
46:cc:00:b1:51:2d:7c:45:2d:63:2a:ed:84:56:87:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5D:DC:45:2C:C2:D6:4B:14:A9:DC:B5:DD:BC:4B:CB:2B:6A:46:55
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/Y13cRSzC1ksUqdy13bxLyytqRlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.168.0/22
212.68.188.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:76:d4:9c:2c:ee:89:a3:5d:61:15:13:cb:1e:4f:ae:9c:8d:
4a:04:c9:27:71:60:58:ee:4f:d0:17:2e:58:ce:c5:76:73:af:
db:01:26:93:ce:c9:5d:4a:de:f1:ef:54:24:b9:71:be:d6:bd:
b6:3e:98:9f:44:88:11:0c:e1:6f:73:ca:9e:ea:38:c3:88:5a:
06:cf:84:74:86:23:9a:9b:37:79:a2:36:65:73:d5:56:35:86:
95:b0:cf:75:c3:5b:6f:c2:18:d0:9d:55:1c:08:95:7c:c9:1b:
7d:ed:cf:55:0e:92:d3:80:a0:08:dd:05:ca:ff:2b:26:dd:d4:
9b:3d:dd:b8:6b:e0:17:8d:0c:04:41:e9:73:5e:d6:69:bf:e2:
92:2e:9e:69:d6:d2:a6:7e:36:11:c5:f1:3f:82:8b:f0:5e:5d:
5c:f5:df:00:28:6f:bf:ac:18:b7:53:fa:d6:d8:67:6e:d0:12:
84:58:e8:06:ff:d8:2a:8b:7c:d5:ff:20:8e:d3:59:17:c3:c4:
0f:e7:a3:ff:ac:a7:55:14:2d:cc:eb:5d:45:24:37:73:8a:09:
d6:87:14:9e:36:e8:6c:e0:d4:fc:e0:fc:34:4c:5f:14:ce:52:
c7:9d:ea:43:59:8d:45:fb:e1:e7:e2:ee:d9:36:cd:14:c7:cf:
2d:51:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:49 2024 by rpki-client on console-fra.rpki-client.org