Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/kE_jyNKasUADdkqiZcV6KnVg-z0.roa
File: kE_jyNKasUADdkqiZcV6KnVg-z0.roa (raw, json)
Hash identifier: ADagvFgU7ZuoyjBApElFokthRGW8m+U7mnhgnv81oO4=
Subject key identifier: 90:4F:E3:C8:D2:9A:B1:40:03:76:4A:A2:65:C5:7A:2A:75:60:FB:3D
Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial: 41077F90
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/kE_jyNKasUADdkqiZcV6KnVg-z0.roa
Signing time: Sat 01 Jan 2022 13:54:50 +0000
ROA not before: Sat 01 Jan 2022 13:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197229
IP address blocks: 212.72.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091010448 (0x41077f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Validity
Not Before: Jan 1 13:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=904fe3c8d29ab14003764aa265c57a2a7560fb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:57:4a:48:5d:c6:c8:7b:4f:d1:07:20:c9:
da:bd:f5:e1:a6:96:35:b1:6f:1b:37:34:b2:cb:e9:
5a:2a:4e:21:f7:03:3c:39:54:33:9a:19:c7:26:22:
09:ee:53:d0:63:f0:43:9a:37:09:fb:0d:38:38:6e:
a1:76:2e:46:ce:db:e0:d5:e5:34:d6:0d:52:48:e1:
a0:64:69:56:d3:8b:6f:92:8e:ab:45:cd:ff:54:47:
23:4f:f5:bd:c1:99:30:cc:fe:b6:d5:6c:26:1f:c1:
a4:49:01:64:b9:c5:74:b6:dc:05:30:a7:8b:ba:9c:
e9:ec:d5:72:7a:3d:de:c1:a8:50:50:ec:1b:2e:25:
f6:09:48:43:d4:d7:4d:81:08:5f:86:20:41:58:10:
31:d2:3c:70:df:3a:f2:45:10:cb:6f:4c:e8:4e:b9:
c2:58:a4:bc:c6:43:e3:0b:ea:7e:3c:93:3a:45:3b:
67:02:2b:17:be:8e:0f:ea:19:d7:64:5e:c8:ec:39:
b1:1a:7a:16:22:ca:4f:6b:2a:d9:6a:8d:1a:db:52:
5d:b9:4d:96:78:25:8b:12:c2:85:b2:52:94:f2:32:
ee:e6:83:19:02:4d:9a:e9:4d:20:dc:88:0b:98:5a:
b7:9a:31:04:2d:1e:e3:52:d2:bf:13:32:5f:17:15:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:E3:C8:D2:9A:B1:40:03:76:4A:A2:65:C5:7A:2A:75:60:FB:3D
X509v3 Authority Key Identifier:
keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/kE_jyNKasUADdkqiZcV6KnVg-z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.155.0/24
Signature Algorithm: sha256WithRSAEncryption
02:21:8c:6f:84:52:30:4a:92:0a:f1:c7:d9:d9:5e:2f:d6:4c:
df:72:c0:e6:f0:61:2d:ff:cc:90:c4:24:03:b9:6f:88:06:a7:
8f:da:1e:79:5d:d7:f1:6e:4b:ba:83:e2:d5:83:98:f3:f9:3e:
6d:0c:15:80:28:be:c7:50:45:52:f9:31:35:6e:26:c5:53:ec:
dc:10:d9:81:a8:ea:ba:80:06:e1:31:2e:e9:12:c5:5b:93:5c:
25:1f:7c:f7:9e:d4:84:52:34:2c:78:c7:e2:38:60:f1:85:63:
eb:e4:14:75:b1:5d:10:9d:96:f1:d6:f5:9d:05:43:b1:00:27:
38:46:e9:ee:54:d8:34:09:62:79:cc:d9:0c:43:34:a6:ce:56:
e2:bb:2c:67:31:a1:e7:43:e1:20:05:d3:de:07:1c:06:f5:1d:
60:49:41:02:bf:52:6f:4f:99:c3:93:64:c5:d7:a1:25:b8:0d:
e3:11:41:85:90:b2:b0:fa:90:91:b5:28:31:13:2f:be:b0:64:
a9:b5:ad:40:18:54:3c:46:b6:0b:57:2e:7c:9f:54:c8:b9:0a:
f7:a1:6b:6f:24:25:9d:65:fe:0d:bb:ac:63:c1:92:e6:ef:77:
61:5e:3a:44:ad:91:2e:02:f0:4c:91:68:4f:47:e2:d5:d2:52:
da:cb:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org