Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CkD7cJXAHXAkQwrCF0DDlla_WnI.roa
File: CkD7cJXAHXAkQwrCF0DDlla_WnI.roa (raw, json)
Hash identifier: ofcjL2XfEOIIxGByP4DHhk5gWtDPZyAD36s4N8PmgX0=
Subject key identifier: 0A:40:FB:70:95:C0:1D:70:24:43:0A:C2:17:40:C3:96:56:BF:5A:72
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 42A25958
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CkD7cJXAHXAkQwrCF0DDlla_WnI.roa
Signing time: Sat 01 Jan 2022 06:05:01 +0000
ROA not before: Sat 01 Jan 2022 06:05:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34875
IP address blocks: 212.220.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117935960 (0x42a25958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:05:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a40fb7095c01d7024430ac21740c39656bf5a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:7d:7a:29:35:cc:eb:1c:78:72:dc:6f:84:
b0:25:49:6a:97:69:a3:8b:c6:30:1a:94:27:7a:64:
a4:58:b7:69:86:56:82:d6:b8:c1:16:9f:f9:15:91:
87:c7:8e:18:69:06:79:ec:e6:f6:c0:ef:24:61:9e:
12:19:40:18:f6:58:e4:f0:cf:c4:05:d0:d8:98:45:
5e:ad:80:c9:7d:6b:44:dd:ce:4e:d5:63:24:48:9e:
1e:a2:9d:df:82:75:05:7d:a8:41:d2:b9:4d:07:51:
db:3f:6b:ad:41:0d:1d:d1:84:d6:ba:3b:10:fa:a0:
97:a7:12:b9:29:17:df:b1:0b:2b:6a:e0:6d:c2:32:
f0:f7:57:39:c0:68:3e:51:d5:e4:b5:15:3b:92:e1:
8d:cc:9c:bb:d1:ca:67:2e:cf:36:41:86:28:18:a2:
ed:e1:06:ab:8d:55:b3:a2:15:da:69:a3:33:a6:dc:
13:6e:3b:68:fb:2a:d8:32:ba:c7:0d:41:bd:5e:c4:
95:aa:3b:1e:22:19:c3:63:bd:c4:a0:f9:3a:5e:ab:
96:9a:2b:82:29:d6:76:c4:70:ab:07:b7:b7:17:de:
82:dd:63:81:13:19:97:50:bc:cd:80:45:e0:67:30:
4e:a0:a3:2b:4a:b8:a3:e0:0b:34:4d:4f:df:da:dc:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:FB:70:95:C0:1D:70:24:43:0A:C2:17:40:C3:96:56:BF:5A:72
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CkD7cJXAHXAkQwrCF0DDlla_WnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.220.4.0/24
Signature Algorithm: sha256WithRSAEncryption
24:85:27:86:a1:6a:ff:33:4d:97:96:ba:4c:e4:68:af:ca:ec:
cd:4d:0b:74:5b:ab:7d:bb:3b:4e:fa:bd:c6:58:aa:e7:9b:2e:
5b:c5:87:c6:ca:f5:41:b3:8e:24:9d:95:8d:64:32:46:71:c7:
7c:aa:48:ac:ca:ed:9c:f5:37:10:1c:72:3c:9d:ef:c2:9c:50:
8e:de:39:06:e8:ef:d8:ab:70:db:59:8f:36:42:e6:cc:42:d2:
57:e1:29:77:8c:dc:d4:28:86:c6:f7:75:20:a5:f0:8d:ff:2e:
c7:8f:18:d7:f4:65:a1:67:e6:33:dd:18:1a:c9:3e:c4:11:3d:
8b:9f:40:4c:ab:cb:98:11:13:98:d7:a2:a6:f4:00:c9:fc:82:
76:42:61:e3:81:46:f9:18:d5:d6:d3:40:a0:dc:01:51:de:6d:
13:07:df:15:c7:3f:c3:6d:e7:38:0b:9c:12:7a:e5:64:68:c7:
2f:6f:39:50:17:c5:77:b0:6e:b7:04:88:5e:ce:53:99:fa:9f:
5c:7b:50:b0:29:25:06:c2:80:da:d7:4f:10:9d:05:a2:ab:91:
54:4c:6b:49:52:77:f3:9f:08:2a:d3:c7:f6:24:da:4b:3e:38:
a1:7b:be:b4:b2:6e:31:c0:af:54:e8:2a:57:2c:6a:ce:dd:4a:
0c:73:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:24 2024 by rpki-client on console-ams.rpki-client.org