Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LsAGj6kfYovGCpjyiAcnJvPpDcg.roa
File: LsAGj6kfYovGCpjyiAcnJvPpDcg.roa (raw, json)
Hash identifier: MLXVhVhZsrMULI6pjwFNa80+M/4La3+tqyOl4vOtP9M=
Subject key identifier: 2E:C0:06:8F:A9:1F:62:8B:C6:0A:98:F2:88:07:27:26:F3:E9:0D:C8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E1FCB52
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LsAGj6kfYovGCpjyiAcnJvPpDcg.roa
Signing time: Sat 01 Jan 2022 01:58:20 +0000
ROA not before: Sat 01 Jan 2022 01:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207083
IP address blocks: 212.192.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236964690 (0xe1fcb52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ec0068fa91f628bc60a98f288072726f3e90dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:a1:7a:f7:da:cb:d7:2c:d1:40:e7:7d:6a:
9c:47:d3:5f:bb:3e:47:f9:6a:06:61:bc:dc:b5:27:
7c:b8:f2:df:e1:69:95:c3:ec:6e:63:59:e4:1c:90:
48:f5:25:79:8b:62:04:60:60:14:76:f6:88:23:f0:
30:7d:7f:69:0a:a7:af:46:a1:de:28:d6:18:16:9d:
e2:64:db:d3:f6:c3:d9:e0:d1:c0:f7:f5:3f:97:74:
16:a8:71:0b:4f:a9:08:e0:fb:b4:a4:7b:01:85:b7:
88:80:17:4a:b3:27:ff:0c:61:9f:dc:af:39:05:50:
84:6d:fa:f8:ba:96:e3:df:58:ff:ce:28:4b:95:78:
37:6b:01:e0:9d:f4:5d:ba:f8:06:a1:bc:cd:26:d6:
b5:e4:f9:16:90:a5:ec:41:ed:64:c8:55:a3:6e:85:
12:9a:f9:d6:e4:c2:5a:d2:34:36:47:9f:37:b6:b3:
65:13:0e:72:7d:74:ae:27:06:e9:55:81:3a:8c:7f:
67:a9:e5:35:56:50:1a:e7:1f:5a:d8:d5:98:99:80:
17:1c:dc:11:20:f1:72:4f:b0:f0:c2:5f:82:f1:1a:
6b:ce:84:e5:5b:93:73:92:d4:ee:8f:8b:20:4d:a0:
a4:63:ae:40:0f:ff:76:fe:96:49:2f:07:e8:11:a6:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C0:06:8F:A9:1F:62:8B:C6:0A:98:F2:88:07:27:26:F3:E9:0D:C8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LsAGj6kfYovGCpjyiAcnJvPpDcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.8.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:c8:75:2f:c6:fa:19:27:ab:23:8a:a0:aa:ad:1c:de:cc:54:
40:94:24:a6:a6:7a:34:74:f0:20:c7:11:5c:34:9a:21:a2:55:
3e:d7:61:9e:60:b6:2a:e3:0e:15:9c:04:7a:33:b7:64:5b:4f:
a2:12:73:07:1c:1b:d9:3a:0f:f3:ec:4e:e3:86:82:1f:5b:fb:
07:82:07:c2:ee:96:e8:b8:c0:9f:5d:1e:0a:c2:f3:bb:7f:0d:
eb:32:67:01:52:73:69:39:d8:cd:1a:1c:ad:66:1f:60:6c:7a:
a3:8c:8c:8b:ec:b6:21:9e:cb:35:3f:00:7f:e9:cb:d0:33:97:
e2:6a:00:da:aa:8a:a5:e8:6b:18:30:e4:21:28:7d:92:cc:75:
0e:94:fa:85:72:0e:f1:76:9d:5e:5a:e9:04:18:7c:8b:0e:51:
0d:87:c1:01:c1:37:4f:0c:db:18:d7:cc:24:e5:85:e8:23:fd:
9d:13:0c:13:ae:55:ed:ae:e3:c1:93:67:2d:23:ca:ea:9f:a0:
8c:19:a7:63:45:d9:ad:0c:76:03:5a:0e:11:d3:3e:54:c6:f4:
55:fb:df:08:b9:69:9d:e6:82:fe:fe:36:09:cf:8a:69:9d:8c:
4b:0c:5d:95:7d:94:b4:13:d0:a8:f6:09:eb:52:07:bf:cf:20:
02:cc:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org