Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fY3iDqI0zGE9M_tng4TNnMBglGo.roa
File: fY3iDqI0zGE9M_tng4TNnMBglGo.roa (raw, json)
Hash identifier: SM+w8h+/71LBDaG8Jxz5xoQnEAOqAdn9W08yut+pMDM=
Subject key identifier: 7D:8D:E2:0E:A2:34:CC:61:3D:33:FB:67:83:84:CD:9C:C0:60:94:6A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 104A4462
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fY3iDqI0zGE9M_tng4TNnMBglGo.roa
Signing time: Wed 08 Jun 2022 07:31:03 +0000
ROA not before: Wed 08 Jun 2022 07:31:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210974
IP address blocks: 212.192.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273302626 (0x104a4462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 8 07:31:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d8de20ea234cc613d33fb678384cd9cc060946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:1a:82:9e:e7:35:fa:e3:70:2c:b6:5b:3b:
8b:af:86:8a:eb:23:4e:61:79:fc:d9:9c:22:93:84:
2e:20:28:bc:76:d1:1d:16:46:c0:ae:97:3d:73:3f:
25:d2:0f:bd:b3:5b:6f:e2:f8:93:25:64:b5:b5:b3:
c9:5c:2f:d7:53:44:80:b0:93:c2:2c:3f:5d:61:20:
46:b7:a9:26:bc:1e:26:32:7e:37:7c:90:21:ad:ce:
19:f8:b8:8b:55:d2:09:b7:9a:c5:5b:d0:06:d3:f6:
b9:23:86:41:10:5b:da:ab:ed:ae:db:cf:68:9d:ac:
ab:26:d7:65:33:eb:ef:ba:d6:85:3c:00:4d:60:06:
5b:af:ec:77:2e:97:59:c0:e5:5e:fb:89:98:41:c8:
9e:cc:88:3a:e3:90:c8:6e:da:71:59:81:93:e0:fc:
32:45:c0:9a:71:8a:60:6f:8c:47:99:82:6f:c3:e9:
d9:e7:a8:4e:83:f3:88:04:5c:15:70:1c:bd:57:f0:
c9:da:c8:6d:7c:5a:ae:58:b4:9b:e6:37:f1:4a:e5:
d7:51:0e:42:55:5a:86:04:0a:ef:bf:60:0f:0f:91:
a0:d0:b7:e0:6c:39:f7:f6:58:47:7d:08:02:57:31:
b2:92:e2:79:ce:93:7a:e7:aa:33:45:27:ba:b8:31:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8D:E2:0E:A2:34:CC:61:3D:33:FB:67:83:84:CD:9C:C0:60:94:6A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fY3iDqI0zGE9M_tng4TNnMBglGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6f:54:30:19:63:c1:2c:a8:ed:92:dc:d2:7b:1b:b8:bf:20:
73:37:c4:f0:01:f4:d2:41:cd:b2:dd:a1:cf:88:f4:d5:c9:94:
88:56:1e:61:5c:40:94:76:50:61:de:d3:5b:f5:39:0a:98:4d:
c7:e6:e8:32:ac:8c:47:cd:b9:74:12:6a:ee:5a:1a:73:b5:77:
0f:cf:4d:eb:ff:5a:62:e0:0f:bf:42:9f:b7:c7:eb:41:7a:d4:
8b:f6:1e:94:bb:36:93:10:80:5e:52:0b:65:dd:12:7b:a4:aa:
fb:dc:cd:ec:c0:ff:44:2c:96:7e:23:a9:2d:db:62:41:1c:7e:
89:7d:4e:b1:7e:62:97:4f:f7:99:c4:45:55:99:bd:1c:fc:4a:
4b:28:8c:01:c2:3c:c1:bc:d7:f9:18:ed:71:2e:39:ec:9c:39:
82:58:d1:2d:d1:67:bb:72:cd:53:bd:8e:3e:84:f2:19:53:47:
47:cd:b3:b5:61:10:78:58:29:fe:a3:1f:46:76:d2:6a:8c:80:
6b:47:5a:3a:98:3b:03:db:90:1d:15:bb:8d:c7:41:b3:09:e7:
a5:68:ba:ce:7c:df:85:c9:29:32:2a:86:8a:1e:78:bc:ac:37:
56:1f:73:f7:ae:8c:6c:f8:82:89:38:95:d0:1c:6e:89:e1:61:
2d:35:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:23 2024 by rpki-client on console-fra.rpki-client.org