Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/s-R8vS-xPojQFaYrS6qpWMKOZKU.roa
File: s-R8vS-xPojQFaYrS6qpWMKOZKU.roa (raw, json)
Hash identifier: zGCLvPT78dr+70hpTmpKnr0rbrQfcz3RMp7Otq6cH7o=
Subject key identifier: B3:E4:7C:BD:2F:B1:3E:88:D0:15:A6:2B:4B:AA:A9:58:C2:8E:64:A5
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 05716D2B
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/s-R8vS-xPojQFaYrS6qpWMKOZKU.roa
Signing time: Sat 01 Jan 2022 06:59:13 +0000
ROA not before: Sat 01 Jan 2022 06:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48768
IP address blocks: 217.21.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91319595 (0x5716d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 1 06:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3e47cbd2fb13e88d015a62b4baaa958c28e64a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:da:54:7a:c3:7f:ad:d0:a1:9e:16:3d:ec:
86:3c:68:3b:3d:5b:0c:53:44:6e:7f:ed:cc:3a:81:
bf:9d:be:47:28:ee:2f:36:c7:10:c0:8f:a6:3d:58:
5a:0a:9c:fa:16:0b:37:c2:fd:c3:4f:0b:10:cf:4b:
87:0e:35:6c:e2:bf:64:13:70:78:3c:12:dc:ce:cb:
30:7f:8c:42:44:0b:b1:a6:4a:73:24:be:b6:1f:3a:
81:ae:b5:ad:37:ad:ad:f7:e7:61:78:6e:bd:1e:25:
6e:c7:82:3b:c1:ed:63:1b:95:36:e1:b6:ec:e4:74:
73:f1:5a:aa:5d:d0:1b:34:0d:06:cd:95:f6:1d:21:
58:6c:db:cc:5b:b8:c7:9e:04:6f:b0:01:16:f6:17:
74:c3:45:48:6f:5c:a3:7d:92:af:0f:7b:76:e2:b9:
fc:af:66:e7:78:cd:6a:46:47:6d:af:f7:f1:e0:b6:
9a:ec:63:74:74:b5:7c:d0:fb:4d:83:1b:b9:22:82:
d0:d9:56:3c:a5:7b:9d:7b:f2:63:91:03:08:52:0f:
ad:86:b0:b7:fe:d7:98:f0:55:10:f2:bd:40:dc:3d:
5f:7a:91:19:b3:0f:7a:f4:e2:cb:5a:60:6c:9b:db:
b6:35:33:48:cc:a2:39:d2:6f:78:ea:4a:c6:58:b7:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:7C:BD:2F:B1:3E:88:D0:15:A6:2B:4B:AA:A9:58:C2:8E:64:A5
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/s-R8vS-xPojQFaYrS6qpWMKOZKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.128.0/20
Signature Algorithm: sha256WithRSAEncryption
77:66:4c:1e:9e:48:3a:28:06:7b:3c:df:2d:b9:12:2e:b6:02:
79:ea:8d:92:54:68:40:74:60:b8:94:2c:4d:f7:4d:7c:b1:74:
b2:85:d6:3d:1f:86:63:6e:49:5c:97:2d:11:ad:0f:cd:3c:61:
c1:de:42:8b:31:1b:6c:83:9e:4e:2d:9d:3e:94:e4:50:59:37:
c1:73:cd:21:b1:50:58:8c:04:96:63:34:d3:15:f6:07:c7:0d:
10:8a:05:df:9a:78:ae:4e:32:80:a7:36:9e:dc:46:79:fb:9d:
30:b4:32:25:1e:14:2c:2a:4c:24:df:41:c2:32:c6:11:20:ba:
36:4b:1e:01:bb:64:43:93:4f:45:1e:cd:ed:3c:36:91:13:e9:
10:89:d8:3e:c6:a1:b0:84:4b:6e:1d:c6:4f:46:73:41:97:aa:
ac:5a:45:72:88:6a:a1:71:c7:7a:d4:18:1c:ac:07:87:bf:04:
e1:05:d2:78:9f:26:c3:95:c7:43:c5:c9:db:ac:4e:3c:5e:85:
3e:01:ef:ca:19:df:d0:84:22:0a:a0:d8:38:3c:39:4c:8b:49:
8a:de:27:52:f0:b2:13:86:19:17:5e:b2:1b:6b:71:7a:ad:d2:
a5:3a:b4:50:eb:35:8b:4a:38:4e:23:5f:57:90:5e:21:1e:0c:
3f:1d:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:05 2024 by rpki-client on console-ams.rpki-client.org