Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/qNDesDzznm5LomgAKKP6s_UTvKs.roa
File: qNDesDzznm5LomgAKKP6s_UTvKs.roa (raw, json)
Hash identifier: F5OixrYgstE6lr3GDGCHXK9JhT37tkJynvh6S5FVI6o=
Subject key identifier: A8:D0:DE:B0:3C:F3:9E:6E:4B:A2:68:00:28:A3:FA:B3:F5:13:BC:AB
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 105F3A1A
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/qNDesDzznm5LomgAKKP6s_UTvKs.roa
Signing time: Sat 01 Jan 2022 02:58:06 +0000
ROA not before: Sat 01 Jan 2022 02:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25554
IP address blocks: 212.122.164.0/24 maxlen: 24
212.122.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274676250 (0x105f3a1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Jan 1 02:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8d0deb03cf39e6e4ba2680028a3fab3f513bcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:98:53:49:75:9a:b0:71:db:26:7c:50:fb:
db:84:14:cf:76:30:8c:8d:48:7f:5e:15:27:ea:5e:
cb:cb:b5:b3:7e:4e:f1:26:7a:3c:73:c2:c9:b8:d4:
56:ed:b2:87:d4:74:c7:e1:d6:5e:59:8f:00:f8:21:
0b:c4:26:11:96:7e:9f:2e:c5:ba:11:9b:af:b9:9d:
10:35:07:89:2b:6e:3f:f6:62:0c:c9:28:33:60:e5:
74:39:39:13:1e:ba:8c:72:80:66:46:96:4a:95:6f:
9c:4a:13:9c:14:cd:60:4e:b3:06:55:53:4f:20:ad:
b0:ce:68:a5:06:7f:02:91:a4:63:42:46:53:e9:63:
11:53:67:dd:fc:48:b4:e7:d3:23:46:e3:56:e7:22:
66:3f:cc:de:87:51:42:2a:8e:9f:0c:6f:45:bd:69:
36:bd:75:e3:91:11:9c:70:62:e5:dc:fc:ed:a9:8e:
2a:1f:6e:09:97:ba:9f:98:35:32:c3:20:ed:bf:c4:
d7:f2:ce:31:c7:18:3d:e8:30:3c:34:2e:a5:9e:fc:
b1:a2:be:d9:e7:82:60:18:a7:6f:98:79:91:2a:72:
95:9a:b5:da:17:d8:b4:c6:fb:90:4e:3a:a9:22:44:
02:60:7c:c8:bf:62:f1:1f:b5:16:63:05:2b:29:28:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:DE:B0:3C:F3:9E:6E:4B:A2:68:00:28:A3:FA:B3:F5:13:BC:AB
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/qNDesDzznm5LomgAKKP6s_UTvKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.122.164.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:9b:1e:5d:97:ff:77:d2:6c:da:3f:7a:80:52:d6:d2:81:a2:
dd:62:02:66:38:1e:7b:75:eb:7f:f4:57:e5:3c:b8:d6:fc:74:
e0:54:a6:cb:f5:d4:85:72:a9:3d:3e:d0:b9:fb:ed:55:57:26:
4c:bd:30:db:73:4e:e8:a5:7a:f1:79:2a:e0:8f:95:6d:bf:69:
1e:d1:dd:5f:f8:4d:a2:04:a7:62:71:b0:77:3d:53:51:6d:6c:
60:07:e2:03:0e:c6:b1:3a:f4:97:ae:29:c7:42:5e:d0:00:af:
98:15:18:7a:83:cc:14:13:be:91:07:9c:1e:57:d5:a1:4a:d1:
70:3c:54:83:0c:98:a3:af:30:39:d2:8c:d7:df:5e:e8:4e:c9:
0e:c4:15:d2:4f:64:f0:76:f6:2e:d4:f2:bd:31:18:f3:93:c6:
a0:ef:d2:f7:14:b6:37:27:c3:60:b5:74:5e:37:7b:ed:63:51:
a3:7c:79:b6:55:3d:45:fc:ed:d1:b9:7f:97:ac:88:d0:13:91:
86:86:99:e2:1e:4a:2e:ed:89:ba:1c:12:8a:9f:e8:4b:b2:07:
e2:e3:8b:53:8f:57:ad:2e:24:5c:b1:6c:e8:22:2f:54:f6:51:
fa:40:38:a3:d4:3a:bc:1b:5f:87:4b:d8:2b:39:31:e4:1b:99:
72:a8:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:16 2024 by rpki-client on console-ams.rpki-client.org