Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/58m0XYpBr__iJWnOs4aajaC78s8.roa
File: 58m0XYpBr__iJWnOs4aajaC78s8.roa (raw, json)
Hash identifier: aKIHI6QWCsqVmJY9Y4pSHQMLp2modYBIx7UVawvYx0w=
Subject key identifier: E7:C9:B4:5D:8A:41:AF:FF:E2:25:69:CE:B3:86:9A:8D:A0:BB:F2:CF
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B5EFF07
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/58m0XYpBr__iJWnOs4aajaC78s8.roa
Signing time: Sat 01 Jan 2022 08:58:38 +0000
ROA not before: Sat 01 Jan 2022 08:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 212.98.224.0/24 maxlen: 24
212.115.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190775047 (0xb5eff07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7c9b45d8a41afffe22569ceb3869a8da0bbf2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:43:bd:ae:6c:3f:7f:07:23:2c:f4:ae:77:
f0:2f:9e:cc:ec:3b:03:72:67:08:ca:41:6f:1f:9a:
cf:84:eb:23:bc:53:1a:1c:94:ea:0f:ba:20:20:fd:
6c:ca:06:d8:43:4c:04:f3:b9:2e:2b:86:6c:54:84:
38:b4:99:c0:1d:0f:6e:c5:5e:5f:f8:55:54:66:d6:
12:f3:f8:a7:67:57:a7:7f:8b:a2:33:33:e8:7b:19:
35:3b:99:a1:3b:cc:ed:99:f7:be:65:47:a2:3b:c5:
4b:18:8b:80:3f:a0:68:e6:22:6f:f1:12:95:62:26:
ed:af:1e:75:24:05:a4:fb:98:6f:e7:18:35:4f:d8:
fa:99:4d:c6:76:39:19:3f:64:e2:b9:90:65:d2:99:
e3:84:14:28:ae:4c:b3:38:4c:59:c4:a6:78:dc:39:
d1:d2:51:b5:fd:2c:8d:21:a6:b1:67:6d:37:c8:21:
69:0d:92:06:b4:d5:32:e2:df:64:a7:87:5e:a7:b5:
b2:4c:a5:1f:7d:5c:60:86:94:6b:02:05:23:2e:c3:
f9:b0:ef:e6:1b:6b:b2:1c:c9:45:62:3d:d7:91:3b:
6f:cf:95:31:c1:99:ab:06:26:bd:12:15:19:cc:3f:
21:84:a0:64:33:60:ce:03:a4:16:cd:a5:28:27:cb:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:B4:5D:8A:41:AF:FF:E2:25:69:CE:B3:86:9A:8D:A0:BB:F2:CF
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/58m0XYpBr__iJWnOs4aajaC78s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.98.224.0/24
212.115.30.0/24
Signature Algorithm: sha256WithRSAEncryption
36:55:ee:30:27:2d:84:a0:f5:77:4b:08:6a:cb:78:d1:98:bc:
2a:70:a2:11:c1:8d:18:52:2c:82:d0:59:63:0c:97:e7:c4:6e:
a1:74:90:e9:a3:0f:9d:ac:87:41:22:de:c1:37:21:29:a1:a1:
56:d2:10:52:23:22:1a:be:78:99:5d:a3:e1:6d:50:42:46:2e:
fc:92:42:ef:9e:a1:49:d7:f5:1f:88:76:40:fa:6d:a8:00:86:
27:71:73:6d:6c:02:a3:34:50:5e:f7:db:78:7c:e3:00:1c:df:
38:28:c0:70:11:5c:ac:05:25:81:d2:02:0c:99:d9:2b:56:0c:
45:ff:74:cc:76:9a:a2:c1:ad:2e:7b:eb:43:1a:aa:6b:fa:65:
f7:80:64:4e:a1:14:f8:c3:d2:9c:72:3a:c5:ab:52:16:ff:31:
8e:e6:10:66:51:67:34:b3:3d:db:80:d0:21:68:df:e3:4f:5a:
a8:02:7c:76:57:50:08:53:b8:21:e9:96:46:fd:55:63:f7:34:
0e:25:52:13:02:1a:37:db:30:d3:e7:97:99:d5:0e:4a:32:51:
10:f0:d4:82:bf:29:75:4f:d6:cb:96:87:fa:e6:f5:0d:d9:42:
aa:5c:35:a0:8c:02:1f:33:61:47:5e:21:ef:fa:f6:09:60:9b:
48:5a:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org