Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/zA9mdeipyvhllzpF6A-tTfq3Qc0.roa
File: zA9mdeipyvhllzpF6A-tTfq3Qc0.roa (raw, json)
Hash identifier: OIflDd5BW1pgOjRQhE9lI4LM2ePdQHF1g7ZPG1MiIe4=
Subject key identifier: CC:0F:66:75:E8:A9:CA:F8:65:97:3A:45:E8:0F:AD:4D:FA:B7:41:CD
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B53A6A3
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/zA9mdeipyvhllzpF6A-tTfq3Qc0.roa
Signing time: Sat 01 Jan 2022 08:58:29 +0000
ROA not before: Sat 01 Jan 2022 08:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12873
IP address blocks: 212.15.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190031523 (0xb53a6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0f6675e8a9caf865973a45e80fad4dfab741cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:2a:e9:a0:e3:20:56:bf:42:07:dc:5f:64:
3a:e6:12:10:3d:ef:24:e2:18:b6:b1:6d:b9:a2:42:
eb:22:8a:f0:61:a3:0c:20:2d:6c:cb:ae:4c:9c:70:
b6:32:c6:37:12:57:8d:fc:8f:8b:cc:6d:78:b6:f0:
b9:60:b5:e5:b5:0d:0e:f2:0f:2b:e5:11:05:f0:9f:
01:f6:24:d3:4c:37:a4:86:a6:8e:b4:62:1b:05:aa:
88:8e:9b:0d:fb:83:cd:b4:e9:83:da:8b:02:d2:84:
3f:08:25:80:91:c8:f3:38:9a:1e:4a:41:e8:b8:51:
bb:8f:2d:66:91:5e:43:90:84:70:81:d0:5b:e4:83:
42:ed:56:7f:07:a6:16:34:4f:98:ac:4e:87:ba:1f:
c2:63:39:4e:06:8c:bd:90:52:77:32:16:ce:10:ff:
a1:83:46:e4:b7:12:b9:06:b0:ba:57:5f:e9:df:37:
0f:7f:7c:fa:76:91:ba:92:91:db:90:2e:0c:ae:50:
10:de:e5:83:6a:0d:9f:a3:2d:18:a6:60:fd:d1:47:
4c:54:30:a8:15:3f:d6:b7:44:4b:d3:ba:1b:0a:67:
a1:e3:54:cf:97:e9:3c:88:6a:50:8a:df:93:0b:cd:
07:3f:e6:fc:23:1e:a0:b8:63:bc:38:59:b9:f2:c5:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0F:66:75:E8:A9:CA:F8:65:97:3A:45:E8:0F:AD:4D:FA:B7:41:CD
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/zA9mdeipyvhllzpF6A-tTfq3Qc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.9.0/24
Signature Algorithm: sha256WithRSAEncryption
10:53:7e:a4:0f:64:32:aa:c0:5d:d1:37:f9:f3:66:58:0d:1f:
93:85:60:ba:6c:f2:fb:42:c4:4d:e6:48:cc:cc:09:d2:38:67:
3e:6a:b0:b3:e7:21:47:27:89:48:93:17:2b:9d:5b:c3:1d:ba:
b3:3d:4c:a9:e5:7c:35:71:d0:e3:d8:3f:20:d0:ea:8e:f2:dc:
7f:4f:b0:12:0b:a8:bd:82:22:85:35:34:89:a0:b8:bc:87:b9:
d0:2e:72:86:07:a9:2a:d6:9d:52:ec:1d:c1:e2:3e:f0:f3:46:
99:94:13:a2:86:97:63:ae:46:65:8c:cc:cf:ba:95:ad:9b:3d:
ee:73:3e:ca:80:7e:26:81:06:3a:a9:ee:ca:1c:a0:f0:cb:c8:
61:b2:c2:83:51:4e:7c:bb:4c:f8:36:dd:1d:60:8b:9a:91:66:
7c:3f:a4:3a:f7:d0:34:6d:4c:1c:28:a4:29:e3:75:4e:bf:c7:
f5:d4:3e:da:97:b6:6d:f3:b2:f0:c3:af:c6:45:e2:b3:b3:91:
2e:5e:a5:21:17:ce:a3:e3:25:90:7b:ad:4e:7f:fe:98:08:0e:
cf:8d:69:a3:c6:65:df:1a:d4:25:37:5a:00:08:2e:b5:3d:fa:
38:79:7d:9a:70:dc:5f:be:ac:26:07:6a:3d:fa:a2:d1:f5:ce:
35:17:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:03 2023 by rpki-client on console-ams.rpki-client.org