Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/aJiD1PHu0eUsbtlhott8EMr2w_4.roa
File: aJiD1PHu0eUsbtlhott8EMr2w_4.roa (raw, json)
Hash identifier: gZLlGGmBSwR++STAw9MjwOq82AIO3kqwaCxGXhScyqQ=
Subject key identifier: 68:98:83:D4:F1:EE:D1:E5:2C:6E:D9:61:A2:DB:7C:10:CA:F6:C3:FE
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38AE1004
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/aJiD1PHu0eUsbtlhott8EMr2w_4.roa
Signing time: Tue 17 May 2022 05:30:20 +0000
ROA not before: Tue 17 May 2022 05:30:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51855
IP address blocks: 212.50.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950931460 (0x38ae1004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=689883d4f1eed1e52c6ed961a2db7c10caf6c3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:f8:a1:3e:5a:f0:f6:7a:c6:bb:c0:b3:ba:
ad:10:3f:c6:a2:df:de:2d:2d:e1:2f:a2:76:37:a7:
98:02:54:98:da:23:4f:82:62:9c:e6:5c:a8:2f:9f:
e5:93:92:d5:03:4b:dc:6a:cc:ee:5d:ea:2d:80:15:
1d:23:0f:05:a0:ad:c6:bc:4a:de:37:d6:f8:00:11:
b5:9c:a0:1c:a3:90:76:c4:01:8e:d1:0d:58:47:26:
63:72:de:49:df:33:b5:aa:cf:91:4e:06:6f:6f:e9:
f2:3c:47:74:ff:87:ea:bb:26:09:57:8f:72:f9:a2:
32:7a:51:1a:a7:3e:fe:0c:2d:9c:fe:ec:76:25:4f:
fd:4c:8c:1d:e0:e0:b0:80:05:32:8f:6a:a2:2c:0b:
4f:ec:07:50:97:6d:30:2c:5e:ec:6b:92:bd:61:01:
82:0c:fe:8e:f5:73:05:88:5d:7d:7d:63:84:e6:53:
1a:5c:d9:0f:df:bc:4e:c1:be:0f:41:af:42:b0:ef:
17:fd:18:ab:62:99:25:3c:ad:5a:ec:36:be:43:e0:
97:70:c5:e6:f7:b4:ed:36:f6:7d:3a:ed:7a:c5:e5:
5a:20:3f:0f:23:3d:7a:a6:9b:27:4d:d3:59:f6:80:
21:04:16:fa:ac:d7:9d:cb:97:0c:e3:4a:a9:8b:1a:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:83:D4:F1:EE:D1:E5:2C:6E:D9:61:A2:DB:7C:10:CA:F6:C3:FE
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/aJiD1PHu0eUsbtlhott8EMr2w_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.50.21.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:79:c9:65:01:7d:0e:2f:e8:fe:05:1f:04:96:0c:cd:1a:5f:
3c:b0:bb:00:99:65:11:f4:31:64:b3:9a:d5:db:cf:33:37:51:
06:c8:b7:cf:c3:75:00:9b:e0:bb:5f:de:9c:2d:1e:86:b5:82:
35:ad:74:a7:6d:d6:73:64:e9:61:6d:17:9e:31:52:df:18:56:
d1:a7:7b:a0:7c:ac:e7:a0:11:9b:0a:3a:bd:7c:52:6b:fc:ed:
23:eb:b4:a4:aa:9e:b2:cb:d6:dd:93:8b:2d:e2:8d:c2:2a:f6:
5c:a7:07:d1:d7:38:35:b1:c3:09:87:24:0a:b7:9f:23:a3:5a:
42:e2:bb:5d:82:67:d3:9b:52:13:63:3b:cd:41:91:14:b8:de:
40:05:bb:f3:9e:48:41:68:89:82:e4:aa:a2:3e:76:37:38:92:
e5:44:06:b4:99:3f:c6:88:2c:ba:bf:0e:7d:7c:a6:cd:6d:d5:
ae:4c:e9:7f:17:74:79:64:7b:4c:80:7c:b1:0a:d7:cb:a9:77:
d0:22:c4:c8:62:32:b7:b8:23:d5:7d:6e:58:c6:30:39:5a:ef:
23:69:ab:09:b9:a5:47:f8:b6:00:9a:71:66:24:d5:71:e9:46:
18:75:4b:f0:48:3d:dd:63:fb:19:59:b6:9f:02:c1:ff:0d:61:
cf:c1:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:12 2023 by rpki-client on console-ams.rpki-client.org