Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/alrJqZoZGDJHrxn-3CrhkJmeqAc.roa
File: alrJqZoZGDJHrxn-3CrhkJmeqAc.roa (raw, json)
Hash identifier: 7idC0a5hi3m6PKz3Sbdumx1gduWaRG4Dh25cTLkhSgY=
Subject key identifier: 6A:5A:C9:A9:9A:19:18:32:47:AF:19:FE:DC:2A:E1:90:99:9E:A8:07
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38ACD820
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/alrJqZoZGDJHrxn-3CrhkJmeqAc.roa
Signing time: Tue 17 May 2022 05:30:20 +0000
ROA not before: Tue 17 May 2022 05:30:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51830
IP address blocks: 212.36.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950851616 (0x38acd820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a5ac9a99a19183247af19fedc2ae190999ea807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:1b:09:40:12:41:9b:7c:3a:c6:05:f1:ba:
a9:5b:ec:cf:64:4d:1b:a9:69:d2:c8:42:0a:d3:97:
fa:81:51:f4:b4:47:f7:1f:b7:66:8f:80:94:ad:3d:
8c:7f:8a:cb:ee:ef:e4:cc:5b:61:64:e8:1f:e0:44:
38:f6:ca:fe:4c:4b:ce:61:bf:1a:09:ff:98:da:2c:
e0:eb:24:db:50:66:a6:f6:ec:48:4d:13:93:f5:cd:
78:0a:2a:cd:74:77:f6:c3:83:7b:85:f3:6c:3a:50:
db:bb:8c:10:93:0d:6e:3d:93:72:d6:48:54:85:a6:
01:6e:38:71:6c:0b:fe:f8:1e:1a:a7:5e:8f:cb:7a:
e7:c1:3e:53:cd:78:52:3f:14:30:77:72:50:3c:1b:
47:23:a3:ed:92:f0:73:32:74:82:f2:23:45:9d:ae:
31:4b:f1:eb:8d:8f:5d:39:fb:6c:9d:e6:09:5b:3d:
40:2f:a9:2c:6b:73:c3:56:a2:69:bf:eb:d4:e6:70:
c2:06:5e:97:43:c8:55:5a:8c:78:f1:17:96:e6:1e:
de:8b:47:7d:fa:6a:57:58:80:cd:97:87:53:ca:97:
9a:47:a7:b5:b5:f7:dc:ff:ac:be:6a:1b:1f:fa:b8:
6a:96:69:ca:3c:74:96:25:1f:56:14:da:cb:8d:09:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5A:C9:A9:9A:19:18:32:47:AF:19:FE:DC:2A:E1:90:99:9E:A8:07
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/alrJqZoZGDJHrxn-3CrhkJmeqAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:37:fa:0e:57:fe:91:b7:4c:4a:04:e9:05:97:78:a6:71:b4:
a3:ec:15:c0:d3:8a:d8:69:d5:e8:1d:4e:62:a2:a9:8d:db:81:
8a:7a:ae:61:b6:ae:cd:1b:5e:e6:0d:f9:bd:42:a1:5e:43:2f:
67:cb:bc:b2:75:45:02:f7:d1:4f:44:41:ad:1c:2a:72:e9:15:
19:26:87:96:5a:ea:52:53:e9:58:68:ed:be:62:2c:a2:0a:35:
bd:9b:b9:4c:d3:fc:8d:49:de:25:ea:37:e4:e7:07:e9:d6:c1:
02:bc:4e:67:bb:14:de:30:89:84:a1:7a:40:de:0f:8c:89:bf:
3a:19:88:49:56:3a:ce:3c:b7:11:2c:4c:ae:09:64:ac:aa:8e:
ba:91:e4:4b:13:23:ed:57:3f:2d:e8:de:1d:b5:27:6a:16:e5:
30:9a:12:60:3d:92:81:9e:d8:67:ee:eb:5b:5a:86:4d:38:b4:
3a:d1:3c:a4:18:be:51:7a:06:8f:5b:66:85:50:50:ca:04:2d:
de:f8:55:ae:56:b5:a7:bb:d0:7e:03:ea:3f:8e:ff:15:75:0d:
e6:b4:24:12:65:0b:4b:5d:04:71:44:3b:9c:78:ca:25:45:55:
57:d5:02:89:9b:74:8c:e1:27:d8:0f:9f:a7:8f:68:b0:3b:c6:
47:e9:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:20 2023 by rpki-client on console-fra.rpki-client.org