Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nx8HXINMQOLH40HZZV-Df1P6-Fg.roa
File: nx8HXINMQOLH40HZZV-Df1P6-Fg.roa (raw, json)
Hash identifier: h8kHSSunM8QKctOVpinK8gbtOzSFUzLFfKEJUpSjlw8=
Subject key identifier: 9F:1F:07:5C:83:4C:40:E2:C7:E3:41:D9:65:5F:83:7F:53:FA:F8:58
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38A72BE0
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nx8HXINMQOLH40HZZV-Df1P6-Fg.roa
Signing time: Tue 17 May 2022 05:23:33 +0000
ROA not before: Tue 17 May 2022 05:23:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48064
IP address blocks: 212.50.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950479840 (0x38a72be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:23:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f1f075c834c40e2c7e341d9655f837f53faf858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:8f:aa:28:c5:36:fd:78:0a:01:1f:af:3e:
a0:63:bc:c7:88:18:d4:f8:58:ab:32:4b:f7:9f:1f:
20:ea:21:20:af:1d:94:0d:ad:ec:8f:95:e9:c4:1e:
55:f2:f8:1b:24:1d:c0:d8:7d:f6:c9:73:c0:f1:af:
aa:04:1c:ff:21:f1:88:f8:e5:65:b5:62:3d:40:8c:
4a:d1:ab:f8:fd:5c:ea:ae:bf:62:39:3b:10:1e:a0:
78:ae:bd:17:56:d2:5b:a0:5d:d4:55:ed:8c:35:88:
58:ef:59:8e:29:d8:7e:0f:82:ca:aa:74:eb:95:40:
1c:98:44:34:df:47:10:dd:92:7f:a3:e5:a0:dd:a1:
27:5c:d3:e0:38:23:3f:66:e8:66:2c:f4:b1:9b:35:
95:f7:2f:9f:c4:c3:50:a5:4d:05:22:47:b0:0a:d6:
bb:fb:03:ea:18:b3:07:82:3d:09:6a:ac:7e:a6:5a:
a3:d8:14:fd:bb:00:34:e8:51:c7:8b:ad:07:50:ec:
47:f7:da:0e:9c:8f:7a:96:ec:de:4a:7d:66:df:c2:
16:92:db:3e:ae:a4:9a:23:bc:4d:f1:6e:23:fd:f0:
28:e1:32:df:d8:93:5e:3f:aa:29:f1:18:6e:b5:a7:
69:f2:e5:70:e4:be:2e:76:ff:b6:29:e9:0b:67:5c:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1F:07:5C:83:4C:40:E2:C7:E3:41:D9:65:5F:83:7F:53:FA:F8:58
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nx8HXINMQOLH40HZZV-Df1P6-Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.50.17.0/24
Signature Algorithm: sha256WithRSAEncryption
89:38:50:d6:a0:54:91:66:4e:fe:f9:89:3c:25:b7:0c:a8:1c:
b4:8a:d0:81:25:7c:e6:a2:e6:6b:d9:10:75:b3:59:3d:33:04:
5b:02:d5:04:9f:80:08:a9:ee:c7:dc:b0:f9:a0:93:d8:31:92:
00:97:5a:f8:90:ab:24:cf:23:33:6c:ca:ec:53:c3:4c:aa:6b:
12:fe:a7:a7:30:d2:e4:cf:c6:0b:cc:62:60:6a:34:64:b3:86:
56:45:e2:5d:01:0f:78:9a:10:f1:51:89:57:a5:08:b8:ec:f3:
fd:29:f8:3a:e4:2b:67:c6:fb:6c:66:4b:c3:ba:6f:3e:8b:78:
5e:b3:fa:88:01:7b:12:65:70:48:62:2b:78:84:dc:60:5b:b8:
10:b8:b1:ea:ed:95:f3:8e:eb:55:71:0f:e7:5b:4c:86:08:8e:
ec:33:dc:d7:73:95:b8:a9:7a:95:67:5e:ec:15:fe:1a:3d:31:
1b:dc:fe:27:76:f6:f2:c6:31:09:c4:29:dd:0b:3a:da:e6:7b:
69:5c:18:d8:1e:55:8e:4b:58:a6:7e:6d:25:e2:94:39:5d:16:
49:cc:6a:ad:07:95:72:a1:a3:de:84:98:ae:8d:e8:35:b1:6a:
a6:c8:2d:a7:21:04:bf:d4:1c:ac:08:86:03:0a:93:11:76:21:
d6:29:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:21 2023 by rpki-client on console-fra.rpki-client.org