Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/2MbvziD9kM4K8jSIb60crap_jyk.roa
File: 2MbvziD9kM4K8jSIb60crap_jyk.roa (raw, json)
Hash identifier: wDVQF0Bs5wxPVrZUw+hI19oPmBLvVDk1wqJ5u/gRbAM=
Subject key identifier: D8:C6:EF:CE:20:FD:90:CE:0A:F2:34:88:6F:AD:1C:AD:AA:7F:8F:29
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03FCDA5D
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/2MbvziD9kM4K8jSIb60crap_jyk.roa
Signing time: Thu 20 Jan 2022 18:07:42 +0000
ROA not before: Thu 20 Jan 2022 18:07:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 212.30.36.0/24 maxlen: 24
212.30.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66902621 (0x3fcda5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 20 18:07:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8c6efce20fd90ce0af234886fad1cadaa7f8f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:46:52:55:08:ba:4a:91:63:04:ed:dd:3e:
28:4d:12:38:78:d0:54:5b:99:49:04:9c:fa:ef:f5:
b1:7b:7e:4f:7a:4b:bc:9d:30:35:40:b9:ba:50:13:
2b:10:38:6c:8f:bd:29:86:97:db:54:cd:c7:18:05:
a4:96:64:2f:5a:c2:5d:0a:3b:6e:bc:ca:b2:c4:1f:
83:9c:6e:19:7f:a6:e8:46:eb:49:00:0d:a3:2d:a1:
87:56:e9:02:b3:68:b4:69:a4:cd:09:cf:98:b3:59:
41:bb:76:52:e1:93:b2:12:5e:11:0a:0d:a6:15:2a:
e1:14:37:6e:ce:d2:05:be:d5:36:b0:2e:76:e7:2d:
f0:f1:f7:c5:35:d6:ab:67:cc:9d:7e:68:41:40:f4:
ed:7e:0c:2a:16:e6:d9:49:69:6f:68:d2:26:98:55:
df:7e:b1:c2:cd:b4:d2:0b:80:57:b1:d4:b9:c8:93:
86:12:fe:ff:56:2e:26:8b:f4:92:78:37:bd:1c:0c:
ab:bd:05:a6:10:4b:8a:69:84:cb:05:91:f7:a8:9d:
22:77:85:50:19:87:16:5c:2e:b7:be:2e:ae:c7:78:
9c:c2:3d:39:26:36:4e:3f:72:db:c1:af:bc:a7:92:
c8:1f:20:db:d7:d0:c9:06:a4:9f:c3:c0:f8:10:16:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C6:EF:CE:20:FD:90:CE:0A:F2:34:88:6F:AD:1C:AD:AA:7F:8F:29
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/2MbvziD9kM4K8jSIb60crap_jyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.36.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:9c:8d:b4:e1:88:7e:eb:dd:19:a9:f9:24:14:39:58:b8:93:
bc:47:f6:06:9d:e9:28:d6:2e:29:4e:c4:42:c2:31:d1:68:5d:
b4:ca:83:1c:da:d7:07:3e:16:51:a3:8c:c5:8c:3c:7f:3d:17:
bf:cc:5f:fd:22:dd:18:ef:41:72:4f:6e:6b:fc:ce:48:b1:96:
21:35:01:57:47:7f:fb:91:2f:ff:cc:8a:9b:51:0c:b5:8b:78:
b1:ac:c8:2b:a3:59:93:25:1e:1c:59:c8:9d:e9:88:75:6f:56:
22:47:f7:df:7e:85:da:89:c5:06:d8:9b:8c:80:c4:6a:eb:9f:
3e:72:b8:c2:dc:1e:aa:5e:78:9a:3d:f1:fe:cc:d7:d8:07:97:
43:87:4d:40:a9:f7:d4:ba:c9:e9:4b:72:65:24:7c:2a:98:66:
bb:52:7b:f9:a9:f1:2d:3a:81:96:82:08:2f:db:52:dd:f3:60:
2c:91:40:71:3a:7f:d2:71:f2:cf:87:c2:78:fa:1e:81:d7:a3:
8a:21:6c:f2:6f:46:41:43:9d:e6:81:41:21:d0:1b:37:19:d7:
4b:10:d5:eb:46:d0:cb:2f:2d:d0:c6:08:3e:0e:c8:89:a2:79:
99:5c:05:b3:a6:3b:32:5b:e6:37:aa:02:be:bc:36:cf:2d:bb:
9d:f9:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org