Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/74gIqCWQjnHcV0bfUXvimSCzrM4.roa
File: 74gIqCWQjnHcV0bfUXvimSCzrM4.roa (raw, json)
Hash identifier: oiE5h5CTWSRy7jWGp1BzP60AeWVDt39Bb7P79+ZXeLk=
Subject key identifier: EF:88:08:A8:25:90:8E:71:DC:57:46:DF:51:7B:E2:99:20:B3:AC:CE
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 05108357
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/74gIqCWQjnHcV0bfUXvimSCzrM4.roa
Signing time: Thu 19 May 2022 06:58:17 +0000
ROA not before: Thu 19 May 2022 06:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18046
IP address blocks: 212.30.40.0/22 maxlen: 22
212.30.52.0/22 maxlen: 22
212.30.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84968279 (0x5108357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: May 19 06:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef8808a825908e71dc5746df517be29920b3acce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:73:66:b0:01:dd:96:89:a9:4b:cb:d8:7b:fb:
20:12:6c:62:1f:82:29:4c:a2:9c:98:34:7e:59:80:
44:6a:88:de:8b:ef:55:d3:1c:9b:83:a0:66:8c:12:
e2:f9:ca:d2:ce:b4:6c:f8:3e:48:74:29:a4:06:58:
c1:38:7d:a4:39:ef:ea:0e:0a:05:36:70:4c:f2:27:
89:26:90:18:78:6b:5c:f0:3c:12:bb:45:1d:8d:36:
37:96:b2:12:06:71:a5:69:ba:39:e2:fe:15:77:a5:
fe:b0:f1:28:92:71:2a:79:88:b7:a1:82:8a:04:27:
07:80:61:9a:c8:b0:01:17:73:1b:4a:40:0e:84:c0:
20:a7:6c:0c:0f:1c:88:e6:0d:21:9e:5f:a0:21:a4:
0d:85:49:73:4e:71:a4:8b:26:b1:e8:26:19:52:65:
5e:69:a9:69:ae:63:7c:32:1e:57:4b:9e:5e:e9:25:
53:c5:7b:79:03:48:42:2f:81:ca:ee:d5:a2:19:07:
13:df:6e:b9:01:55:97:00:3f:94:8f:79:50:1d:ff:
f6:02:ed:7b:d4:a0:25:85:dd:2a:3d:e0:b6:f3:f5:
fa:63:0c:82:ce:1b:f9:44:80:18:47:bf:c2:6a:d5:
11:39:11:5d:ac:41:18:2d:20:46:fc:7e:93:6c:e7:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:88:08:A8:25:90:8E:71:DC:57:46:DF:51:7B:E2:99:20:B3:AC:CE
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/74gIqCWQjnHcV0bfUXvimSCzrM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.40.0/22
212.30.52.0-212.30.59.255
Signature Algorithm: sha256WithRSAEncryption
49:32:52:83:40:ab:6e:b4:63:c1:9f:ad:10:dd:cd:b6:01:6d:
c4:aa:22:1e:40:23:82:41:f3:a8:62:07:35:50:f8:5c:11:1b:
9f:40:0b:9c:0e:98:0d:4f:a0:75:65:55:54:0f:cc:7b:91:90:
7f:a2:6a:49:fb:88:ff:3b:4f:1f:65:e8:45:33:9f:11:c4:72:
39:37:da:9c:92:a7:76:d7:4b:ae:4c:d6:4c:c2:34:05:02:67:
14:a5:f0:6e:6c:21:76:b8:5a:5d:96:7e:c0:06:4d:5a:87:8e:
cd:bb:9a:89:8d:31:d7:6c:44:91:3a:14:15:11:bc:64:40:f4:
9e:b6:4f:e3:5b:40:96:f4:5a:ca:63:47:48:d3:91:69:91:99:
7e:b5:7f:9a:a5:6b:77:f1:9d:4c:65:8c:b2:01:d6:e0:d7:c4:
fd:ab:e5:9f:81:a0:a0:04:f2:41:62:49:08:ec:cb:d8:41:04:
1e:8a:8a:75:6e:c3:4d:63:f5:54:0c:b1:0c:ad:39:99:21:b3:
74:f6:1f:d5:ae:24:7a:f3:fa:c1:1e:8c:fc:88:9f:e3:3a:f8:
0e:14:a4:96:fb:99:1b:6f:dc:71:7a:6e:bd:95:16:d6:2b:60:
a8:c7:70:2a:c0:a3:86:6c:95:62:35:29:e8:d7:1d:18:50:d2:
9b:a1:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org