Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/89VmCPxNbGm3OdwGnYWQco5al_0.roa
File: 89VmCPxNbGm3OdwGnYWQco5al_0.roa (raw, json)
Hash identifier: K1c68HCXD6phBw+Saqk0YXqHmjYcSdWjEXiHuF3pin0=
Subject key identifier: F3:D5:66:08:FC:4D:6C:69:B7:39:DC:06:9D:85:90:72:8E:5A:97:FD
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 050463CC
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/89VmCPxNbGm3OdwGnYWQco5al_0.roa
Signing time: Mon 16 May 2022 13:34:29 +0000
ROA not before: Mon 16 May 2022 13:34:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 212.30.44.0/24 maxlen: 24
212.30.47.0/24 maxlen: 24
212.30.45.0/24 maxlen: 24
212.30.46.0/24 maxlen: 24
212.30.58.0/24 maxlen: 24
212.30.57.0/24 maxlen: 24
212.30.56.0/24 maxlen: 24
212.30.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84173772 (0x50463cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: May 16 13:34:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3d56608fc4d6c69b739dc069d8590728e5a97fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:45:53:59:20:b9:03:12:56:09:54:24:0b:
2b:9e:aa:61:4d:55:cc:7f:85:10:7f:8c:d6:e5:2a:
e2:e6:f6:63:03:3a:e0:12:5c:08:9f:2b:01:e8:b5:
cb:f1:51:4d:57:0a:89:e3:a9:b1:54:4a:00:49:c5:
9d:6d:d8:5a:ad:d1:0a:28:88:bc:63:61:dd:a2:6b:
05:7b:d8:e2:be:7a:c4:36:7b:ac:73:fa:e7:c1:30:
c2:78:cb:47:75:04:47:3a:12:ed:e3:84:4c:c7:dd:
52:86:5c:c5:e9:42:2c:04:f2:06:0e:f6:7e:5d:10:
cb:d2:83:6a:08:d6:14:ba:eb:50:96:3f:5a:c7:61:
9c:24:38:b5:66:15:ac:e7:5e:df:39:a4:87:e2:3d:
59:17:dd:bb:93:07:d8:eb:ef:29:c6:eb:32:6f:3e:
5d:a3:eb:38:0e:11:92:41:c3:07:ca:a4:44:83:16:
49:94:10:3b:c0:b3:21:7f:68:8f:89:32:4b:41:8a:
69:82:d1:26:8f:c7:1a:9e:3e:f9:93:25:96:18:52:
8c:cd:cd:ca:39:f9:88:01:3f:bb:c2:4d:66:7c:55:
2d:ed:be:a3:48:0b:7e:36:ba:b7:1f:2b:e8:e6:42:
58:61:ac:da:6e:eb:5b:f2:f9:09:37:e9:1c:8a:96:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:66:08:FC:4D:6C:69:B7:39:DC:06:9D:85:90:72:8E:5A:97:FD
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/89VmCPxNbGm3OdwGnYWQco5al_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.44.0/22
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:1a:76:51:e2:13:cb:8d:38:8f:f2:7c:89:60:45:b2:a8:76:
13:e4:9b:12:66:76:54:08:5f:a6:a3:eb:8d:47:15:fb:53:0c:
f0:dd:a3:9e:6e:8f:9a:9a:55:97:92:a9:00:bf:a8:34:c5:fc:
db:77:a9:59:a4:6c:b7:d5:54:9f:c5:9c:8f:2c:ca:60:c5:55:
8b:de:2f:4d:3a:1e:85:b4:f6:3c:6a:87:f2:66:e8:70:88:f6:
1d:19:75:55:bf:00:10:27:23:c8:71:fd:e4:cf:d1:cb:52:c8:
45:ad:90:dd:49:de:48:ca:bd:12:73:94:ee:2d:ae:dc:b1:4a:
01:10:ee:15:05:96:5a:2e:95:f0:f5:67:6a:f6:19:80:1a:d2:
fd:92:83:3d:6a:01:27:45:ef:21:50:9c:06:9d:e4:17:f9:fd:
8e:c2:9e:f0:e3:c4:dc:84:98:3d:66:5b:f1:b4:b7:41:50:43:
d2:20:ed:25:30:d2:7c:0e:9e:2c:6f:15:22:15:33:f6:7f:6a:
be:03:a5:d9:5b:ef:2d:93:32:d4:1b:39:1c:93:bc:98:67:f8:
ae:26:11:4c:82:11:69:a5:3b:12:4c:65:5c:2c:54:e9:26:4e:
5f:d8:57:92:ae:52:17:75:8d:46:2f:58:4d:f5:c0:34:60:30:
8f:ad:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org