Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/A9mkISXaV3T8jqn4-1P6pOgopWs.roa
File: A9mkISXaV3T8jqn4-1P6pOgopWs.roa (raw, json)
Hash identifier: k8Br1QXeALendrQuUW694ygQSiUYmHpOxpAxL4ao2ug=
Subject key identifier: 03:D9:A4:21:25:DA:57:74:FC:8E:A9:F8:FB:53:FA:A4:E8:28:A5:6B
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 04C4F11A
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/A9mkISXaV3T8jqn4-1P6pOgopWs.roa
Signing time: Thu 21 Apr 2022 11:16:24 +0000
ROA not before: Thu 21 Apr 2022 11:16:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 212.30.40.0/22 maxlen: 22
212.30.62.0/24 maxlen: 24
212.30.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80015642 (0x4c4f11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Apr 21 11:16:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03d9a42125da5774fc8ea9f8fb53faa4e828a56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:65:79:e6:db:e0:19:7b:5f:e9:da:81:f9:
c9:34:bc:7f:b3:46:53:f5:a3:54:86:5f:77:68:21:
ce:b5:46:82:4a:7e:1f:c3:fd:bb:56:4f:0c:b9:cf:
43:54:48:9b:51:3f:9e:f8:c3:3f:6e:c9:98:35:57:
79:e0:65:cd:60:96:53:51:b1:e5:8a:c2:3f:d3:b5:
96:94:dd:1c:73:ec:6c:34:a4:e6:e1:d4:a2:2a:3f:
c9:6b:30:20:0f:80:99:99:c4:e3:58:6a:67:a2:52:
64:68:74:22:da:8a:37:74:f2:e1:a0:54:51:87:59:
af:b9:fd:86:df:6b:54:f8:ef:7c:ed:2e:da:76:be:
ca:12:39:45:7e:37:60:69:0d:a9:9d:59:83:b1:83:
1b:31:d9:5d:02:16:89:ea:b2:14:9a:e2:e5:63:08:
4c:df:74:05:88:a9:e6:31:72:03:ce:74:ca:1f:10:
7f:03:74:32:b7:67:e4:ab:c7:11:6b:54:9b:13:f8:
6f:5b:ff:20:55:35:cb:c6:89:69:8c:a2:c2:0a:76:
2e:11:ec:bd:03:06:76:ce:9f:be:0a:31:03:34:df:
a6:fb:fe:3b:4f:ee:4c:78:05:df:1f:9a:e9:7e:4e:
19:f6:79:2b:ef:d3:23:c5:4c:f0:0c:e4:75:50:f3:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:A4:21:25:DA:57:74:FC:8E:A9:F8:FB:53:FA:A4:E8:28:A5:6B
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/A9mkISXaV3T8jqn4-1P6pOgopWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.40.0/22
212.30.61.0-212.30.62.255
Signature Algorithm: sha256WithRSAEncryption
37:b5:89:f2:04:81:85:86:82:22:bc:fc:62:4a:2e:01:7b:ac:
5f:65:e1:c9:54:ea:f1:35:6b:c2:dc:c6:9c:52:64:10:ec:c1:
e5:f9:92:6f:ea:32:22:4a:ad:a7:0d:86:02:11:2b:b1:0c:10:
9a:89:7f:d5:7e:8c:78:b0:57:d0:44:cc:1e:09:e3:48:d6:cb:
ad:5b:55:4f:df:4e:20:3f:e2:64:f8:b8:00:25:fa:ac:65:8d:
fd:67:ac:1e:22:79:ea:20:b0:2c:61:be:83:20:a6:79:9c:52:
c7:c4:25:2b:94:d8:a6:32:fd:fa:70:25:2e:31:17:56:09:d3:
f1:2b:ee:a3:2b:49:45:52:2b:83:58:c2:e1:90:42:05:9f:d2:
d0:49:76:b8:5c:9c:c5:30:5b:a2:9d:f2:48:a8:96:7c:94:cd:
9a:f3:90:4b:9c:8d:ab:5c:c9:28:25:c4:fb:d0:e9:52:26:0a:
8e:7a:cf:4a:c2:ff:c9:df:7c:bc:6b:f5:e7:ac:0b:15:e3:d3:
e1:01:06:e0:fe:9f:40:76:8d:be:26:92:4d:e9:28:72:78:be:
13:52:cd:d8:c5:7a:d3:fb:8e:e0:85:75:c5:6f:9b:ee:70:4c:
1c:7a:6e:1c:93:33:dd:dd:89:fe:b3:54:ca:9e:32:af:e4:83:
e6:17:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org