Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/EF1Zo0SUxjcBqND75xCLdOdoPrM.roa
File: EF1Zo0SUxjcBqND75xCLdOdoPrM.roa (raw, json)
Hash identifier: xpM1GV5Bk/NkI5fVYpOyCLqBNrfD8s3CONkkBwpwB60=
Subject key identifier: 10:5D:59:A3:44:94:C6:37:01:A8:D0:FB:E7:10:8B:74:E7:68:3E:B3
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03C8B219
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/EF1Zo0SUxjcBqND75xCLdOdoPrM.roa
Signing time: Sat 01 Jan 2022 14:04:21 +0000
ROA not before: Sat 01 Jan 2022 14:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.30.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63484441 (0x3c8b219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 14:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=105d59a34494c63701a8d0fbe7108b74e7683eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:93:09:9d:ea:b9:6d:7f:2a:90:c9:30:a8:
2e:50:6b:10:05:42:7a:95:f7:ec:06:54:8c:17:8e:
3b:71:c5:08:f7:1a:2a:49:4d:28:d0:b0:d6:ca:4e:
06:bc:5a:15:bd:ad:c6:2e:8f:a2:c3:38:8b:14:29:
1d:e0:e0:04:02:3e:31:f4:41:85:34:dc:b8:84:5d:
ce:87:d3:b3:91:09:bd:a3:52:7f:74:80:6f:1d:dd:
cd:b2:20:87:12:2a:15:3e:1f:16:f6:90:fb:36:5a:
cf:4a:f3:1f:d4:9c:7a:cf:fe:0f:a3:fa:f8:69:f7:
30:1a:07:6d:1b:ee:d2:c9:3f:ed:c5:d3:1b:58:80:
ea:7a:8d:ba:67:35:cb:c2:98:27:af:49:70:ec:d0:
1f:1b:be:df:30:0f:b6:1a:5f:0b:4a:98:2d:8c:88:
3b:91:42:76:9e:c4:ca:d6:e4:b4:82:36:42:5e:d8:
24:f0:fb:71:f4:35:bd:dc:6e:83:bf:f4:cd:55:8f:
a6:2b:4d:2f:4f:c5:7a:cd:81:e7:2a:0f:87:31:db:
44:07:9e:04:1a:7d:c0:be:de:b6:48:37:2c:5f:52:
a3:89:c9:7d:bc:ed:67:9d:e5:96:ef:6a:57:e3:43:
72:f9:87:79:5a:68:38:af:8e:92:9f:56:e2:2d:d3:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5D:59:A3:44:94:C6:37:01:A8:D0:FB:E7:10:8B:74:E7:68:3E:B3
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/EF1Zo0SUxjcBqND75xCLdOdoPrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:ec:99:c0:7f:e3:13:b1:51:7a:08:27:36:ba:ba:2c:96:d9:
4a:dc:c0:1c:3e:0e:49:b4:49:80:a8:75:f2:59:21:30:6f:ad:
7f:41:bc:1f:da:0c:0f:5b:1e:dd:37:73:38:97:51:12:2f:5d:
89:16:2b:de:55:28:57:ce:30:b2:c7:c5:a4:dd:08:39:e2:90:
ee:43:de:db:6d:cf:50:42:69:e5:a5:10:e9:8f:fd:03:5e:55:
87:56:66:be:5e:7a:90:ff:aa:b0:1a:76:66:f1:cd:ec:4e:97:
1e:8b:ef:03:73:dc:50:89:aa:4a:6c:7a:ef:e6:77:d0:b5:44:
b7:c1:6f:a9:30:06:3e:95:04:4b:05:2d:c1:e6:32:8d:de:42:
83:c4:bf:bd:a2:2c:9b:60:fd:a8:31:c0:c9:b0:c0:6c:77:3e:
5f:de:b0:77:be:b5:76:4c:46:b4:32:50:87:59:3d:5d:08:9e:
db:d3:65:96:76:f8:61:fc:32:fc:21:d0:c5:68:31:c4:f1:2c:
fc:a0:23:51:2f:06:5b:8c:ee:fe:02:9a:79:99:87:fd:a5:57:
5d:fd:fb:cf:b6:8f:6e:fd:fa:40:65:ea:fa:af:a5:35:b5:f4:
b4:2c:99:10:b9:6b:73:3e:70:78:9f:3f:7b:3e:cc:4c:3b:5e:
95:67:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:28 2024 by rpki-client on console-ams.rpki-client.org