Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/SHguHjJ_5spcKsSd184O_JI6oRo.roa
File: SHguHjJ_5spcKsSd184O_JI6oRo.roa (raw, json)
Hash identifier: 7Ozy8LPRs8N0zmRd/ama+XhbQ1P1kMGfkYCkhbwR/pQ=
Subject key identifier: 48:78:2E:1E:32:7F:E6:CA:5C:2A:C4:9D:D7:CE:0E:FC:92:3A:A1:1A
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03CD72A0
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/SHguHjJ_5spcKsSd184O_JI6oRo.roa
Signing time: Sat 01 Jan 2022 14:04:24 +0000
ROA not before: Sat 01 Jan 2022 14:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 212.30.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63795872 (0x3cd72a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 14:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48782e1e327fe6ca5c2ac49dd7ce0efc923aa11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:75:6b:39:f1:98:58:76:b1:dd:1c:f1:6c:
91:6f:ee:43:09:8b:30:d2:49:f5:03:4d:4a:69:1b:
87:9e:49:53:d9:69:7e:01:f5:4f:ee:6d:31:23:67:
d1:b0:64:88:8a:6c:9d:da:5a:7a:c4:81:58:81:e8:
c3:7b:0c:04:c7:02:5e:64:a1:98:fb:05:20:f8:f3:
5a:64:a9:ec:e8:ae:00:cd:01:36:a3:0d:3b:d8:f9:
5f:2d:9d:fd:1d:6a:ef:ce:26:c8:21:89:93:2f:33:
74:cd:66:6f:6e:11:6d:75:91:64:66:76:80:6d:7b:
d7:76:85:57:a9:a8:7e:03:bb:5d:85:d3:bf:34:91:
88:19:b3:3f:da:be:e7:a6:03:91:1d:d9:28:43:6d:
f8:75:8f:d5:40:a1:69:0c:7a:40:46:1d:92:02:fb:
7b:c6:49:d2:d2:33:6c:72:b0:3b:55:7d:7d:2b:ad:
59:c3:b1:22:55:27:0c:c2:56:74:94:40:c6:6a:71:
b2:2c:6c:91:1d:de:67:49:c0:46:1d:84:1b:9d:62:
0d:ab:75:34:ee:97:a6:d9:bf:54:aa:28:51:6f:97:
fb:6a:ca:31:9b:36:e4:98:bf:18:c3:26:04:a1:ba:
42:7c:67:4c:47:5e:55:88:76:3e:80:25:ac:c6:eb:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:78:2E:1E:32:7F:E6:CA:5C:2A:C4:9D:D7:CE:0E:FC:92:3A:A1:1A
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/SHguHjJ_5spcKsSd184O_JI6oRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.63.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:0f:1a:0d:f0:96:e4:10:5e:fb:7e:dc:68:34:fc:4b:89:04:
31:c3:f6:7e:bd:b4:c4:bd:ff:e0:3a:99:c2:ed:b6:fa:50:07:
3e:c9:cd:96:ae:30:8f:a9:df:53:3a:d5:16:cb:4e:0a:10:62:
2b:79:73:9d:2d:e1:24:84:0a:6c:b9:46:83:86:73:25:c6:09:
f3:ad:fb:01:eb:96:b0:1f:f1:60:c4:66:6c:d2:7e:7d:23:e7:
c0:b7:d3:2c:22:6c:ca:69:0c:89:fa:13:89:dd:89:d2:fa:30:
ec:74:b1:80:fe:16:3c:b3:f3:fd:3b:8e:db:b6:2b:23:66:36:
a8:f1:79:1b:c4:b7:13:7a:35:98:bc:44:1d:ee:68:50:8d:62:
b7:40:5b:b7:1d:65:c2:dc:f3:fd:d7:8b:1c:16:fb:88:e7:ac:
a0:31:9c:25:c7:74:1a:f6:25:9f:8e:20:ea:ca:e9:b0:49:a0:
69:57:d1:64:5b:b3:49:bb:91:98:83:b4:09:c5:ce:2d:1b:b9:
a1:1c:7b:7d:66:3f:fd:87:6c:82:aa:0b:bf:7d:83:f4:53:b5:
22:15:73:70:57:a7:4f:29:09:73:81:f0:aa:02:72:44:9c:20:
cc:f3:3b:83:07:e1:4f:44:88:02:df:f5:47:04:61:af:02:da:
0c:ae:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:35 2023 by rpki-client on console-fra.rpki-client.org