Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/_SE1v1pqAcR3PXPcYKBZSmHaK_E.roa
File: _SE1v1pqAcR3PXPcYKBZSmHaK_E.roa (raw, json)
Hash identifier: udjWYQYcnh+XfM9oTfOmeUyZpJXWs66VZ/0QVF+4uqI=
Subject key identifier: FD:21:35:BF:5A:6A:01:C4:77:3D:73:DC:60:A0:59:4A:61:DA:2B:F1
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 04C3D525
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/_SE1v1pqAcR3PXPcYKBZSmHaK_E.roa
Signing time: Thu 21 Apr 2022 11:15:18 +0000
ROA not before: Thu 21 Apr 2022 11:15:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 212.30.44.0/24 maxlen: 24
212.30.41.0/24 maxlen: 24
212.30.40.0/24 maxlen: 24
212.30.43.0/24 maxlen: 24
212.30.42.0/24 maxlen: 24
212.30.47.0/24 maxlen: 24
212.30.45.0/24 maxlen: 24
212.30.46.0/24 maxlen: 24
45.94.53.0/24 maxlen: 24
45.94.52.0/24 maxlen: 24
212.30.58.0/24 maxlen: 24
45.94.55.0/24 maxlen: 24
45.94.54.0/24 maxlen: 24
212.30.57.0/24 maxlen: 24
212.30.56.0/24 maxlen: 24
212.30.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79942949 (0x4c3d525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Apr 21 11:15:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd2135bf5a6a01c4773d73dc60a0594a61da2bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:b5:fa:7d:f5:6e:0b:1f:c2:d6:d3:f2:21:
df:64:32:bf:73:bc:95:75:43:8d:11:b0:68:e1:9e:
be:ee:17:d9:8b:bb:7e:8f:67:9a:96:dc:6a:54:16:
f3:77:d6:4c:ee:a2:a2:53:1a:d2:75:56:5f:cd:73:
3e:e7:6b:14:1a:85:ea:f9:da:ed:02:73:e6:cf:99:
21:84:25:db:35:51:00:02:37:31:ed:b2:3f:ea:4b:
14:b3:f7:4e:f8:c6:b2:14:a0:c7:61:e9:dc:cc:78:
15:aa:e3:d8:2d:1f:3c:c2:42:bb:50:da:dd:6a:c8:
84:61:67:10:fa:27:f3:60:bd:3a:e1:3f:1a:d6:05:
29:fc:55:2a:b9:47:2d:eb:f0:4a:6d:b3:1e:9d:d9:
f8:18:24:75:2c:b3:24:a9:bd:5c:25:c4:f3:92:50:
69:29:bd:6d:21:74:f7:0f:07:e7:7f:9b:85:a2:7d:
c6:05:28:b7:8b:ee:2a:ae:73:c7:c1:f3:c9:a2:e0:
1a:e8:7e:8f:9a:1a:f0:f4:08:75:22:ec:1a:c1:8b:
49:b7:2e:33:9c:1f:97:62:3b:e6:ce:85:07:99:50:
51:79:dd:f2:92:0d:92:e5:c6:3c:bd:66:65:c1:8f:
1c:88:f7:7f:62:99:43:a0:fa:e3:fe:b9:63:21:b1:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:21:35:BF:5A:6A:01:C4:77:3D:73:DC:60:A0:59:4A:61:DA:2B:F1
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/_SE1v1pqAcR3PXPcYKBZSmHaK_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/22
212.30.40.0/21
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
04:70:1b:5b:de:d6:2c:7c:6e:6a:1f:03:60:9b:68:4d:41:7a:
85:ea:ab:e7:24:1e:d9:7d:52:a8:55:72:9b:d7:d6:3a:d8:58:
64:57:5a:20:67:a1:a5:cc:7c:44:ea:6d:8f:45:b9:7f:b1:49:
de:9a:83:1a:9a:75:33:0c:f5:c8:eb:f3:77:49:f9:a0:7f:d6:
95:0c:a6:2c:66:70:48:cd:4d:75:56:46:57:20:4d:a0:89:c2:
1f:b8:d1:aa:f2:92:0f:f0:19:96:6e:b4:f5:e4:e1:91:7d:09:
2a:65:9c:d0:8b:a1:8e:00:7f:6c:f2:9b:32:7c:77:68:44:53:
94:d1:bf:2a:a6:db:50:69:5a:05:e8:03:70:61:6a:85:c6:50:
43:4f:70:13:36:5b:f2:ba:48:92:de:2d:1e:c5:35:df:6b:70:
7f:1b:f8:1e:3f:40:26:96:97:32:0c:d9:6e:ba:57:e9:e2:1d:
47:72:32:0e:97:c6:fc:00:c2:f9:5c:9a:19:b4:8d:36:4e:e7:
02:4e:fd:10:c5:30:a0:74:27:d1:00:32:68:bf:e7:3a:85:64:
b4:5e:71:99:89:af:7b:c8:32:fa:05:98:1e:3f:77:2e:71:96:
b2:02:5a:81:a1:71:f5:42:ca:0d:6b:34:7b:ba:8a:e9:0f:18:
24:c6:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:36 2024 by rpki-client on console-fra.rpki-client.org