Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b1d6v8pyQzRd7CMkN3LJit0sU-4.roa
File: b1d6v8pyQzRd7CMkN3LJit0sU-4.roa (raw, json)
Hash identifier: dGo1ZzMe5WWfzp19fFXcx5/vA/wT5zbFPHTEfqMGALA=
Subject key identifier: 6F:57:7A:BF:CA:72:43:34:5D:EC:23:24:37:72:C9:8A:DD:2C:53:EE
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 03C9269A
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b1d6v8pyQzRd7CMkN3LJit0sU-4.roa
Signing time: Sat 01 Jan 2022 14:04:22 +0000
ROA not before: Sat 01 Jan 2022 14:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 212.30.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63514266 (0x3c9269a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 14:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f577abfca7243345dec23243772c98add2c53ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:74:72:53:0a:3a:29:75:02:01:c0:ed:2c:
16:33:5e:a8:44:7e:bf:3a:d6:a2:c0:6d:52:81:9d:
a3:98:81:53:56:81:1e:2b:ef:76:e7:96:60:b0:e0:
df:9b:a9:1b:0d:49:a8:99:c0:98:ec:a7:04:f1:94:
b7:16:ff:f9:60:48:4b:43:84:02:bc:34:64:7d:f3:
44:c2:9c:a7:f1:15:a4:d7:9c:31:38:b6:f2:b4:bd:
74:04:56:22:af:5b:84:ec:62:b8:3f:28:bb:b6:a7:
26:4e:d0:69:3d:4e:dc:c0:f8:8d:73:8d:46:d2:3b:
37:a3:71:5c:f8:f8:38:da:85:49:2c:8d:58:87:0d:
b8:9c:1a:bc:a1:aa:f4:12:b9:fe:3c:ff:4c:0a:f0:
e1:74:91:5b:12:0a:3e:89:73:3d:48:55:fa:07:d2:
1d:4c:dd:0e:2d:67:a2:6c:64:a9:00:06:50:4a:97:
80:ed:06:3c:66:14:b5:02:e2:b4:3b:77:6f:18:33:
b3:07:12:76:5d:ea:f4:6d:99:67:ca:e9:cf:1a:07:
6f:e9:e2:3c:cc:c7:40:96:85:bd:dd:36:93:ec:39:
a0:b7:eb:bf:32:5b:0a:09:7d:11:9a:5a:c0:01:2b:
36:10:ba:98:2f:f0:53:e1:45:58:3e:54:4c:f8:ce:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:7A:BF:CA:72:43:34:5D:EC:23:24:37:72:C9:8A:DD:2C:53:EE
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b1d6v8pyQzRd7CMkN3LJit0sU-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.60.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cf:90:46:65:89:22:47:ec:ea:4b:79:6e:f1:df:7b:5f:0c:
76:7e:21:ed:37:4c:0a:ed:0b:63:26:d5:25:c8:fe:a3:d0:ec:
e5:fd:16:c3:09:06:da:7c:3b:81:ab:87:2b:db:d0:02:91:11:
49:a1:82:90:5d:be:cd:6e:b1:86:5a:77:4a:f6:dd:36:ca:3c:
44:4d:df:7b:22:51:37:cc:55:bc:61:c9:84:2a:43:97:5b:27:
96:50:9c:a2:94:55:c2:4a:1f:7c:0c:c3:96:fa:75:64:da:c2:
b7:79:24:ab:62:b5:b7:4d:b2:74:e2:a0:72:ef:a2:db:c8:e7:
6e:3e:35:9f:72:25:d1:be:e7:b8:18:41:9b:ad:44:55:5d:f4:
64:ae:79:60:d3:57:2e:24:36:9b:d0:7f:5a:45:c9:25:86:11:
67:5d:8d:5a:4c:d3:49:a6:13:89:40:a5:b1:e3:d1:69:01:7b:
38:8c:69:61:1d:81:07:33:3e:d8:79:a0:b4:dd:98:86:76:d5:
6c:fe:b2:b6:c4:77:de:73:c0:f3:5e:35:56:fb:98:d9:ed:a9:
32:d0:24:7d:e2:5e:df:80:0e:08:ce:c1:04:98:3b:c1:15:a8:
7d:39:00:5e:19:64:73:7c:ea:c0:7c:89:43:72:00:2d:31:21:
e7:af:ad:8a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8kmmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NDU1ZDdmZWU0YTQ5OWVjYWYxMWQyZDNkYThlMzg5ZGUzMjM0MTJmMB4XDTIyMDEw
MTE0MDQyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmY1NzdhYmZjYTcy
NDMzNDVkZWMyMzI0Mzc3MmM5OGFkZDJjNTNlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIl/dHJTCjopdQIBwO0sFjNeqER+vzrWosBtUoGdo5iBU1aB
HivvdueWYLDg35upGw1JqJnAmOynBPGUtxb/+WBIS0OEArw0ZH3zRMKcp/EVpNec
MTi28rS9dARWIq9bhOxiuD8ou7anJk7QaT1O3MD4jXONRtI7N6NxXPj4ONqFSSyN
WIcNuJwavKGq9BK5/jz/TArw4XSRWxIKPolzPUhV+gfSHUzdDi1nomxkqQAGUEqX
gO0GPGYUtQLitDt3bxgzswcSdl3q9G2ZZ8rpzxoHb+niPMzHQJaFvd02k+w5oLfr
vzJbCgl9EZpawAErNhC6mC/wU+FFWD5UTPjO798CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRvV3q/ynJDNF3sIyQ3csmK3SxT7jAfBgNVHSMEGDAWgBQkVdf+5KSZ7K8R
0tPajjid4yNBLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pGWFhfdVNrbWV5dkVkTFQybzQ0bmVNalFTOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvM2ZmYjc2LTk5MzEtNDk0Mi05ZGExLTFlMDQ2NTUxM2I2My8x
L2IxZDZ2OHB5UXpSZDdDTWtOM0xKaXQwc1UtNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
M2ZmYjc2LTk5MzEtNDk0Mi05ZGExLTFlMDQ2NTUxM2I2My8xL0pGWFhfdVNrbWV5
dkVkTFQybzQ0bmVNalFTOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANQePDANBgkqhkiG9w0BAQsFAAOC
AQEAmM+QRmWJIkfs6kt5bvHfe18Mdn4h7TdMCu0LYybVJcj+o9Ds5f0WwwkG2nw7
gauHK9vQApERSaGCkF2+zW6xhlp3SvbdNso8RE3feyJRN8xVvGHJhCpDl1snllCc
opRVwkoffAzDlvp1ZNrCt3kkq2K1t02ydOKgcu+i28jnbj41n3Il0b7nuBhBm61E
VV30ZK55YNNXLiQ2m9B/WkXJJYYRZ12NWkzTSaYTiUClsePRaQF7OIxpYR2BBzM+
2HmgtN2YhnbVbP6ytsR33nPA8141VvuY2e2pMtAkfeJe34AOCM7BBJg7wRWofTkA
Xhlkc3zqwHyJQ3IALTEh56+tig==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-ams.rpki-client.org