Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fZaMrY2eYxxr4-vxOF5Dbk9fqt4.roa
File: fZaMrY2eYxxr4-vxOF5Dbk9fqt4.roa (raw, json)
Hash identifier: hnLADfM0Qx3RxQBlEPE7IUGY1gXYiyJ2NIu1MXl9pXA=
Subject key identifier: 7D:96:8C:AD:8D:9E:63:1C:6B:E3:EB:F1:38:5E:43:6E:4F:5F:AA:DE
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 04068F18
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fZaMrY2eYxxr4-vxOF5Dbk9fqt4.roa
Signing time: Mon 24 Jan 2022 18:36:07 +0000
ROA not before: Mon 24 Jan 2022 18:36:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204356
IP address blocks: 212.30.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67538712 (0x4068f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 24 18:36:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d968cad8d9e631c6be3ebf1385e436e4f5faade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:a2:59:01:7c:74:c2:6b:0c:c8:f6:41:85:
92:54:c3:b2:09:fc:a5:10:dc:3b:80:f3:c4:7d:c1:
0f:31:f5:74:8b:c3:6e:7b:63:e3:09:fb:23:f5:9b:
ff:20:0e:32:ce:b9:57:8b:52:40:7c:2c:c7:60:67:
75:a8:1b:cb:7e:11:09:2d:b8:e0:16:3d:70:f3:c8:
ce:70:d2:b6:c2:c0:af:f5:71:b8:6a:b8:7f:c4:76:
9b:ef:0f:ab:e2:e9:31:36:a6:f0:00:8d:c8:54:16:
a5:16:bf:14:6f:46:73:d0:0e:91:fa:3b:60:0d:d7:
1f:32:8b:dc:c2:5c:7f:28:1b:17:df:e2:f5:41:e1:
97:2a:a3:b6:a1:e1:c7:77:d1:e5:85:c4:36:03:4b:
b5:50:08:65:e7:73:e2:f6:20:1c:5b:fe:25:aa:74:
19:5d:82:74:8e:2f:4d:93:48:50:7f:c0:a5:3d:67:
b9:a2:42:f0:2a:72:a0:85:da:c7:bf:a3:39:d6:b8:
9e:a5:ac:1b:d2:03:ae:d4:27:90:aa:be:85:91:85:
6b:1e:4f:ae:41:5d:66:fe:c2:f2:cb:55:8e:73:8f:
b7:2a:75:d8:f2:65:94:a2:13:36:36:b4:ec:a1:63:
55:b7:89:b3:3d:6e:a4:a8:90:f6:ae:a6:0d:6d:4a:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:96:8C:AD:8D:9E:63:1C:6B:E3:EB:F1:38:5E:43:6E:4F:5F:AA:DE
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/fZaMrY2eYxxr4-vxOF5Dbk9fqt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:22:3b:be:1d:2f:89:da:93:ee:16:42:aa:5a:f8:36:55:7c:
6c:eb:18:d8:30:6a:1c:44:06:d1:6a:b4:43:a9:bc:95:ab:9b:
ad:a4:bd:83:73:33:cc:77:6c:9e:7c:59:af:ab:89:b8:dc:bb:
36:a0:f0:c0:22:b2:4d:f5:e9:ee:bc:82:71:57:7d:d2:9c:1a:
5f:e4:44:b7:a2:76:e4:c4:f9:b8:5c:12:0f:cb:35:9b:f9:5e:
fe:7d:33:82:5b:9a:72:30:80:a4:15:c6:e0:bd:f0:27:43:32:
df:e7:59:62:d9:80:31:38:15:81:96:0a:a4:da:f0:da:9a:be:
1a:04:4a:4c:4a:85:e8:1a:7e:89:c8:43:5a:e9:29:6d:bf:e6:
f2:f2:50:0e:9d:b8:d7:fa:23:80:3f:a4:e0:5e:85:26:87:20:
db:a3:b2:c9:c3:04:cc:e0:b4:c2:ee:63:cf:5a:b3:fe:99:df:
14:c3:c6:d0:44:c1:e9:f2:80:c7:ba:13:cf:26:56:14:b0:88:
ef:4c:74:65:98:57:4f:0f:ce:98:ac:bc:08:42:4d:57:9e:60:
82:82:fa:15:4d:29:0d:11:c2:6f:3d:ef:a1:51:12:e9:b2:de:
68:4a:39:a0:62:66:3d:c3:fa:39:13:da:ed:d7:a5:1a:04:d9:
ed:e3:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-ams.rpki-client.org