Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/oGR1H7BSX8XSGd-FiK9b-14PCNY.roa
File: oGR1H7BSX8XSGd-FiK9b-14PCNY.roa (raw, json)
Hash identifier: +hFL5ZZ0Gz2f7Tgoh3Z5w6Zc4QUGSYEl7LD1idB6jjQ=
Subject key identifier: A0:64:75:1F:B0:52:5F:C5:D2:19:DF:85:88:AF:5B:FB:5E:0F:08:D6
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 04F99121
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/oGR1H7BSX8XSGd-FiK9b-14PCNY.roa
Signing time: Thu 12 May 2022 08:24:02 +0000
ROA not before: Thu 12 May 2022 08:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 212.30.62.0/24 maxlen: 24
212.30.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83464481 (0x4f99121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: May 12 08:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a064751fb0525fc5d219df8588af5bfb5e0f08d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:e5:2d:9e:15:91:40:60:0b:1d:98:f3:e4:
ab:2e:f7:e9:2c:46:a6:30:18:d2:6c:39:9c:a6:01:
da:6d:d3:15:bd:6f:dd:46:e6:4f:a9:2b:6e:b1:58:
99:0c:a2:79:ad:49:b2:43:4b:00:1c:ca:7e:4b:3e:
8f:94:c0:95:0c:bc:3f:e4:e6:01:8b:5a:7c:5c:9a:
b1:df:2b:4c:33:55:b8:0c:54:44:81:48:6a:c0:a0:
f7:1d:c4:a7:49:9d:66:82:60:38:6c:60:ec:bb:a0:
53:ae:7e:be:8d:8c:de:8c:d1:96:a2:b9:39:35:1e:
1d:1e:96:c0:14:83:d3:89:90:99:65:24:25:cc:1b:
08:05:07:fd:84:2a:4a:a6:1e:bd:b7:a2:e5:e5:77:
d9:f6:d7:cb:4d:bd:a4:42:60:51:b4:7f:11:02:55:
d2:a1:c2:54:2e:3b:7f:10:c6:83:2e:ee:64:08:45:
c5:13:94:1e:0e:6a:f7:4d:ae:10:f8:7e:ba:ac:12:
53:36:7a:53:7d:49:21:17:4e:c9:d0:31:b2:6e:41:
2c:20:1b:f1:1c:ed:82:bf:b8:58:e2:12:34:3d:2d:
b2:66:d3:6f:00:f3:a8:12:19:92:9d:30:cc:18:13:
c0:3d:2a:7a:a5:33:60:86:49:cd:06:6f:37:7f:9a:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:64:75:1F:B0:52:5F:C5:D2:19:DF:85:88:AF:5B:FB:5E:0F:08:D6
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/oGR1H7BSX8XSGd-FiK9b-14PCNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.61.0-212.30.62.255
Signature Algorithm: sha256WithRSAEncryption
36:74:d3:a4:a5:22:7f:4b:23:85:59:47:50:2a:6a:06:f3:af:
db:b0:3c:3c:69:0a:4f:61:95:a4:1e:a3:c8:c9:d1:7c:2e:95:
ac:c1:c0:be:ef:43:d2:e9:64:da:b8:5c:a9:b5:52:f9:f0:48:
d3:cc:cf:c8:7b:0b:ca:6f:9d:15:16:7e:c3:f7:d0:ab:4b:75:
72:4b:67:59:4f:92:5f:3f:75:f8:df:7c:36:23:02:ea:fc:e2:
aa:af:a8:2e:aa:ed:21:b6:b6:bc:84:6d:02:40:c3:0b:f2:11:
d3:ec:c1:64:51:66:14:4c:96:70:9d:b4:aa:84:20:b7:62:2a:
30:17:b2:d6:24:1c:c7:22:63:73:f4:79:0a:6e:79:e3:b4:30:
63:0e:c1:c4:6b:c9:23:39:ab:0a:d9:7d:2a:71:97:d7:07:b5:
41:0b:43:d5:a0:16:ff:78:d1:71:2f:0b:f9:6d:7b:52:d9:a4:
58:d9:2b:61:eb:c3:ba:6f:49:2c:52:ce:36:f5:5b:1c:7e:53:
c8:b4:b4:af:a0:08:b7:56:77:30:89:fe:ab:51:e7:df:28:f0:
dc:16:df:db:b3:b4:cf:82:15:6a:bc:21:c4:4d:ec:e1:e0:8d:
ca:1e:b0:95:cf:6b:c6:36:92:74:e5:b4:74:79:be:1f:f5:3b:
37:a3:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:35 2023 by rpki-client on console-fra.rpki-client.org