Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ooIZ7fQW7a0pp4TOdQB2nYajaMc.roa
File: ooIZ7fQW7a0pp4TOdQB2nYajaMc.roa (raw, json)
Hash identifier: C5/i3NDBc31b5HPz/tKurM27Fh7K62AK9NmtPouK7TE=
Subject key identifier: A2:82:19:ED:F4:16:ED:AD:29:A7:84:CE:75:00:76:9D:86:A3:68:C7
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01848B85DA3B1040ADC668B657CC4A5E3D46
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ooIZ7fQW7a0pp4TOdQB2nYajaMc.roa
Signing time: Fri 18 Nov 2022 16:15:15 +0000
ROA not before: Fri 18 Nov 2022 16:15:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.30.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:85:da:3b:10:40:ad:c6:68:b6:57:cc:4a:5e:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Nov 18 16:15:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a28219edf416edad29a784ce7500769d86a368c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:88:51:14:a5:05:dc:a3:6b:37:7d:eb:0b:
18:8f:c1:6a:dd:5e:2f:fe:1b:09:14:19:79:e9:02:
3e:87:18:46:53:aa:f2:0b:cb:68:4f:74:b7:2c:c3:
2f:07:95:52:fd:ef:57:d2:50:7a:07:73:b0:69:a4:
af:e7:e8:76:21:cf:50:b2:d8:60:ae:79:f2:16:b4:
d5:e4:0b:38:96:1d:b4:1b:62:59:e3:03:57:05:d4:
91:62:f5:b4:bb:5a:e4:fe:88:46:75:fe:d5:47:82:
9b:38:79:0b:9f:b6:cc:25:37:26:4c:f6:46:12:0e:
24:6c:79:bb:f7:fc:35:c5:98:ed:89:bb:7e:9a:79:
d8:df:15:f3:4d:99:e4:1f:60:5c:dc:36:ad:92:3a:
71:a8:3b:f7:98:99:07:03:0a:8e:00:99:75:96:21:
d6:d5:0a:7a:b7:ed:70:05:3e:32:fc:d5:14:b6:69:
9e:8a:e3:e8:02:d3:0c:06:83:69:4c:3e:ef:00:82:
ed:ad:01:d0:c9:d9:cc:7b:8d:33:79:f1:37:48:7f:
f3:2b:01:56:fa:be:c8:2c:c3:d1:16:49:3a:b1:3b:
fb:99:fe:35:0a:e2:e2:50:c8:52:72:00:4a:f1:5f:
45:90:a9:fc:7d:3f:d3:e3:32:50:d9:63:8e:d8:ae:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:19:ED:F4:16:ED:AD:29:A7:84:CE:75:00:76:9D:86:A3:68:C7
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ooIZ7fQW7a0pp4TOdQB2nYajaMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.34.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:96:19:de:f4:96:c8:09:7b:d6:5c:b0:bd:ed:b8:b8:95:d2:
bb:68:9c:bb:e3:99:2d:d5:3c:2e:2d:32:e6:e2:84:4b:b0:05:
f0:24:58:e6:3a:e4:c2:82:4e:0d:59:99:86:cb:32:c3:1e:30:
50:88:08:f3:fe:57:76:bd:08:7f:33:86:56:0f:37:99:01:4d:
23:cb:5b:5a:83:d5:dc:d0:66:cc:07:88:01:32:0e:ff:15:fa:
82:c6:98:91:f9:68:a5:f1:4d:0a:c5:1e:93:7a:de:a3:32:e9:
60:d7:3d:ec:af:5f:bd:50:4c:0d:d2:2e:af:d2:63:49:f2:20:
f2:52:4f:4c:1f:1e:46:f2:f7:80:0d:79:43:6b:1e:26:b1:0d:
7c:3a:9f:8b:39:6e:6c:90:ca:6c:ec:49:b4:f0:c7:f1:e3:b4:
1f:b0:f7:74:85:f9:a9:60:2b:e6:e4:6b:17:b6:64:ac:d6:e2:
30:87:98:d7:e7:7b:aa:af:e3:d1:cd:37:e6:aa:6b:6d:cd:1b:
70:8b:c1:46:3a:68:5c:c1:3e:81:ff:f3:aa:f1:ef:40:9d:35:
c1:c3:7c:16:a0:bc:f5:3e:f6:7f:4a:0e:16:43:8b:7d:50:d1:
ec:e5:9b:2a:07:09:9d:2d:e0:22:5d:35:25:82:e4:47:ff:b9:
78:a5:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:35 2023 by rpki-client on console-fra.rpki-client.org