Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/12KGuM1pDtw5MfH2nxRe-cpqSK4.roa
File: 12KGuM1pDtw5MfH2nxRe-cpqSK4.roa (raw, json)
Hash identifier: Bcw7MlUnF6QUEO9UtGdqUVu2p3KG9LR8wYptRNHUr1k=
Subject key identifier: D7:62:86:B8:CD:69:0E:DC:39:31:F1:F6:9F:14:5E:F9:CA:6A:48:AE
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 01300E9C
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/12KGuM1pDtw5MfH2nxRe-cpqSK4.roa
Signing time: Wed 25 May 2022 04:48:14 +0000
ROA not before: Wed 25 May 2022 04:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48149
IP address blocks: 94.253.80.0/20 maxlen: 20
2a01:4207::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19926684 (0x1300e9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: May 25 04:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d76286b8cd690edc3931f1f69f145ef9ca6a48ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:4b:6f:ab:08:f3:35:f3:f0:82:b4:35:fd:
45:c8:73:0f:7a:1a:be:03:69:63:aa:71:c4:e6:e3:
4d:48:68:ef:58:69:f5:70:3a:ad:22:b1:c9:2c:e0:
7f:09:9b:d8:0b:d8:6e:a1:22:b7:ac:f4:f5:de:b1:
51:26:53:b8:ac:91:19:fd:eb:af:ea:93:1a:2e:26:
d9:36:b2:7c:10:e0:51:36:b5:03:99:e7:b6:f1:33:
da:0c:44:89:cc:fe:26:64:bb:32:93:4f:b9:03:85:
34:66:ce:f3:9c:fd:dd:53:38:b1:56:db:14:86:c8:
82:d9:26:f6:6f:e9:b4:86:a1:26:73:d1:24:74:e0:
e9:ea:82:c2:75:65:1a:57:82:c2:cd:d6:1a:a4:42:
ac:ec:d5:6d:dc:58:9a:db:7f:e8:dc:c6:90:77:ea:
38:0d:04:51:3c:ac:46:c4:3f:da:5e:12:8f:9e:cf:
ef:68:9e:99:80:5b:95:42:93:9c:66:f4:d7:f1:fe:
cb:c2:67:68:18:ca:66:fa:64:a2:53:f5:04:8b:ce:
cd:8d:bc:be:d6:ee:a9:f0:43:70:9e:1b:ff:16:98:
e2:88:ab:28:79:56:6a:31:80:9c:10:e6:1f:d5:5d:
b3:c5:28:f4:01:76:6b:23:59:8f:26:ac:7a:6f:8a:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:86:B8:CD:69:0E:DC:39:31:F1:F6:9F:14:5E:F9:CA:6A:48:AE
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/12KGuM1pDtw5MfH2nxRe-cpqSK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.253.80.0/20
IPv6:
2a01:4207::/48
Signature Algorithm: sha256WithRSAEncryption
84:13:53:b6:73:9f:85:e9:b2:58:17:74:c6:7f:17:26:63:46:
8b:5a:65:25:da:6f:48:a5:7f:8e:37:ca:55:9a:90:8f:0f:f5:
01:10:91:7a:70:97:e6:c6:04:3b:60:5c:39:cd:11:06:75:a6:
d1:0d:71:9f:48:13:cc:5b:2d:4a:bf:da:4a:77:fc:ed:aa:c7:
4d:af:58:08:7b:33:f6:b4:cd:6c:dc:68:b1:2f:55:25:3a:f7:
5e:42:58:5b:44:04:85:b2:02:04:c5:6e:8e:36:47:45:62:fc:
ec:47:00:c6:ff:d9:9f:e7:f0:43:08:69:2f:db:2f:85:8c:1f:
c7:0a:87:6b:1b:aa:a8:48:9b:ff:87:c9:a3:f3:5a:b1:85:22:
e9:cd:c5:1f:43:65:ec:da:f6:cb:9a:c1:24:a0:10:4f:fd:f2:
ff:f4:39:db:37:b7:d0:50:a2:d2:03:3e:07:52:67:33:f6:03:
00:9c:1c:0e:79:01:26:35:ea:5f:e6:77:bc:71:d3:bc:e2:65:
74:aa:de:62:f0:7b:38:9b:33:5f:af:0f:23:c8:b4:e4:16:ab:
ff:88:00:d2:f8:c6:e0:03:b3:93:05:8d:af:d0:f3:b9:0e:b8:
e4:89:6b:03:dc:14:1d:d2:2d:31:73:43:d1:ca:e9:48:b6:c3:
50:1d:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:39 2024 by rpki-client on console-ams.rpki-client.org