Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/TAghd3XPVuWhqNwDDpKnKIHS6U4.roa
File: TAghd3XPVuWhqNwDDpKnKIHS6U4.roa (raw, json)
Hash identifier: GDIp7Q4onDWw4lrlIiajBb+G+k9MEWNoNo0JoeesjLg=
Subject key identifier: 4C:08:21:77:75:CF:56:E5:A1:A8:DC:03:0E:92:A7:28:81:D2:E9:4E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09055302
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/TAghd3XPVuWhqNwDDpKnKIHS6U4.roa
Signing time: Sat 01 Jan 2022 16:00:27 +0000
ROA not before: Sat 01 Jan 2022 16:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 212.107.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151343874 (0x9055302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c08217775cf56e5a1a8dc030e92a72881d2e94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:1a:40:33:17:36:e5:52:2b:7b:a4:e6:8b:
26:ef:59:f8:95:0d:f7:37:24:bf:23:05:df:6f:53:
c2:3e:ec:cd:75:de:83:0e:82:cf:23:4a:af:28:c8:
0e:5a:44:a0:f3:8e:d2:4d:60:fb:3f:83:bb:aa:ff:
75:22:81:58:f2:d9:7c:ee:cc:9c:47:7c:92:76:69:
ea:e9:8b:04:a6:49:49:59:6c:7b:0e:ec:35:75:b1:
4c:00:ae:5a:e6:8d:1a:7c:89:d2:94:cb:e2:6c:9c:
b9:46:dd:6f:94:e1:d6:ed:e8:fb:b2:d2:c5:0d:66:
dc:b1:44:83:58:31:1d:59:56:1f:3e:f2:2b:49:4c:
84:e7:5b:98:2b:a5:6b:f2:24:31:c6:8d:21:14:4c:
aa:b9:e0:3e:6c:de:6f:d0:8a:bb:8e:91:bb:b1:6a:
f9:35:82:7e:f2:9b:28:61:cc:34:56:25:21:1b:a1:
40:80:c5:5f:c1:07:38:69:30:8f:f1:a3:59:fe:3e:
48:5f:00:1b:0e:9a:db:c7:91:39:92:f3:11:b5:b2:
f5:8d:88:e9:3d:23:97:af:35:9d:77:cb:d6:6e:a2:
18:3d:72:b1:57:a4:99:98:17:c4:be:34:a5:80:13:
fb:bc:36:fb:d9:3f:36:b6:55:6c:9c:5c:bc:82:a4:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:21:77:75:CF:56:E5:A1:A8:DC:03:0E:92:A7:28:81:D2:E9:4E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/TAghd3XPVuWhqNwDDpKnKIHS6U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.15.0/24
Signature Algorithm: sha256WithRSAEncryption
17:86:7e:9d:0d:61:8f:4f:a7:60:e8:2a:e0:72:97:21:22:86:
08:0c:1b:83:60:f0:28:24:f9:8e:c6:07:2e:e9:9c:ef:11:ad:
ff:fb:1b:28:10:74:35:70:9a:0b:f8:25:b7:24:1b:28:f7:80:
fa:23:fa:46:24:1f:42:03:8d:45:7b:cb:06:17:5d:49:e3:4a:
08:ab:14:48:7d:8d:ad:ce:7c:d8:b7:1c:c5:66:16:fe:ce:dd:
e2:5f:6f:53:45:15:af:60:52:63:bd:79:84:d7:c6:1d:90:d0:
67:36:c4:f6:c1:eb:88:17:1b:c5:d4:60:c0:02:f6:4e:4e:c7:
3b:2f:ba:5d:38:f0:cf:ec:07:17:d8:20:af:89:4f:8d:9c:02:
4b:b6:12:ba:29:85:14:95:58:18:e0:82:99:06:6e:30:aa:ac:
10:d2:d9:9d:08:d0:b1:3b:21:7a:cd:05:ea:78:8f:a1:cc:e9:
e2:96:75:3a:a4:62:2b:06:a7:c1:3e:79:05:82:e7:e6:88:39:
d6:44:39:9b:64:7a:32:60:a2:a6:83:1a:48:97:c8:30:50:54:
db:08:af:d2:b6:40:30:39:43:a5:c8:de:b0:e2:64:ac:ca:4c:
5c:72:ea:3c:5a:2d:ec:a7:80:ab:db:e4:dc:ab:e4:96:ed:19:
3e:d1:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org