Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/OGMmiibzZqRIbBoELLrH3-Z0zxY.roa
File: OGMmiibzZqRIbBoELLrH3-Z0zxY.roa (raw, json)
Hash identifier: Ea7vzoPUDkTJ7dnINWZjxy4wsGq+WRsK02riS7+k4SM=
Subject key identifier: 38:63:26:8A:26:F3:66:A4:48:6C:1A:04:2C:BA:C7:DF:E6:74:CF:16
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CBDA99A
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/OGMmiibzZqRIbBoELLrH3-Z0zxY.roa
Signing time: Sat 01 Jan 2022 04:59:49 +0000
ROA not before: Sat 01 Jan 2022 04:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212917
IP address blocks: 212.91.6.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750627226 (0x2cbda99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3863268a26f366a4486c1a042cbac7dfe674cf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:fa:8e:75:da:75:ee:72:82:1d:f5:8b:7a:
28:0f:48:3a:c9:10:4a:5c:28:22:09:47:da:f4:7e:
41:9f:70:b5:53:3a:88:77:fb:22:43:0d:81:be:b1:
7e:11:05:32:d1:a5:e4:b0:cf:13:44:00:db:40:70:
78:5f:80:bf:f1:cf:fe:97:b9:92:35:a8:db:5b:5d:
44:ec:f9:0c:69:9a:d5:6b:c1:9b:e9:ce:10:7f:f7:
93:a3:e8:de:67:36:50:be:e1:69:84:f7:36:87:b2:
4d:cf:4f:02:f9:0d:76:cb:54:4b:b9:d9:fd:6d:2b:
bc:f9:c7:93:6f:44:09:c8:64:57:40:10:3e:09:ca:
f9:eb:e9:93:c1:cd:6c:e8:40:14:f7:28:9f:e0:11:
00:4a:fc:e4:a5:cf:68:cd:3b:fb:ef:22:af:a8:64:
91:e7:95:c1:43:2e:f8:25:26:0b:26:59:5b:32:04:
21:b5:f4:36:02:eb:5d:9c:4c:0f:29:05:e3:39:19:
1f:36:57:20:30:16:eb:69:6d:9a:d1:01:6a:e6:50:
6f:c2:20:b0:4c:77:17:3d:24:92:87:60:9b:e6:67:
ec:f9:f4:99:a5:8b:af:50:7e:74:4f:aa:f3:14:03:
07:40:98:dd:ab:4f:ca:37:4a:d5:68:54:7e:74:71:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:26:8A:26:F3:66:A4:48:6C:1A:04:2C:BA:C7:DF:E6:74:CF:16
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/OGMmiibzZqRIbBoELLrH3-Z0zxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.6.0/23
Signature Algorithm: sha256WithRSAEncryption
32:a2:2b:6c:9b:a3:35:6d:90:5d:44:a5:b1:5c:29:43:c2:48:
bb:6e:b4:a2:12:4e:4c:13:1c:ed:32:71:8c:8f:69:b2:9d:32:
a7:53:bc:9f:dd:14:94:af:7d:48:2d:3b:23:ee:a9:41:3d:ec:
38:ac:a3:35:14:e9:a3:23:da:4c:04:7f:97:12:7e:60:6e:e8:
72:51:53:50:ca:79:3e:5e:94:4c:20:db:6e:04:8b:23:91:9a:
10:a6:fd:b1:ca:f2:8b:40:82:0f:65:8f:29:a8:02:47:09:51:
c2:ac:40:b0:ec:b3:33:ac:2b:6d:44:59:12:00:74:fc:5e:0b:
31:eb:12:cc:1e:1a:b7:95:44:69:4f:23:c2:0b:43:b6:49:8b:
2e:8f:91:7b:93:89:43:f5:57:eb:fc:da:f1:b6:a1:cf:be:9f:
fe:18:87:bf:1c:38:43:2d:49:18:a7:45:ce:bc:67:b9:36:32:
ec:e6:fc:28:36:cc:cf:7e:46:41:f8:3f:c2:d5:0d:21:38:6c:
0e:d9:7e:43:e8:11:e1:61:af:e0:b2:52:02:9a:20:ad:66:0d:
01:57:29:cf:6b:ef:43:a7:5f:e8:40:06:08:d5:9f:f5:1c:9b:
21:2b:62:48:7e:64:98:61:39:d1:19:80:a3:da:28:97:12:83:
86:90:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org