Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/sPp5vMUWVtqcJzCIwbvSK5ie2o8.roa
File: sPp5vMUWVtqcJzCIwbvSK5ie2o8.roa (raw, json)
Hash identifier: wJ3yXLoXPqJ5N9ujT+pXf5hBCNnpwK/RPVgGb/ITYvg=
Subject key identifier: B0:FA:79:BC:C5:16:56:DA:9C:27:30:88:C1:BB:D2:2B:98:9E:DA:8F
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CA6D18F
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/sPp5vMUWVtqcJzCIwbvSK5ie2o8.roa
Signing time: Sat 01 Jan 2022 04:59:37 +0000
ROA not before: Sat 01 Jan 2022 04:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48707
IP address blocks: 212.91.6.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749130127 (0x2ca6d18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0fa79bcc51656da9c273088c1bbd22b989eda8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:89:70:72:1f:35:46:20:6b:07:82:e4:fa:
af:f8:1f:b0:79:0a:9c:1b:42:75:56:54:13:e4:16:
14:d4:f8:5c:e9:a1:df:b7:48:63:ba:53:f5:c4:53:
de:49:bb:07:ca:51:33:b1:98:78:09:91:62:7b:87:
4d:f2:65:a9:e1:63:df:f3:69:61:4e:86:94:9a:77:
e9:25:5f:6f:49:dc:26:99:28:08:70:40:74:2b:ed:
5f:11:ec:83:24:20:3a:30:ca:5f:88:db:8f:dd:a5:
d5:e0:f1:68:8d:b4:c6:45:33:6b:c4:46:0b:a2:76:
86:a4:52:b8:2f:d2:a7:3c:da:ef:9f:2f:05:c0:1d:
46:a2:91:b9:aa:93:7d:9d:4d:66:8a:49:06:f4:67:
b2:06:5f:b5:22:b2:c8:95:db:91:79:88:2b:d2:a6:
c3:e9:24:0c:a9:41:e1:9f:6f:eb:a1:d4:bd:72:af:
80:2f:e8:14:55:01:85:40:4c:fd:c6:c7:97:c9:d2:
df:2a:a0:a6:aa:a0:d7:ca:d0:91:49:8c:bc:7f:c2:
ba:9f:fd:92:1b:16:b5:2c:7c:1d:68:f5:0b:f5:58:
fb:84:07:a7:96:7e:22:74:59:e5:8a:93:46:7a:3f:
90:13:4b:68:75:a2:be:fb:11:c1:a4:7e:a8:67:d5:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:79:BC:C5:16:56:DA:9C:27:30:88:C1:BB:D2:2B:98:9E:DA:8F
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/sPp5vMUWVtqcJzCIwbvSK5ie2o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.6.0/23
Signature Algorithm: sha256WithRSAEncryption
04:57:d9:3f:50:8f:e9:70:38:97:6d:53:bc:98:3a:48:77:91:
a4:a0:18:68:1c:3f:0f:76:08:b3:3e:26:f9:b5:39:e3:fa:f7:
08:54:e6:8b:9a:04:17:3b:80:8f:71:02:c1:36:32:e8:ca:58:
1f:3a:65:5e:4d:8e:f5:b4:46:33:51:81:4f:68:22:66:2d:26:
16:b2:6b:65:01:79:41:b8:10:3e:93:c5:29:08:da:5e:be:9e:
1a:02:40:e0:25:0a:d5:36:d7:ff:da:3e:47:e4:0a:3a:56:5c:
32:35:96:00:10:4b:89:bd:42:6d:17:b9:52:ee:16:52:77:6b:
b6:67:71:2f:39:97:d6:b5:53:59:66:25:4a:33:46:ba:ea:89:
b6:74:87:c1:48:2a:46:9e:03:f6:c9:81:59:bd:ea:58:e0:fb:
04:53:82:d7:16:16:eb:42:bf:81:75:c0:2a:39:ce:91:0b:d9:
db:f6:f7:43:80:fb:8d:af:f8:27:46:04:93:06:65:f1:c5:60:
97:76:6e:a1:7b:0b:0e:0b:c8:4e:f4:6d:e7:5b:c0:0f:96:31:
90:ef:25:21:26:a1:10:ff:d1:c5:9c:1f:2f:41:c3:be:4f:8c:
a7:81:5f:8e:5b:0b:24:6d:1c:2b:52:a2:7a:75:4d:ae:32:2a:
17:bb:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org