Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/2yRkX8xdreF0L-pDl0MHkMjPHN8.roa
File: 2yRkX8xdreF0L-pDl0MHkMjPHN8.roa (raw, json)
Hash identifier: eLN19SZDEWrmACgY9UuayVvHI40GSevsMgoib7u4kcE=
Subject key identifier: DB:24:64:5F:CC:5D:AD:E1:74:2F:EA:43:97:43:07:90:C8:CF:1C:DF
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 0F203569
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/2yRkX8xdreF0L-pDl0MHkMjPHN8.roa
Signing time: Tue 21 Jun 2022 10:00:44 +0000
ROA not before: Tue 21 Jun 2022 10:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212805
IP address blocks: 212.125.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253769065 (0xf203569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Jun 21 10:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db24645fcc5dade1742fea4397430790c8cf1cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:5c:5c:09:ad:7b:f6:d9:f0:34:8c:d1:c5:
63:b4:1d:2a:4e:60:ff:26:ba:35:05:1d:26:8c:04:
3f:50:85:45:0d:3d:a4:8e:ff:92:0d:c5:68:8b:e2:
dc:b5:8d:7f:5e:09:f7:80:df:e2:92:57:dd:ac:5f:
e0:04:c1:fb:13:c4:a8:26:75:54:85:bb:ce:6c:84:
51:3e:6a:91:d2:f7:9e:57:42:0a:63:1c:7c:8f:e8:
4f:a3:62:2f:9f:7a:4a:be:9a:5a:39:02:23:4b:c3:
af:95:61:e8:44:df:a1:cf:ab:93:7d:57:83:2a:55:
38:ea:ab:3d:d9:d5:f5:89:ad:f4:d1:c6:e7:37:61:
8c:62:ee:78:70:bf:b3:3e:82:e6:f8:db:fc:34:f9:
2c:34:28:c9:6b:ba:db:38:55:89:f1:3f:7e:e1:43:
bd:90:d4:ab:60:e0:ca:72:45:35:27:30:81:e4:51:
83:a7:51:6d:b0:af:10:69:1e:5e:37:93:b4:d1:04:
e3:d1:7a:78:6f:8f:ae:8b:77:fb:2c:b8:b5:7b:65:
e1:8d:df:b9:bb:b1:a5:a4:7f:f6:a4:4d:09:c3:24:
98:e1:b6:6b:c8:0e:8c:43:7a:57:d4:59:67:f2:3a:
ce:65:27:3d:8a:ef:e8:2d:ad:46:c6:e6:a7:1e:cb:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:64:5F:CC:5D:AD:E1:74:2F:EA:43:97:43:07:90:C8:CF:1C:DF
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/2yRkX8xdreF0L-pDl0MHkMjPHN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.125.11.0/24
Signature Algorithm: sha256WithRSAEncryption
56:52:f9:9d:b4:d5:cb:d2:92:93:13:40:0b:86:2c:22:25:96:
ed:82:83:6f:23:59:f9:3b:43:9b:0c:3d:b2:ae:08:e4:2f:42:
03:51:c8:6a:54:bd:b9:e6:3d:73:c4:6d:e7:3f:1a:9d:fc:3a:
9d:e0:18:ad:6f:43:05:f2:04:59:d3:01:00:4c:7c:d6:e8:7f:
52:7f:21:19:0a:d4:7e:92:82:e9:c3:e5:30:78:2e:13:17:b9:
0e:1b:8e:a9:3c:a6:3f:b6:87:39:81:38:a7:0e:a1:b6:4c:43:
5e:ae:cc:23:8a:d6:7b:92:73:02:01:c8:16:c2:81:03:1f:38:
7d:d4:94:2a:34:9d:2b:46:e1:a0:9c:70:0a:a9:11:04:8c:b2:
63:b5:4e:2a:cf:d5:12:bb:fd:68:04:67:e7:b6:2b:bb:4f:9d:
e1:72:4f:f4:2f:d5:bb:e5:cf:a6:ad:2c:8d:04:db:87:72:00:
ed:9b:de:66:1a:45:d7:b4:e1:ea:57:91:08:0f:eb:f2:5c:f5:
65:fd:42:e5:1e:af:cf:a3:93:5c:a7:81:85:50:89:37:97:0f:
b3:3c:7a:d9:0a:d3:f0:47:4c:dc:5e:34:82:4e:01:27:69:97:
6c:89:d8:10:88:bc:6c:e7:c7:4b:d5:b8:49:e4:04:03:ac:7c:
41:50:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-ams.rpki-client.org