Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/sB2O-ANyDA_z7yXhq-BmwiEtt50.roa
File: sB2O-ANyDA_z7yXhq-BmwiEtt50.roa (raw, json)
Hash identifier: PTxF8i/GufX6JYQeMJYsb8gFkzoLT7Gp0omBhSEVeSQ=
Subject key identifier: B0:1D:8E:F8:03:72:0C:0F:F3:EF:25:E1:AB:E0:66:C2:21:2D:B7:9D
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 42BB7E06
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/sB2O-ANyDA_z7yXhq-BmwiEtt50.roa
Signing time: Sat 01 Jan 2022 06:05:17 +0000
ROA not before: Sat 01 Jan 2022 06:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20676
IP address blocks: 212.84.192.0/20 maxlen: 32
212.99.128.0/18 maxlen: 32
2a02:e240::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119583750 (0x42bb7e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jan 1 06:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b01d8ef803720c0ff3ef25e1abe066c2212db79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:20:50:9e:f3:bb:f9:fe:78:ef:65:76:9c:
04:b9:2d:56:c0:83:29:4b:2e:64:4a:39:50:8b:b4:
e7:a4:80:ee:36:f1:d1:87:dd:10:0d:53:11:00:a6:
59:4a:ce:4e:91:cf:32:84:14:e4:45:6d:30:ac:94:
3a:a7:72:a2:f8:07:10:c8:b6:3e:c7:0b:6c:ce:70:
91:1a:2a:29:c1:0b:93:c0:fa:c8:62:bc:52:51:39:
f6:98:c1:5f:61:2b:e3:22:ae:e4:79:e0:13:be:ea:
1b:2e:12:e0:47:9b:cc:3d:4f:5d:32:1a:d3:4c:0c:
a0:7c:6d:e2:88:20:22:a3:4b:ff:47:20:8b:08:6d:
64:74:b9:f3:2a:f8:65:06:a4:9b:a6:8c:6d:77:13:
a3:f2:df:e4:30:63:bd:e8:46:3f:6c:c9:31:db:76:
e7:a1:e4:69:78:2f:fe:8a:7f:93:6b:5b:17:92:f3:
95:27:28:d9:04:3d:2d:f5:4b:e9:bb:b0:b2:75:0f:
eb:20:7d:81:c7:e4:fa:0d:cd:40:85:6b:5d:22:6f:
20:45:4a:e1:b5:4c:3d:28:1c:1c:d8:82:90:9c:0b:
43:1b:ec:b2:f6:9f:41:74:d1:db:ac:3c:7f:f6:3b:
66:2c:c1:0f:26:d6:18:cd:a6:1d:87:49:47:aa:ab:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:8E:F8:03:72:0C:0F:F3:EF:25:E1:AB:E0:66:C2:21:2D:B7:9D
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/sB2O-ANyDA_z7yXhq-BmwiEtt50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.84.192.0/20
212.99.128.0/18
IPv6:
2a02:e240::/29
Signature Algorithm: sha256WithRSAEncryption
0a:47:d2:f1:13:1a:7e:b7:68:2b:40:17:a4:6c:df:fa:37:bd:
b3:16:05:85:46:b8:a5:7f:a7:0d:80:92:22:c4:ac:03:d1:c6:
45:fa:88:ea:28:06:33:66:29:00:28:9a:8a:a2:e7:81:2f:35:
37:63:25:fc:1e:a4:e1:31:3b:fa:ad:fb:2d:2a:f4:aa:05:08:
59:23:d3:64:b6:81:ce:38:e2:f7:c9:44:8d:4b:f0:1a:59:c6:
3b:e1:e1:45:98:00:1d:af:41:26:97:82:d3:28:c6:08:37:79:
98:64:bb:54:9b:6e:7c:2b:9b:6d:60:a5:e2:03:21:4c:fa:e0:
a8:3d:0a:1b:46:51:3e:ae:86:71:0d:e7:27:e7:51:d0:42:4e:
e5:a1:2f:a6:b8:8d:ce:0e:68:c6:f5:0d:5a:cb:33:8b:56:1d:
e1:f6:9e:18:cb:81:1e:88:ba:b2:4e:90:a7:fb:66:27:6a:a9:
12:29:16:c9:fd:4b:9f:a5:5d:4d:cd:07:92:79:1b:26:5d:60:
fc:82:a1:a9:0c:61:22:b1:dd:3c:bc:73:7a:09:26:8b:66:1b:
cf:5f:10:fb:19:0d:b2:c8:79:07:10:e7:21:a3:07:c6:df:df:
02:6a:9f:83:d0:77:dc:c6:48:68:9b:47:46:1c:d8:92:2c:09:
26:a9:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org