Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_evj3u3d-KKgHnFSnX2yWyiIZH8.roa
File: _evj3u3d-KKgHnFSnX2yWyiIZH8.roa (raw, json)
Hash identifier: ZtCxsIqIJu1AixVX/wLBcS1YyFFBweI4Nrh8fS/VqVo=
Subject key identifier: FD:EB:E3:DE:ED:DD:F8:A2:A0:1E:71:52:9D:7D:B2:5B:28:88:64:7F
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0FA33FC3
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_evj3u3d-KKgHnFSnX2yWyiIZH8.roa
Signing time: Sat 01 Jan 2022 00:51:09 +0000
ROA not before: Sat 01 Jan 2022 00:51:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200682
IP address blocks: 212.161.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262356931 (0xfa33fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 00:51:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdebe3deedddf8a2a01e71529d7db25b2888647f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:26:3a:72:87:28:a3:ff:a1:0a:93:91:42:
c3:38:6b:3f:b9:36:97:b5:e4:bc:ba:db:a7:24:19:
e9:94:fe:de:e0:08:ae:8b:8c:0d:f1:4c:ae:a2:17:
b4:70:06:91:38:b6:1c:6a:81:4f:df:0f:59:ae:03:
d9:f1:6a:53:e7:aa:b2:75:51:dd:09:ab:34:a9:50:
b1:82:a3:d0:ad:5d:9c:c4:4c:06:79:36:f3:7f:0e:
f8:61:be:a3:7b:42:98:a6:4b:cd:de:16:6c:32:33:
6b:b1:fa:56:83:72:b1:2d:12:b5:79:72:0f:6a:89:
3c:47:c0:48:ca:cf:7c:4c:96:b9:f0:82:b4:24:56:
7a:b7:51:3e:e9:ff:40:b2:45:9d:6a:7a:c0:fc:71:
4b:50:72:07:9b:dc:53:16:89:27:09:b8:04:f7:44:
95:91:94:f9:20:df:5e:38:c9:66:fd:1e:4e:ca:87:
cb:df:e7:05:75:ac:c6:48:a7:3d:d7:7e:bb:85:ea:
1b:01:9f:6e:21:28:0c:9f:91:b1:83:d8:0d:31:47:
93:97:93:4f:f9:53:d0:c3:eb:32:68:8c:8d:85:16:
9d:eb:51:77:af:9f:7d:72:7a:00:a2:60:02:5b:17:
8e:16:84:16:78:f1:7a:a4:4e:d4:1a:62:e9:e9:e5:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:E3:DE:ED:DD:F8:A2:A0:1E:71:52:9D:7D:B2:5B:28:88:64:7F
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_evj3u3d-KKgHnFSnX2yWyiIZH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.161.59.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a8:63:28:cf:e0:72:27:e7:76:b8:1a:25:90:bb:f2:ef:6a:
42:c8:7e:f4:7f:77:50:06:a7:d6:96:c1:fb:4e:56:d7:51:81:
cf:70:01:67:b1:bb:31:90:36:81:19:1c:33:2b:6b:57:36:5e:
a1:83:1d:c3:e5:55:7c:2b:b4:cd:6a:e7:1d:eb:27:a1:7c:8e:
f1:6b:01:6f:9a:f9:48:bf:9e:8d:46:1f:b1:a7:d4:ba:2f:be:
a9:98:fe:14:3a:50:80:30:69:54:a0:f4:75:bc:7a:ff:bb:b6:
2d:d8:6e:60:00:64:7e:9f:64:29:9b:8f:88:39:c6:dd:05:f3:
62:6b:cd:9e:b3:3a:e1:af:8e:75:31:64:48:77:b7:6e:ee:57:
10:99:2e:12:30:6a:cd:7e:84:49:87:c8:d3:5f:18:51:2d:c3:
d7:74:3e:3b:1e:c8:b9:13:fe:f8:7c:ac:52:36:fd:89:0a:28:
f4:f8:59:70:41:12:c0:e5:db:3b:ea:cb:1e:66:50:97:22:43:
91:3a:dc:55:86:93:26:d6:8e:10:2a:8c:53:5d:81:3a:87:3e:
67:6e:ba:59:03:ed:38:d3:88:7e:0d:e8:36:13:95:b2:74:75:
fe:8d:6b:58:74:36:a6:b2:11:15:4b:09:84:79:e5:80:9e:f7:
77:c3:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:28 2024 by rpki-client on console-ams.rpki-client.org