Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ITeirXhU-Z0ZCdV8LX6owOknkBg.roa
File: ITeirXhU-Z0ZCdV8LX6owOknkBg.roa (raw, json)
Hash identifier: zSjjCWEwVYaQQT9do5yIM5FRNSBBPcXm5krFidBM91Y=
Subject key identifier: 21:37:A2:AD:78:54:F9:9D:19:09:D5:7C:2D:7E:A8:C0:E9:27:90:18
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 09034F88
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ITeirXhU-Z0ZCdV8LX6owOknkBg.roa
Signing time: Sat 01 Jan 2022 15:03:02 +0000
ROA not before: Sat 01 Jan 2022 15:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42816
IP address blocks: 212.115.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151211912 (0x9034f88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2137a2ad7854f99d1909d57c2d7ea8c0e9279018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:43:b5:d8:00:86:cc:77:23:e7:6d:8f:14:
a7:43:ea:6b:a0:e1:74:c2:89:4a:82:5b:f1:9b:a7:
fe:d7:ff:85:8c:f9:be:9a:12:53:c9:c4:d0:4f:c9:
14:52:c7:ab:39:0c:24:ac:c4:1c:c8:e5:2c:cb:58:
f9:dc:b5:d1:30:e9:e8:1f:9e:ca:e8:a5:0d:c4:77:
db:23:ad:24:8b:c6:10:18:d8:8c:50:5c:31:86:e3:
69:99:a4:ce:61:0b:fa:40:4a:9d:cf:cd:51:00:ee:
e8:f1:41:b3:30:76:a6:73:f6:dc:54:19:63:66:dc:
3e:d3:50:79:7b:27:45:4e:3a:01:49:05:bd:e1:7f:
6f:b8:08:9c:f4:14:38:e4:c4:1f:ad:6a:14:d3:33:
37:a4:c3:13:dd:37:29:1f:7d:04:82:3d:66:6e:65:
a7:e0:f5:bc:2d:44:a7:3a:7e:97:84:8d:a9:25:a8:
10:95:3e:84:97:d2:b6:fc:18:bc:98:1f:7f:c0:9f:
33:5f:95:35:da:ce:fa:02:f3:2d:c0:fe:50:90:68:
70:8d:ae:05:91:58:aa:1d:ed:a4:55:d3:aa:e6:90:
00:92:a9:22:99:84:c8:02:99:a9:ff:ce:2c:44:c5:
f8:b9:fa:ab:af:93:81:97:90:61:67:6f:4b:1a:e6:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:A2:AD:78:54:F9:9D:19:09:D5:7C:2D:7E:A8:C0:E9:27:90:18
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ITeirXhU-Z0ZCdV8LX6owOknkBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:fd:4d:36:e5:b7:8a:a6:6e:48:3e:ba:07:06:4c:c2:fb:01:
ef:cf:5b:04:2e:59:f3:38:ce:9b:6b:d7:1c:d5:f1:9e:1f:ff:
76:bc:e5:9e:13:73:c8:b0:21:f4:38:0f:39:23:bd:6c:09:44:
4c:ac:07:91:ce:72:d7:18:7a:f4:41:9f:2a:45:d4:2c:79:4d:
b6:c8:7e:26:00:da:f9:8d:f1:30:70:ee:84:f0:2a:39:b1:b2:
55:7e:3d:18:d4:de:25:01:8a:80:b6:fc:2b:c2:33:74:89:f3:
42:9e:e4:93:49:eb:b2:a9:56:5c:5f:f8:20:eb:26:8a:4b:42:
e6:75:aa:be:29:de:f4:82:be:6e:96:d7:31:e8:eb:9c:31:a2:
41:3c:f2:a0:93:1d:9b:5a:65:5e:51:e3:fe:a4:50:45:6b:94:
c0:eb:da:8d:07:3a:da:ab:99:34:53:e4:aa:bf:59:a8:70:4d:
cd:35:f1:12:77:5a:a5:6f:fc:46:4f:1c:4e:df:a2:37:c9:38:
ac:8c:83:20:0d:19:5c:84:5d:36:3a:25:36:5f:85:84:56:97:
2d:4a:a5:d3:f2:30:2f:07:a6:09:6c:7f:2a:31:db:aa:a7:f6:
de:3e:b6:38:2a:2b:62:db:4c:37:b7:a1:a1:b7:2b:f8:78:fb:
9b:8c:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:11 2023 by rpki-client on console-ams.rpki-client.org