Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/_F1EKqAp4OUmiG2TIVaBOlP93QE.roa
File: _F1EKqAp4OUmiG2TIVaBOlP93QE.roa (raw, json)
Hash identifier: RIpEjI4o4ahwcV7HygoPZTjPp1TIxeBUktC/RdjP8Wk=
Subject key identifier: FC:5D:44:2A:A0:29:E0:E5:26:88:6D:93:21:56:81:3A:53:FD:DD:01
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 367CC4CD
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/_F1EKqAp4OUmiG2TIVaBOlP93QE.roa
Signing time: Sat 01 Jan 2022 07:58:12 +0000
ROA not before: Sat 01 Jan 2022 07:58:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8468
IP address blocks: 212.124.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914146509 (0x367cc4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 1 07:58:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc5d442aa029e0e526886d932156813a53fddd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:a7:e8:65:66:16:31:ca:ab:2c:0b:59:c8:
e4:00:a6:e3:a5:0c:7c:ac:14:6c:8d:a6:31:99:17:
3d:b5:97:89:c9:18:73:31:54:d0:22:5c:61:5b:5b:
cd:ec:27:b4:af:42:28:51:cf:09:f5:97:08:c5:2b:
5d:d3:87:ea:b4:e5:62:fc:3d:f7:0c:59:03:44:b8:
90:cb:c4:dd:3f:98:ea:55:a8:20:28:d8:6e:37:8e:
b4:c6:a6:67:67:43:65:9e:0d:8c:49:b0:b9:ec:66:
29:a0:a9:bb:e6:15:e8:fd:61:ed:f4:bc:a0:32:dd:
16:63:3d:89:70:d3:a4:e0:d2:62:f2:d9:b3:c5:47:
43:b6:b0:93:bb:53:5f:7b:a4:cf:53:5d:8e:b6:4a:
74:47:86:7d:c9:e4:e6:be:33:9c:87:01:77:0d:16:
93:4d:de:82:af:e9:77:5c:4a:91:8b:10:d3:7f:13:
9c:7f:22:55:95:af:ab:2b:b4:51:aa:5e:af:81:55:
f3:1a:71:21:fc:cc:7b:36:cb:fd:12:74:24:77:f7:
d1:98:1c:81:9f:b2:3a:16:e6:aa:b7:2a:e0:83:32:
cc:36:a8:43:6a:61:2b:75:30:bd:cc:e6:d5:d8:ee:
0e:40:06:92:07:db:65:27:5b:1f:92:f8:5c:5b:22:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5D:44:2A:A0:29:E0:E5:26:88:6D:93:21:56:81:3A:53:FD:DD:01
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/_F1EKqAp4OUmiG2TIVaBOlP93QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.199.0/24
Signature Algorithm: sha256WithRSAEncryption
59:03:7b:dc:1d:3b:d5:0e:b5:2a:45:a2:52:73:f9:7d:3c:e2:
c0:a3:2a:3d:0f:50:1e:e4:57:7a:88:ff:59:25:05:ff:b4:8d:
cd:2f:28:b6:15:06:c6:10:27:98:62:8b:e0:0c:aa:59:f4:34:
16:8d:19:bf:ff:0a:79:65:70:a1:2a:60:6d:36:60:24:81:2c:
43:35:9f:23:d5:9c:d9:9e:d4:33:c9:d0:15:e7:b1:a2:28:df:
78:a6:68:2a:cd:6f:e6:84:68:ea:e1:85:5e:5a:c8:d3:19:25:
a2:7a:02:9c:79:e0:35:a2:8e:33:cd:af:de:19:02:d3:ac:12:
48:71:a4:32:91:cf:08:8a:61:85:5e:c3:58:de:62:a3:8b:b7:
fc:27:1e:ce:ae:18:f9:f6:f5:0a:5b:86:7d:3a:80:35:54:b8:
42:c9:d2:33:db:8b:99:e6:65:40:7a:c2:1a:e9:de:42:4b:d9:
3b:33:a4:fd:a0:84:82:f3:46:d6:34:63:05:8d:42:31:18:e3:
66:43:0f:dc:e5:e1:b3:3a:d0:22:72:28:23:89:5a:82:37:9a:
6a:41:18:88:c2:9a:c1:39:dc:d9:2f:5c:c6:c2:6a:cd:2f:ad:
03:6b:14:e5:4c:f3:74:b8:d7:89:2d:0b:e3:51:19:43:30:af:
63:b6:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:30 2024 by rpki-client on console-fra.rpki-client.org