Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/C67t9fR9K__Dk2enzBdewNtQYb8.roa
File: C67t9fR9K__Dk2enzBdewNtQYb8.roa (raw, json)
Hash identifier: 6VuCfc7KAYSEuat1JURlYzAUDCPPw/1TutSWWEGaR+Q=
Subject key identifier: 0B:AE:ED:F5:F4:7D:2B:FF:C3:93:67:A7:CC:17:5E:C0:DB:50:61:BF
Certificate issuer: /CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
Certificate serial: EE976A
Authority key identifier: 17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/C67t9fR9K__Dk2enzBdewNtQYb8.roa
Signing time: Sat 01 Jan 2022 05:02:44 +0000
ROA not before: Sat 01 Jan 2022 05:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.24.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15636330 (0xee976a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17e30280ae22443406f6b63cf5e0d8e061d6bbca
Validity
Not Before: Jan 1 05:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0baeedf5f47d2bffc39367a7cc175ec0db5061bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:8a:a5:d7:01:8e:9b:6e:30:e7:79:54:dd:
48:10:c3:5c:94:f8:df:4d:f7:be:7c:4d:f3:cc:cc:
f3:9d:25:28:29:58:49:81:ad:6a:ed:4f:33:8b:f5:
67:53:40:b3:ac:b7:a1:65:a2:6b:59:98:8d:5d:b9:
4e:d4:5a:cd:e1:90:70:c0:00:93:1c:d2:d6:55:81:
6d:52:b0:ae:0e:36:71:f9:76:16:f8:cb:7a:af:dd:
2e:7d:b9:b2:04:ba:68:9a:27:69:df:14:9f:e7:5b:
ef:17:20:c9:d8:14:a2:d1:af:0e:51:33:57:2d:8c:
7c:5c:89:67:b9:55:c6:25:f3:f6:42:54:6b:15:9e:
73:f4:04:2e:be:86:ba:9c:ef:2f:10:2e:ab:d9:ed:
b0:10:b6:6e:4b:4f:a9:ab:85:98:86:ee:74:8c:16:
00:75:1d:a1:f8:2f:f4:92:37:6d:1b:d5:9d:d5:65:
51:b3:27:8e:f2:04:e3:ec:8c:a8:18:cb:11:a6:b2:
f9:a4:0d:8c:b8:1d:fd:4d:15:3a:61:77:34:0b:00:
df:6e:77:73:b2:ab:46:b4:a4:06:73:ef:98:98:92:
33:59:ee:27:88:b9:8f:df:bd:dc:f3:5a:4e:41:b4:
97:73:5d:85:1e:83:4d:5a:4b:7f:4f:c2:1b:74:49:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AE:ED:F5:F4:7D:2B:FF:C3:93:67:A7:CC:17:5E:C0:DB:50:61:BF
X509v3 Authority Key Identifier:
keyid:17:E3:02:80:AE:22:44:34:06:F6:B6:3C:F5:E0:D8:E0:61:D6:BB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-MCgK4iRDQG9rY89eDY4GHWu8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/C67t9fR9K__Dk2enzBdewNtQYb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a6cd99-85cb-4153-bbf9-cf4270c6953d/1/F-MCgK4iRDQG9rY89eDY4GHWu8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.123.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b8:c7:dd:a0:e6:4f:e1:5a:49:8e:97:ca:77:59:e5:b1:46:
11:5a:9b:2a:89:0c:5c:ba:4a:b4:33:81:72:85:90:06:84:8c:
ab:03:2f:76:05:06:5c:35:ce:c0:2a:85:af:69:45:7a:bf:69:
99:99:65:d7:0c:25:3b:98:3f:7e:a8:08:2f:95:7d:35:3b:d9:
eb:33:dd:7c:19:12:4a:53:20:ce:53:80:1e:79:48:f4:2c:64:
94:bc:64:5a:77:cb:73:d6:d5:1b:d3:82:58:64:f1:18:1e:3b:
03:3b:b0:c9:1f:7e:3c:2a:ae:9b:62:fb:11:69:92:34:12:6a:
89:74:df:59:38:f4:9a:80:1a:0f:a2:53:ab:2f:6f:15:3a:81:
a5:87:97:a9:23:a6:9d:c4:10:f1:04:cd:96:c5:3e:ac:4d:1c:
1b:57:52:81:9a:7c:20:98:11:dc:a3:f9:ac:cb:be:18:67:e0:
f6:3c:bc:dc:f9:4e:78:36:8d:b2:49:50:64:d4:ef:96:4b:f1:
88:75:7b:f9:97:55:e9:f3:31:f1:a2:0f:55:15:d3:fe:46:c4:
37:32:72:80:1d:02:f4:fc:a5:15:f9:8b:c8:47:63:69:d6:08:
a1:f6:87:5a:96:e3:d1:41:06:00:a8:b6:b0:ca:9e:f7:86:19:
70:58:b9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:43 2023 by rpki-client on console-ams.rpki-client.org