Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YRXtxTEqwecrQBI0RuxZqseBb4A.roa
File: YRXtxTEqwecrQBI0RuxZqseBb4A.roa (raw, json)
Hash identifier: hyvEwU9IUV1tjoCzsHrHiRVAgUIK1/p+2GsFz4UzwzA=
Subject key identifier: 61:15:ED:C5:31:2A:C1:E7:2B:40:12:34:46:EC:59:AA:C7:81:6F:80
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0183B3CE3F92CB297EA00677E44F7226323C
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YRXtxTEqwecrQBI0RuxZqseBb4A.roa
Signing time: Fri 07 Oct 2022 18:56:21 +0000
ROA not before: Fri 07 Oct 2022 18:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.116.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:ce:3f:92:cb:29:7e:a0:06:77:e4:4f:72:26:32:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 7 18:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6115edc5312ac1e72b40123446ec59aac7816f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:d4:e2:d0:37:41:82:41:03:8b:43:8e:48:
80:14:38:f3:6f:b8:b7:49:e9:1c:b7:fd:88:12:d3:
b5:48:80:a1:f0:e2:27:96:34:a4:c8:ef:60:ab:62:
3a:5a:d9:3d:76:9e:9c:9e:4a:63:7c:60:d2:e9:f5:
e7:1e:51:d1:d8:d0:66:2a:b3:1a:e8:6c:33:7e:a4:
c9:f8:9b:05:f5:0b:83:85:28:cd:c7:c0:98:f2:29:
f7:28:53:68:75:9b:78:df:8c:7d:7d:bb:dc:a4:9d:
71:a1:a9:00:15:fc:fb:49:23:8b:8c:29:8a:9e:e1:
69:ad:75:3b:bf:0d:d7:92:0f:6a:8c:f8:1f:22:08:
93:ad:93:ff:6f:cd:17:1f:ff:d2:d8:f6:49:84:37:
45:92:bf:6d:f7:1c:8b:d4:89:fe:2b:64:49:e4:b5:
a6:70:4f:4d:b9:9f:11:de:a5:46:95:5e:df:15:96:
52:35:da:d5:de:22:2c:31:84:52:95:5c:2c:97:dd:
f1:8c:b4:57:b0:dc:4a:70:98:21:41:a9:af:a1:98:
ec:75:d7:96:e6:36:d3:63:a4:d2:c8:27:bd:8d:a1:
2d:33:8b:d0:a7:26:11:3f:10:56:bb:a3:95:74:36:
fa:1d:85:f5:78:01:08:3b:59:51:20:bc:23:7a:fb:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:ED:C5:31:2A:C1:E7:2B:40:12:34:46:EC:59:AA:C7:81:6F:80
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/YRXtxTEqwecrQBI0RuxZqseBb4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2e:46:e2:25:fa:05:d8:bc:3f:5a:42:a0:e9:79:df:e7:ea:
8c:32:e4:f9:2e:55:a0:d3:e0:49:b1:7d:3b:c1:11:78:b4:a6:
d6:20:d9:b7:69:2e:c8:3c:9f:8c:4d:87:c3:3a:3e:88:f9:a8:
03:85:cd:92:ec:ac:c7:66:70:3d:57:d2:63:ab:03:f9:0b:61:
a6:6f:ce:c1:55:20:20:f2:ab:db:a7:dd:13:55:17:33:4b:f5:
5f:31:9c:58:94:40:76:53:99:a6:e5:a7:f6:4b:8b:8c:14:0d:
b9:69:55:fa:45:16:67:1c:00:e6:ae:bf:f9:db:ae:c7:64:ad:
f5:26:23:0f:37:44:8a:fa:fc:42:8a:2f:93:53:66:36:42:f7:
bb:35:c4:a4:9e:1c:bf:e3:f0:50:9e:cf:51:fe:15:fa:36:7e:
b7:34:fa:2d:b4:0d:81:0f:e0:5d:78:66:26:a3:2e:0c:34:13:
de:cf:7e:fa:ad:ec:84:17:c7:3b:69:78:df:5b:df:95:5b:05:
47:7f:8e:db:77:e4:38:91:ec:23:c0:ff:2d:75:2c:3f:d9:91:
b1:d2:91:5f:22:96:e8:ee:16:3e:5f:44:41:41:0b:f0:65:0e:
f0:95:8f:67:cf:87:33:91:ca:06:cc:71:e2:c5:57:9e:e5:5a:
58:47:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org