Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/DFjOEujOED_7H7CApZrbfRLsgJU.roa
File: DFjOEujOED_7H7CApZrbfRLsgJU.roa (raw, json)
Hash identifier: lbnFp6UBXTh9Py/oMEhGUbUxi2Alc89KpwXLuVRMdZA=
Subject key identifier: 0C:58:CE:12:E8:CE:10:3F:FB:1F:B0:80:A5:9A:DB:7D:12:EC:80:95
Certificate issuer: /CN=9ce4dd86bcfd8b8f506a408051605ec74db6cea0
Certificate serial: 7C1DF9
Authority key identifier: 9C:E4:DD:86:BC:FD:8B:8F:50:6A:40:80:51:60:5E:C7:4D:B6:CE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTdhrz9i49QakCAUWBex022zqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/DFjOEujOED_7H7CApZrbfRLsgJU.roa
Signing time: Sat 01 Jan 2022 02:51:28 +0000
ROA not before: Sat 01 Jan 2022 02:51:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.52.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8134137 (0x7c1df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4dd86bcfd8b8f506a408051605ec74db6cea0
Validity
Not Before: Jan 1 02:51:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c58ce12e8ce103ffb1fb080a59adb7d12ec8095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:eb:c3:53:60:33:67:2f:86:61:74:40:93:
0a:71:c1:1a:3b:82:98:d4:4c:ac:75:83:1e:af:c4:
e5:7e:a2:19:d2:38:68:aa:87:82:9d:4f:f6:36:e1:
20:f3:43:88:68:bc:fd:23:02:dd:0b:8b:50:48:34:
71:e0:52:33:a4:0a:c6:e0:9f:99:65:2a:5a:f3:11:
c0:a7:7c:d3:1a:f5:e0:e7:42:06:1f:1c:fe:65:f9:
2a:72:8f:04:bf:93:2a:6b:7d:3d:66:75:cb:7c:a6:
58:f3:7e:77:ff:c3:d5:1e:9e:07:06:83:11:f0:54:
b3:5f:b8:26:f7:14:d5:d1:07:6d:46:f1:4e:db:5f:
6f:94:ab:ed:5f:e9:10:56:d0:47:87:fa:fe:ee:b2:
84:f7:3b:54:b5:25:bf:14:15:a1:13:c2:93:77:fa:
31:7f:2f:cc:32:cc:5a:6a:01:0d:cf:6f:41:f3:82:
de:bb:45:07:99:93:b2:31:5b:71:9f:24:e7:b8:81:
99:30:57:fd:cb:ec:05:db:94:1a:61:44:74:80:bd:
e4:bd:4a:11:8b:2a:85:b0:1b:35:b9:b3:d6:0a:93:
7c:69:69:92:1d:d9:7b:28:8c:48:30:5b:d3:04:95:
77:3b:65:a2:4a:34:30:49:c6:60:a9:ce:3b:0b:ea:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:58:CE:12:E8:CE:10:3F:FB:1F:B0:80:A5:9A:DB:7D:12:EC:80:95
X509v3 Authority Key Identifier:
keyid:9C:E4:DD:86:BC:FD:8B:8F:50:6A:40:80:51:60:5E:C7:4D:B6:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTdhrz9i49QakCAUWBex022zqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/DFjOEujOED_7H7CApZrbfRLsgJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.29.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a1:5f:3b:f5:3c:95:e4:a0:21:35:ce:37:1d:2f:04:34:d0:
cb:53:d0:9d:d9:6b:01:1d:bb:bf:e6:ac:da:11:d6:c2:27:0c:
ef:1f:92:f8:39:4b:f6:bb:5c:f3:78:da:ce:66:0a:cb:2d:12:
cc:ff:64:fa:62:b0:e0:3e:75:39:2e:11:e0:1e:58:37:54:b8:
8b:b1:e2:d2:c0:52:d0:84:20:1d:8f:d4:28:e6:34:d1:5e:0f:
9e:07:88:24:45:28:27:fe:8e:d6:21:90:2c:dd:73:77:f3:37:
f8:b1:05:ff:fd:3b:87:5a:18:64:d7:b9:b7:0f:b6:8c:12:c1:
6b:ea:88:97:19:71:68:19:7e:9f:21:18:dc:a8:f3:9a:32:5d:
5f:1c:c0:93:63:e1:3f:59:d1:1f:a2:63:3a:8d:39:2a:92:5a:
7e:87:6b:c9:09:2b:32:cf:76:44:18:6c:48:13:12:71:df:11:
de:2c:bf:e6:b1:9e:71:71:9a:f8:96:be:26:78:2c:bd:4f:e9:
99:2e:81:c0:18:df:da:70:02:60:e5:c1:bc:ec:bd:e5:70:48:
82:c6:b3:55:41:0f:10:fd:3f:ea:05:6a:a1:f1:a7:15:24:4e:
b2:61:05:67:a9:14:70:89:b2:3e:2a:7a:29:e2:0a:5f:bc:a9:
cf:79:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:57 2023 by rpki-client on console-ams.rpki-client.org