Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/WRi6QhRzwnmbwS72vUW_IGqhwmw.roa
File: WRi6QhRzwnmbwS72vUW_IGqhwmw.roa (raw, json)
Hash identifier: QRPiW6gM4dXbQCrTJUwfDqkhcp1iju9oPCwKQwhZzTM=
Subject key identifier: 59:18:BA:42:14:73:C2:79:9B:C1:2E:F6:BD:45:BF:20:6A:A1:C2:6C
Certificate issuer: /CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Certificate serial: 476DEE
Authority key identifier: BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/WRi6QhRzwnmbwS72vUW_IGqhwmw.roa
Signing time: Sat 01 Jan 2022 02:56:29 +0000
ROA not before: Sat 01 Jan 2022 02:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211271
IP address blocks: 212.23.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4681198 (0x476dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8c64350a0dfd68a043b221f1860b480ae352de
Validity
Not Before: Jan 1 02:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5918ba421473c2799bc12ef6bd45bf206aa1c26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:72:58:57:46:3c:eb:6d:b0:fa:af:ed:5e:
dc:3d:87:fb:bb:1a:d6:7e:c7:94:1c:0a:51:b8:4c:
67:47:5e:a4:64:6c:e4:e1:ee:d1:be:c0:52:30:6a:
99:00:08:f3:3e:24:10:ea:59:5f:77:e3:95:91:a6:
7a:08:a3:79:18:cc:27:60:ba:92:a6:7c:4a:62:00:
1d:3e:35:e7:dd:b2:92:0c:11:82:d1:39:04:24:cd:
8b:46:ad:bc:a0:18:5a:f3:76:14:65:41:a1:34:fc:
53:bd:0f:36:cf:15:1f:70:92:4f:0f:64:bd:d3:a7:
d1:60:c0:58:8c:81:c7:96:05:00:4a:40:f2:07:ba:
24:83:b0:a6:d5:ad:ef:35:82:cd:3f:f3:2b:ae:9b:
21:4b:18:ed:68:79:65:ac:c4:0a:a3:64:d8:cd:28:
f4:b2:e2:13:c2:a2:10:80:19:33:b4:7a:f3:e2:b9:
fc:d6:9f:62:b8:8f:2b:33:a0:a4:96:1f:0e:99:eb:
cd:81:7c:70:d3:2b:72:7b:0f:c2:d5:dc:3d:a6:7c:
69:b2:06:40:64:46:e6:09:bc:d9:2a:8e:45:5a:dc:
57:28:46:48:87:08:bf:ce:50:aa:7f:37:ab:87:bf:
62:65:40:78:52:a3:17:ee:f4:c3:37:3d:bb:b8:09:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:BA:42:14:73:C2:79:9B:C1:2E:F6:BD:45:BF:20:6A:A1:C2:6C
X509v3 Authority Key Identifier:
keyid:BF:8C:64:35:0A:0D:FD:68:A0:43:B2:21:F1:86:0B:48:0A:E3:52:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4xkNQoN_WigQ7Ih8YYLSArjUt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/WRi6QhRzwnmbwS72vUW_IGqhwmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/47f768-f7a0-4500-bca7-dd919589a27f/1/v4xkNQoN_WigQ7Ih8YYLSArjUt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.205.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6e:09:e8:19:84:ac:60:97:79:d3:14:96:24:5d:71:ac:ec:
3e:6e:2f:f9:87:5b:5e:d0:45:61:8a:b4:91:f3:16:72:d4:80:
01:97:1a:b3:52:57:a4:1d:b4:8c:57:d8:90:51:8d:0e:42:d6:
d4:67:44:a6:6c:c5:d7:28:4c:7f:e3:87:02:5e:28:28:94:6b:
b7:b5:8d:20:36:48:2d:94:6e:eb:86:1e:7f:b3:d7:79:5f:6f:
e7:64:60:88:b1:b2:3e:16:b9:22:79:54:fa:35:10:55:92:c7:
1f:1c:5a:5e:69:9a:1b:14:45:e4:10:5c:f5:22:b2:f4:cd:24:
94:17:8a:01:d7:d0:50:f3:a7:8a:9b:81:13:e9:64:3a:5e:b5:
1a:76:91:3d:1a:6f:a1:f7:d2:e0:eb:b8:7d:c2:5f:d6:9d:83:
62:4e:dc:57:6c:71:88:07:36:e4:4e:50:09:60:e2:2c:c9:e2:
11:74:66:b5:c3:be:bc:53:ee:47:d7:f3:60:11:32:f9:86:42:
a1:ab:a4:6e:30:92:d7:2a:08:91:fa:ae:82:7e:98:82:d5:42:
1b:cd:b5:a2:6f:00:91:43:a0:72:b1:74:7d:99:b6:b1:7e:1d:
9d:b0:3f:11:54:8a:2b:e2:fd:38:ab:51:de:56:28:b9:10:3d:
ae:34:f5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:13 2024 by rpki-client on console-ams.rpki-client.org