Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8KBGjoYzNzS0bG6EkmH7HHoZm2w.roa
File: 8KBGjoYzNzS0bG6EkmH7HHoZm2w.roa (raw, json)
Hash identifier: qrG+SwhLq7sdy/lZG3j3RqazOtmpi/KNenVkRZikwXM=
Subject key identifier: F0:A0:46:8E:86:33:37:34:B4:6C:6E:84:92:61:FB:1C:7A:19:9B:6C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0182EAA1C3738F4D731945857D6922270A35
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8KBGjoYzNzS0bG6EkmH7HHoZm2w.roa
Signing time: Mon 29 Aug 2022 17:24:06 +0000
ROA not before: Mon 29 Aug 2022 17:24:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204879
IP address blocks: 212.111.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:a1:c3:73:8f:4d:73:19:45:85:7d:69:22:27:0a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 29 17:24:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0a0468e86333734b46c6e849261fb1c7a199b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:ea:4b:b5:bf:a8:20:2b:e7:07:75:56:11:
65:16:4c:fc:50:d1:4b:a2:89:36:14:b1:00:a2:02:
32:2b:be:c0:ce:c5:98:a4:37:bb:9f:27:67:48:e7:
e7:cc:c7:01:28:48:0d:e2:bd:b0:51:42:6c:03:24:
66:c9:1a:ae:40:fb:52:53:24:a8:e1:3b:46:c8:85:
5f:ec:ab:06:67:85:44:32:0b:8b:0f:c0:ba:fd:8e:
da:00:35:94:f8:c8:cd:81:42:dd:79:57:dd:69:1a:
a3:71:44:b2:1c:ee:71:4f:6e:7d:d7:a0:69:1f:e6:
ea:7e:61:d8:8c:2a:aa:db:cb:20:68:8e:d1:e8:c7:
ab:a9:7c:1a:af:3e:ca:6b:20:ad:48:b3:38:de:a6:
34:29:a5:51:b3:4c:be:23:cf:65:0b:d8:1f:54:e1:
dc:c7:75:2a:ec:c0:27:65:c7:69:31:67:e0:cd:30:
b7:f4:60:c6:84:6b:34:eb:47:94:c0:16:97:36:ce:
bd:16:5f:5a:50:c9:fb:b2:8b:80:31:04:59:19:4f:
88:9c:45:47:b3:28:3f:9c:23:01:52:4d:e3:0a:fa:
6e:35:fd:04:c5:15:b3:bc:8d:79:1d:e4:2b:85:ea:
d3:65:99:ca:a9:12:84:f6:b7:bb:d5:cd:8f:46:e5:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A0:46:8E:86:33:37:34:B4:6C:6E:84:92:61:FB:1C:7A:19:9B:6C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8KBGjoYzNzS0bG6EkmH7HHoZm2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.209.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:19:82:fe:00:c4:da:d2:82:26:34:76:fd:bb:3a:68:e1:4d:
81:d7:cd:0f:b5:c7:5d:25:e6:d0:e5:e9:cb:77:b6:c3:40:e0:
f4:3e:40:c8:b7:a0:78:28:2d:7f:47:3e:ca:6e:64:71:e5:76:
c3:e0:2d:eb:ef:7e:fa:8b:bd:a9:11:65:94:70:89:01:35:a2:
df:46:68:03:5d:e2:06:20:09:42:89:9f:b1:15:0a:a5:d6:0e:
0c:69:05:05:a9:ac:08:8b:32:eb:59:8a:58:b1:13:0c:8d:77:
ab:22:53:ba:83:8e:53:cc:0d:c3:44:d6:01:5c:e1:25:d9:ed:
1a:af:53:68:c8:93:a5:df:90:1d:df:4d:25:93:6f:62:74:f1:
9c:01:66:b3:f8:8a:6a:6b:cb:d5:fb:fe:2b:f6:d5:f8:7b:1d:
57:54:58:47:5a:a9:5f:3e:f4:ce:fe:58:b7:bc:ec:71:b7:d7:
9b:bf:27:38:ad:82:e7:26:ca:ec:32:fb:ea:1a:e7:31:56:1d:
ff:bd:76:69:3e:f1:8c:3c:ab:a1:4e:bb:ac:28:e9:eb:82:aa:
d3:89:b4:2c:d8:6b:2c:fd:f1:d4:c6:23:51:03:4a:9c:d4:c1:
47:a5:63:4d:a1:50:4e:f0:5d:cb:29:95:87:4f:1b:b4:d9:1c:
ac:4a:c8:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLqocNzj01zGUWFfWkiJwo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIwODI5MTcyNDA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGEwNDY4ZTg2MzMzNzM0YjQ2YzZlODQ5MjYxZmIxYzdhMTk5YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2zqS7W/qCAr5wd1VhFlFkz8UNFL
ook2FLEAogIyK77AzsWYpDe7nydnSOfnzMcBKEgN4r2wUUJsAyRmyRquQPtSUySo
4TtGyIVf7KsGZ4VEMguLD8C6/Y7aADWU+MjNgULdeVfdaRqjcUSyHO5xT25916Bp
H+bqfmHYjCqq28sgaI7R6MerqXwarz7KayCtSLM43qY0KaVRs0y+I89lC9gfVOHc
x3Uq7MAnZcdpMWfgzTC39GDGhGs060eUwBaXNs69Fl9aUMn7souAMQRZGU+InEVH
syg/nCMBUk3jCvpuNf0ExRWzvI15HeQrherTZZnKqRKE9re71c2PRuUlNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCgRo6GMzc0tGxuhJJh+xx6GZtsMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvOEtCR2pvWXpOelMwYkc2RWttSDdISG9abTJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1G/RMA0G
CSqGSIb3DQEBCwUAA4IBAQDDGYL+AMTa0oImNHb9uzpo4U2B180PtcddJebQ5enL
d7bDQOD0PkDIt6B4KC1/Rz7KbmRx5XbD4C3r7376i72pEWWUcIkBNaLfRmgDXeIG
IAlCiZ+xFQql1g4MaQUFqawIizLrWYpYsRMMjXerIlO6g45TzA3DRNYBXOEl2e0a
r1NoyJOl35Ad300lk29idPGcAWaz+Ipqa8vV+/4r9tX4ex1XVFhHWqlfPvTO/li3
vOxxt9ebvyc4rYLnJsrsMvvqGucxVh3/vXZpPvGMPKuhTrusKOnrgqrTibQs2Gss
/fHUxiNRA0qc1MFHpWNNoVBO8F3LKZWHTxu02RysSsi0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org