Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8ZIihK9xJYeViFbPbBVA7v1sv-8.roa
File: 8ZIihK9xJYeViFbPbBVA7v1sv-8.roa (raw, json)
Hash identifier: 4j03ctKoqwye0y9RjY/s6QQvsR9aOOG2dBp2GXrUJ88=
Subject key identifier: F1:92:22:84:AF:71:25:87:95:88:56:CF:6C:15:40:EE:FD:6C:BF:EF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01845A803B523D71D377EA6CC281480D445D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8ZIihK9xJYeViFbPbBVA7v1sv-8.roa
Signing time: Wed 09 Nov 2022 03:47:44 +0000
ROA not before: Wed 09 Nov 2022 03:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.218.0/23 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5a:80:3b:52:3d:71:d3:77:ea:6c:c2:81:48:0d:44:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 9 03:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1922284af712587958856cf6c1540eefd6cbfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:70:7e:cb:44:98:b7:75:c4:b7:95:78:f4:
4a:ec:df:0e:bd:12:b1:27:a1:37:00:d9:6b:6b:31:
aa:fe:72:9f:9e:4f:3f:03:54:14:29:cf:fe:69:f2:
1e:f9:c4:bc:02:d0:68:f3:59:07:6d:67:f3:d6:f7:
a2:cc:fa:e3:f0:eb:00:23:92:be:c2:5c:6d:47:58:
54:92:14:5f:85:57:a4:22:c0:f2:8d:9a:25:54:9f:
90:a3:45:64:db:cb:b5:b7:1f:9d:1d:89:1d:a8:c3:
ad:bb:c4:98:8e:27:9a:64:cb:50:06:01:05:a4:0b:
19:c5:96:fe:c7:a0:7c:14:fd:29:e1:94:f0:62:e0:
d0:69:76:89:01:d4:be:d4:ff:32:bd:6d:21:db:78:
47:f4:a8:02:cd:f4:b5:b4:04:27:cf:14:dd:8d:22:
f3:5e:ed:66:ac:f9:9c:84:98:4b:0b:f4:b7:fc:21:
35:60:87:f0:7b:10:85:c6:14:93:33:e1:96:79:11:
82:a9:78:31:0c:9b:a6:9b:9e:20:75:d9:0b:4d:c4:
7d:ec:34:f5:c5:03:43:43:f6:30:dd:67:4a:a9:04:
74:48:10:8a:f7:00:60:93:01:74:cc:9b:a3:c9:74:
52:61:6b:08:71:95:2e:3e:05:a8:2d:cd:6b:fd:f3:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:22:84:AF:71:25:87:95:88:56:CF:6C:15:40:EE:FD:6C:BF:EF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8ZIihK9xJYeViFbPbBVA7v1sv-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.211.0/24
212.111.216.0/21
Signature Algorithm: sha256WithRSAEncryption
40:2d:c4:39:9c:d1:24:27:a9:91:a8:29:d9:ed:6c:2b:05:63:
8b:ef:a0:14:e6:c1:50:39:78:e6:9e:87:3b:40:4f:e3:27:5c:
03:fa:c7:c9:84:7c:31:16:31:5c:3d:ee:fc:3b:5e:31:60:7c:
64:59:91:ce:8a:61:b9:48:3d:86:14:60:5d:4f:88:9a:0c:03:
ca:48:82:a9:cc:b9:81:8a:da:d1:79:51:13:f7:5d:d7:3c:26:
b6:21:17:09:9a:88:c4:a0:48:a0:fb:87:fa:5f:89:6c:d9:ef:
2c:30:d7:7f:68:3f:3b:a6:77:71:9c:de:f6:8c:b6:a9:7e:2a:
4e:5e:dd:04:ae:c2:ef:c3:39:1e:13:c6:97:29:7c:b2:27:af:
20:66:7b:a4:08:72:30:21:21:07:aa:5a:b7:a6:cc:ca:d6:2a:
7b:3f:72:16:7c:98:27:63:be:00:02:81:3c:fe:8e:3c:ba:80:
3f:cf:74:19:13:16:cb:e7:84:27:78:c8:e8:82:c6:38:c5:b0:
ac:d4:36:1e:85:37:54:57:03:98:13:0f:0e:27:32:61:f3:28:
be:7f:ee:aa:f9:88:c5:93:ee:5a:40:82:0c:86:22:19:11:bd:
16:cb:76:0f:26:1c:83:d1:f0:73:aa:60:b7:b3:cb:36:99:fc:
e5:a3:c1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org