Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/99LOJLuknNGuaeG3fKtgUMJSugU.roa
File: 99LOJLuknNGuaeG3fKtgUMJSugU.roa (raw, json)
Hash identifier: J/GI9XmSV+e0qMhmfgiQhKrt/Xpa7/RaJXEGWv720B8=
Subject key identifier: F7:D2:CE:24:BB:A4:9C:D1:AE:69:E1:B7:7C:AB:60:50:C2:52:BA:05
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D239CBB
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/99LOJLuknNGuaeG3fKtgUMJSugU.roa
Signing time: Sun 20 Mar 2022 20:14:00 +0000
ROA not before: Sun 20 Mar 2022 20:14:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
195.178.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488873147 (0x1d239cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 20 20:14:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7d2ce24bba49cd1ae69e1b77cab6050c252ba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:c7:91:5d:e8:f5:1e:7e:6c:ec:a6:ea:b0:
ae:80:ef:96:55:12:12:f1:d4:a8:79:12:fb:25:d3:
87:d4:4e:46:5c:61:f8:65:01:bc:15:5b:ab:b1:7c:
22:d4:1b:24:1b:11:ad:83:8d:66:fe:dd:c3:7f:24:
92:10:b7:78:a2:d6:ab:9b:11:1b:37:c1:00:d5:ab:
1b:fb:9a:b2:c4:e2:ed:6c:19:f8:93:14:e9:d8:3f:
26:c5:5e:9e:de:a1:9f:12:64:bd:31:de:d7:77:b7:
fc:3b:0c:67:1e:43:db:3a:9a:5d:78:56:8d:bb:d6:
fb:a7:37:c7:db:1b:28:a8:98:76:e3:2a:21:1a:34:
40:02:63:6c:78:12:27:08:9d:d3:d5:ad:94:b6:fe:
cd:25:1b:a4:88:7f:e4:41:82:1f:e5:ee:8f:d3:3a:
77:be:57:5a:6f:b3:34:40:9c:2c:1c:26:32:de:8a:
d3:b8:06:76:ef:72:d2:49:3c:66:df:b7:71:5c:7c:
61:33:e7:2a:38:96:2a:cf:f7:4a:f1:d1:7f:f0:2a:
69:e4:ee:b4:8f:81:2e:88:fb:95:74:f8:68:20:5d:
47:b8:b8:22:ca:dc:14:2a:81:77:44:71:36:75:b5:
3e:db:7e:f3:8f:e0:86:fd:ae:ea:4e:4b:0f:e2:45:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D2:CE:24:BB:A4:9C:D1:AE:69:E1:B7:7C:AB:60:50:C2:52:BA:05
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/99LOJLuknNGuaeG3fKtgUMJSugU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.128.0/22
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c2:52:3b:56:58:97:9e:79:84:67:8b:ef:d5:00:d5:fd:7d:
e5:15:4d:18:54:06:56:56:16:d6:b2:ea:aa:a9:c1:ce:64:db:
34:f5:fb:ec:f0:b2:34:87:02:ae:44:e4:28:e9:63:45:34:c3:
1c:13:ff:49:20:47:9f:5d:4b:09:2c:e6:9f:42:76:82:56:d5:
ea:2a:f8:09:5d:28:17:90:4c:f6:d5:e0:7e:19:7f:1f:01:f9:
a9:a8:94:95:78:da:ed:fe:6b:12:49:47:a2:bf:b9:a6:f3:17:
0c:c1:73:44:a6:c0:92:ed:3e:df:c2:51:af:86:27:a8:a6:2e:
0e:94:be:b7:53:9f:bd:71:0f:ef:7d:66:25:8f:1f:61:3f:99:
6d:18:41:c9:57:1a:80:e7:df:aa:92:55:e2:ca:fd:1f:04:28:
84:f8:67:b6:da:23:3b:2f:89:d2:46:db:1e:85:05:b6:c2:da:
e8:de:cf:7b:88:f0:5a:04:1a:b2:bd:7a:cb:bd:65:d0:24:ef:
83:0c:8a:c1:3d:61:13:80:da:1e:74:8d:6d:76:58:24:fa:e9:
71:c3:fb:58:7d:44:5d:21:f8:86:c4:b1:7b:f1:86:63:e1:59:
fc:83:1d:4d:00:2a:f9:b8:8f:22:e8:5e:71:64:58:6f:19:80:
8e:f5:c1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org