Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/G8MQzfRF0jTs6OH-9GRz1vR00oE.roa
File: G8MQzfRF0jTs6OH-9GRz1vR00oE.roa (raw, json)
Hash identifier: zn9ltk6W1Dw61FDQaUo0rOuoH/xF221GLBlpnnn8/6A=
Subject key identifier: 1B:C3:10:CD:F4:45:D2:34:EC:E8:E1:FE:F4:64:73:D6:F4:74:D2:81
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C45EB79
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/G8MQzfRF0jTs6OH-9GRz1vR00oE.roa
Signing time: Sat 01 Jan 2022 07:55:42 +0000
ROA not before: Sat 01 Jan 2022 07:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212343
IP address blocks: 212.111.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474344313 (0x1c45eb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bc310cdf445d234ece8e1fef46473d6f474d281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:30:1a:cb:e3:c5:63:7d:da:a6:bc:8a:da:
f0:68:93:7b:d1:45:d9:19:37:da:f2:fb:fc:f2:7a:
6c:e4:50:74:a7:94:50:92:d9:21:50:c3:18:ad:89:
d3:ec:90:e6:4a:de:fe:d9:ae:a6:35:9f:78:54:5e:
dc:74:28:c2:a2:c9:16:29:f5:8f:33:f3:04:e3:92:
ae:61:e7:7a:c6:e2:ad:1c:b1:a9:c0:f8:31:b2:3c:
a6:ed:e3:13:76:e8:b6:da:04:b3:64:34:26:04:3e:
fd:76:d6:13:a8:19:80:00:f2:52:7a:68:eb:3a:3d:
33:ee:66:fd:8a:c2:90:99:eb:03:46:ac:81:7d:94:
19:43:22:0a:ea:54:2c:b1:a2:5a:06:35:85:83:60:
04:42:36:9a:dd:92:fc:ad:54:b1:40:2e:cc:00:61:
e7:6e:25:4e:e2:62:1d:c5:de:3d:d7:f8:6c:31:c3:
5f:54:1c:72:f3:8d:57:0f:d1:a6:f8:9f:89:8d:bd:
e3:f4:70:91:40:ac:90:2f:38:61:2e:ba:2b:84:c7:
03:c9:82:f5:6f:e0:dd:f4:be:25:69:96:c2:87:f7:
13:a4:34:70:35:08:17:95:1a:67:fa:0f:5e:49:9a:
57:fd:91:1d:6c:71:06:c7:f4:61:7a:46:35:26:1f:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:10:CD:F4:45:D2:34:EC:E8:E1:FE:F4:64:73:D6:F4:74:D2:81
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/G8MQzfRF0jTs6OH-9GRz1vR00oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:97:03:c1:01:09:8f:ce:c2:b2:d8:00:5f:1e:c6:f6:32:6f:
16:c2:7f:84:c5:01:d5:fa:ba:b8:79:d1:53:d9:75:52:c1:97:
39:72:0c:83:4a:ac:ec:7c:0d:e0:6c:6a:3b:aa:6a:ef:cf:ac:
d5:5a:25:03:12:e6:28:c2:fd:77:d5:c7:82:43:04:f9:41:53:
3f:14:1b:8e:ff:6a:0b:d8:b0:59:6f:c9:a3:83:0d:92:3b:b3:
48:2f:71:8c:4d:aa:c1:f5:bf:e5:fc:d3:ac:f4:a5:47:fb:43:
b9:7e:42:4e:ef:17:ea:74:fd:69:02:43:5b:bb:a3:fe:dc:08:
14:5b:48:6e:2e:64:b3:fa:6a:66:c2:a1:c5:36:61:e2:bd:1b:
0c:7a:a1:77:18:21:bf:cf:5c:ba:91:da:af:d1:ee:9c:95:5a:
25:34:a2:a7:18:76:0a:63:aa:5b:4b:83:a7:57:00:4c:c1:ae:
7c:6c:a6:a8:e1:ba:af:fc:4e:d9:72:ba:d4:e5:1d:08:40:2e:
66:47:38:e9:4e:44:b4:a7:e3:95:91:20:80:85:e6:6b:45:26:
c2:43:8a:4e:c9:24:57:36:b0:31:78:30:ba:ee:97:2d:26:2e:
fe:9a:a8:a9:75:38:fc:b9:44:c5:76:da:cb:66:7b:a9:71:43:
59:00:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org