Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/VbfBJmOcQXkcxl362GMUq8RJQYQ.roa
File: VbfBJmOcQXkcxl362GMUq8RJQYQ.roa (raw, json)
Hash identifier: UYRt6Aoj3qgT8eXzVqzYCbHL6AUrjDZ01FxqEI8KtgU=
Subject key identifier: 55:B7:C1:26:63:9C:41:79:1C:C6:5D:FA:D8:63:14:AB:C4:49:41:84
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C47077B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/VbfBJmOcQXkcxl362GMUq8RJQYQ.roa
Signing time: Sat 01 Jan 2022 07:55:43 +0000
ROA not before: Sat 01 Jan 2022 07:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399618
IP address blocks: 212.111.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474417019 (0x1c47077b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55b7c126639c41791cc65dfad86314abc4494184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:78:28:08:31:8c:6a:a7:07:b2:0f:24:2d:
a2:6b:f4:de:4c:ea:d3:4e:8f:7e:6d:e1:35:f2:07:
de:25:4f:ee:c4:eb:b3:d7:16:26:a4:06:ad:12:b2:
a7:4a:1e:01:31:5d:79:61:c8:0f:fd:be:eb:1c:0b:
8c:e6:ac:71:6e:35:6e:78:7b:86:68:55:9e:21:b3:
62:d6:2b:8d:2b:66:59:af:8c:4c:36:64:c7:15:d1:
90:bb:f8:ad:89:22:76:6e:98:33:15:7a:3b:f5:82:
30:d1:a6:45:a7:9f:f6:e6:5f:e3:48:75:0f:ea:95:
13:2f:3a:bc:0a:85:69:97:ec:82:17:a0:a7:83:74:
56:f5:d8:58:73:05:67:61:e8:d3:f2:cb:f4:ed:83:
9f:eb:a4:4a:f8:1d:41:b2:64:42:92:da:1c:de:19:
e1:c1:a3:ba:3d:1a:0c:5a:3f:48:21:5a:5a:79:91:
28:5a:c6:10:8e:76:4b:76:0e:d6:6c:6b:27:79:bf:
07:72:e9:a3:35:57:c9:db:28:a7:46:73:f4:ec:fa:
c5:89:89:2e:1d:b8:c3:4b:18:49:45:fd:e2:30:e9:
70:99:12:5c:63:c4:e0:c5:03:07:cf:2b:bc:bd:ba:
63:b8:e9:24:82:c1:ad:ed:7f:b8:5b:6f:75:92:7a:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:C1:26:63:9C:41:79:1C:C6:5D:FA:D8:63:14:AB:C4:49:41:84
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/VbfBJmOcQXkcxl362GMUq8RJQYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:53:2d:c1:54:53:8b:7c:b6:0b:ec:93:1a:89:cc:81:07:4d:
fc:65:d4:3a:93:0c:ee:1d:df:98:fa:9b:fd:fa:a3:c6:d0:68:
4d:f0:aa:ae:56:69:47:e5:6a:62:5e:f0:47:49:bb:6d:9d:5f:
23:c1:49:2f:be:28:c7:63:57:c4:84:17:69:41:89:b9:bf:5d:
5b:c3:76:95:2a:e0:79:82:68:f5:7e:36:5e:d7:06:6e:a7:e8:
1a:fe:ec:78:75:6d:5e:88:b1:60:85:57:24:90:0c:2a:5a:2b:
a7:a9:25:2e:3e:5f:cf:8d:e3:d9:20:52:eb:43:85:cc:0d:e4:
ef:d2:3a:57:4e:6a:d9:0e:d1:95:a8:b6:18:1e:f6:33:28:e8:
6b:65:5c:b7:73:50:4c:03:5f:ad:1d:b8:2c:2f:de:78:7e:b0:
65:d4:92:70:34:fc:3e:ee:25:36:ee:d3:a8:8f:c4:c8:56:a8:
75:3e:a3:8a:e3:ea:a5:41:ea:91:04:6f:55:89:bb:89:08:2a:
c4:59:65:36:04:bd:dd:65:c8:e4:9f:e7:f2:5d:49:1d:31:f0:
80:58:37:f9:26:8d:e6:a1:f1:f4:4f:fe:ae:71:a4:40:80:07:
d3:5a:65:c8:fa:36:5b:2f:06:ef:c3:96:36:43:2d:9c:0f:19:
cb:ce:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:22 2023 by rpki-client on console-fra.rpki-client.org