Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_9E8YMoBvLY8MXIjTijZGqTyZ8I.roa
File: _9E8YMoBvLY8MXIjTijZGqTyZ8I.roa (raw, json)
Hash identifier: Mx6oxIPTip1ByQtgsa8dKA9tgIP2yo/dgQdVD3uWBns=
Subject key identifier: FF:D1:3C:60:CA:01:BC:B6:3C:31:72:23:4E:28:D9:1A:A4:F2:67:C2
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0184EE8F52179E8E5977DD47D2673EAE6314
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_9E8YMoBvLY8MXIjTijZGqTyZ8I.roa
Signing time: Wed 07 Dec 2022 21:48:00 +0000
ROA not before: Wed 07 Dec 2022 21:48:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.111.216.0/23 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:8f:52:17:9e:8e:59:77:dd:47:d2:67:3e:ae:63:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Dec 7 21:48:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffd13c60ca01bcb63c3172234e28d91aa4f267c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:dd:04:3d:15:0f:6a:ae:2a:9b:16:98:a6:
bc:82:64:59:8b:25:7b:de:79:3f:f6:b8:81:5b:21:
11:fc:26:bd:3a:63:7a:93:f4:bf:0b:54:d6:38:fd:
07:33:60:29:4b:fe:51:9c:68:51:24:a1:67:f0:93:
46:74:9d:23:7c:61:3e:4c:2c:16:96:13:20:b5:b9:
f9:e7:04:f1:2c:7a:f2:77:49:6d:ba:7c:5a:53:16:
b1:db:41:5d:26:35:ca:10:d1:f1:72:fc:1d:37:fd:
c1:03:ff:03:5a:57:54:5f:55:d1:ce:61:f5:4e:37:
32:af:af:7e:c7:4c:54:00:c8:4f:09:e6:35:cf:11:
24:f3:43:9b:fb:7a:90:38:af:cf:2c:1d:f7:21:92:
2d:f9:22:41:24:6c:e9:57:ba:cf:86:1c:ae:92:72:
bb:8d:e6:24:79:a7:be:45:03:e3:8a:74:c6:1d:ba:
a6:01:2e:85:22:28:72:7c:e5:37:68:0f:a9:8b:62:
b2:7f:48:48:29:1b:a6:f0:4b:d0:12:03:b2:e9:3f:
be:f7:5a:d1:12:9f:a3:55:bc:cd:6d:6f:e2:61:92:
63:08:00:85:51:42:c5:ce:34:63:21:8b:60:42:31:
a4:64:34:a2:7e:e2:b4:e0:d0:1c:fd:e8:f0:1c:3c:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:3C:60:CA:01:BC:B6:3C:31:72:23:4E:28:D9:1A:A4:F2:67:C2
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_9E8YMoBvLY8MXIjTijZGqTyZ8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.216.0/23
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:42:af:54:21:82:b7:30:50:1f:36:63:cd:57:92:75:50:32:
19:22:81:21:b0:8b:03:2b:2b:44:7f:f2:26:27:1c:3f:d3:3e:
ae:1b:a7:91:ec:d3:d6:d0:cd:44:8a:52:73:6a:97:42:2c:51:
e6:48:91:af:00:e0:61:8b:26:c0:7d:06:dc:55:04:28:9b:7d:
ca:4e:51:35:5a:74:0d:4f:0c:f5:11:c1:97:a2:84:86:53:24:
98:03:84:96:90:a7:09:1b:a2:1a:3f:ad:b9:fe:3b:9d:61:2a:
94:9b:14:25:4e:94:2e:5e:af:53:b7:30:ec:b4:3d:19:af:d1:
fa:d4:51:dc:db:3a:88:d4:b2:a4:dd:1d:f9:ce:d4:8b:5f:46:
75:0b:49:e1:10:df:fc:c8:ee:70:18:b1:23:d7:b0:1c:07:f8:
3b:8b:f3:ea:15:a1:fc:91:2a:0f:08:ef:bc:04:fa:fd:e3:a8:
33:33:b5:b0:47:27:1f:cd:34:88:f9:f1:9e:34:5e:de:2a:6c:
60:7a:80:24:fb:0e:31:fa:a5:45:d1:af:ea:e0:98:c3:c8:62:
1c:59:1c:35:56:29:a3:85:9c:47:70:43:06:e7:02:44:a8:02:
05:fe:a2:93:78:16:55:a7:c3:b0:dd:16:e1:f2:2d:b3:ec:ff:
67:b2:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org