Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bIzYQNRODIP6TCd45M1HpIL8nkY.roa
File: bIzYQNRODIP6TCd45M1HpIL8nkY.roa (raw, json)
Hash identifier: Db/SmEmOWp8McbQMpK/K1/FkAyLX+jP/mxCLApi5NVo=
Subject key identifier: 6C:8C:D8:40:D4:4E:0C:83:FA:4C:27:78:E4:CD:47:A4:82:FC:9E:46
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D384168
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bIzYQNRODIP6TCd45M1HpIL8nkY.roa
Signing time: Thu 24 Mar 2022 17:17:47 +0000
ROA not before: Thu 24 Mar 2022 17:17:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490226024 (0x1d384168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 24 17:17:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c8cd840d44e0c83fa4c2778e4cd47a482fc9e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:fd:9d:e9:37:06:a3:9f:02:20:19:1a:7f:
80:b7:70:6c:06:a0:5a:e5:9a:95:d0:f1:a4:ed:e6:
66:7a:a4:18:7b:e4:58:30:9c:03:97:96:48:b1:6e:
0c:ad:97:8e:6b:c5:a3:21:1b:48:5b:4b:58:49:fa:
3f:8c:8c:0a:f4:03:02:9c:d0:04:c0:bc:33:ec:f9:
a9:da:49:c6:e4:da:a5:0d:5c:a9:9d:07:bb:ea:8b:
50:4f:74:67:f6:8e:79:51:68:02:5b:02:30:65:02:
8f:ec:9f:61:8f:bc:45:b4:b3:4d:dd:f4:57:e0:67:
1b:9e:be:32:01:68:fc:fb:38:c0:81:6d:72:af:a0:
c1:39:04:be:a2:d7:a7:e7:b2:7a:ac:26:0c:02:72:
16:f4:05:0d:26:09:27:e6:0b:f9:63:13:e4:f8:97:
ce:30:91:25:c7:c3:38:37:ca:43:20:ea:0e:9c:d3:
15:fd:8b:bb:3c:b4:30:20:a3:4d:ad:6d:f5:5e:f5:
67:86:06:d0:de:ad:b9:11:35:95:b6:bc:ca:a3:6d:
3b:2a:be:9b:d0:30:a5:e7:8b:bf:c0:ad:a8:ae:62:
d6:2f:c0:33:50:b5:f5:f4:9f:58:76:6e:45:f4:d2:
76:a0:a4:7b:d8:89:e7:3a:57:66:23:de:6c:bb:43:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8C:D8:40:D4:4E:0C:83:FA:4C:27:78:E4:CD:47:A4:82:FC:9E:46
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bIzYQNRODIP6TCd45M1HpIL8nkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:26:cb:54:5e:77:b9:fd:75:80:2a:20:fc:d8:39:3c:34:88:
a9:0b:4a:71:a6:15:b0:64:02:c5:dd:8e:0f:69:aa:fa:8a:43:
97:14:61:8c:ea:05:9b:83:d5:9c:c5:35:ea:b5:96:8c:33:13:
a3:ef:a1:87:c3:ae:a3:f9:2f:61:d8:01:5e:5e:10:53:c7:61:
56:f6:74:d8:7f:3d:1f:df:fa:8a:18:e7:c9:58:fc:a6:b6:24:
dc:94:6b:24:37:d5:b8:37:38:54:11:58:40:d8:39:49:6b:0a:
07:e7:0e:de:7c:57:03:69:6d:88:63:44:01:05:74:09:b5:ac:
88:09:ee:64:e9:a7:1c:dc:30:05:92:26:4b:20:f6:5d:5f:26:
2c:5e:1a:15:30:0d:fd:f5:2f:5a:e0:0b:e9:23:d9:cb:25:0b:
13:5c:f8:45:75:65:89:8f:8c:b6:f8:32:de:90:7c:f5:89:db:
47:8c:e8:cb:39:28:e3:fe:f4:4a:67:1e:37:15:b3:10:6e:0e:
6d:9a:75:1c:e1:b2:6e:67:ab:da:14:c4:45:98:5b:34:26:4d:
d0:a1:0c:cf:ce:13:85:c5:51:0f:19:9c:94:90:43:e9:ce:a2:
51:a2:36:a7:95:c7:1c:69:0c:a5:d4:1f:23:bf:26:8f:c9:f0:
af:52:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org