Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bTQPhUivpk1ZP8wVgRcqP_6s68s.roa
File: bTQPhUivpk1ZP8wVgRcqP_6s68s.roa (raw, json)
Hash identifier: Za71SsjLd3IKN6JfDPf+fDLqIl8OHWCI+/ubONF6eQI=
Subject key identifier: 6D:34:0F:85:48:AF:A6:4D:59:3F:CC:15:81:17:2A:3F:FE:AC:EB:CB
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01845A7E672AE6813EF43DE4DC6423085FDF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bTQPhUivpk1ZP8wVgRcqP_6s68s.roa
Signing time: Wed 09 Nov 2022 03:45:43 +0000
ROA not before: Wed 09 Nov 2022 03:45:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5089
IP address blocks: 212.111.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5a:7e:67:2a:e6:81:3e:f4:3d:e4:dc:64:23:08:5f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 9 03:45:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d340f8548afa64d593fcc1581172a3ffeacebcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:5d:68:03:70:20:38:d9:75:33:5b:e3:3d:
56:fa:8d:a5:6f:93:69:3d:ed:f1:ca:b0:18:a8:74:
83:8f:48:13:be:ff:15:74:88:89:12:1f:e0:0a:52:
3b:0b:8b:b2:0d:eb:82:a8:f0:81:09:37:43:a6:47:
ea:26:27:46:75:5b:3a:82:7d:da:96:96:fc:18:4f:
37:01:1d:2d:95:d3:d8:63:b7:bb:ab:eb:b2:d6:0f:
a7:df:2a:27:25:6b:3a:8f:60:2c:9d:f1:27:51:99:
51:8d:7c:1b:ca:83:05:ab:3e:8b:8e:50:f8:25:d5:
a1:b7:9c:15:7f:12:c0:94:00:f8:a4:d2:03:43:0c:
36:26:3e:d1:9e:9c:e6:d6:f9:dc:1c:46:cb:35:6b:
4d:32:fa:f2:8e:74:0b:0c:07:f7:5b:8e:3a:b0:4b:
a6:da:f3:36:be:0b:e2:ae:f9:fd:eb:19:a0:fa:73:
05:f8:bf:b6:ec:70:7f:8b:fc:06:95:fb:f6:6b:30:
cd:eb:f5:b1:84:cf:1b:5d:2e:63:27:21:01:8d:3c:
92:88:26:00:30:d5:e0:24:39:9c:bb:46:6f:00:50:
d6:8b:c8:50:f9:7e:de:33:43:92:b4:59:1d:dd:41:
34:48:86:b9:b7:2a:a6:19:80:f0:b2:e1:48:b8:b0:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:34:0F:85:48:AF:A6:4D:59:3F:CC:15:81:17:2A:3F:FE:AC:EB:CB
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/bTQPhUivpk1ZP8wVgRcqP_6s68s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
90:22:ec:88:44:d5:b9:e3:89:d2:33:17:31:ec:95:5f:cf:52:
06:f1:06:f6:31:26:6e:35:d9:66:d0:6e:47:45:99:86:a6:b4:
c1:7e:88:a9:c3:65:71:e1:6e:f5:3d:1c:c8:c4:e0:e0:01:04:
f0:b5:e2:d7:08:94:73:37:7f:6d:aa:19:2e:6c:3c:a7:57:26:
5a:da:38:4a:f5:79:dc:44:10:e5:c9:b5:f3:f8:84:82:94:56:
80:6a:5f:4b:ed:77:bb:f8:a4:9d:1b:57:ce:43:23:ca:4c:0e:
d1:9f:62:dc:a8:17:cb:db:d0:8a:4f:e2:56:e2:f9:52:e0:68:
0f:31:2f:c7:a2:d8:e2:4f:64:a2:78:b6:08:5e:d7:63:37:da:
12:fd:99:91:24:33:cc:88:bc:45:27:86:67:f9:5d:54:93:45:
f6:e5:0a:23:ee:2c:d8:50:1a:4f:16:03:ed:c3:f4:86:61:1b:
78:06:5a:07:bf:a1:5f:e9:af:78:c0:48:6b:2a:55:29:75:4a:
da:3d:aa:f9:d3:33:a1:29:3e:27:2a:a2:41:6a:c8:7b:12:3e:
bc:a6:c7:95:a9:0b:73:cb:45:b3:fe:69:45:55:49:b9:01:ce:
27:11:ab:58:49:de:c2:be:a8:ca:ff:5a:fd:2e:4b:76:db:61:
22:40:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org