Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jwnLfOMCQ2uNhfKO7AcaPGURUBY.roa
File: jwnLfOMCQ2uNhfKO7AcaPGURUBY.roa (raw, json)
Hash identifier: 7vfGPK8P18zFckfPQSOwEqi8UMtFopTgpV/NayLypgg=
Subject key identifier: 8F:09:CB:7C:E3:02:43:6B:8D:85:F2:8E:EC:07:1A:3C:65:11:50:16
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C41533B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jwnLfOMCQ2uNhfKO7AcaPGURUBY.roa
Signing time: Sat 01 Jan 2022 07:55:39 +0000
ROA not before: Sat 01 Jan 2022 07:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205656
IP address blocks: 212.111.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474043195 (0x1c41533b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f09cb7ce302436b8d85f28eec071a3c65115016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:5e:3f:56:e7:9f:9f:ac:e4:5e:57:f5:29:
5d:44:c6:48:42:b7:77:a9:db:5e:12:c7:6a:a7:99:
36:2c:fe:71:cb:8e:e4:65:b1:51:b1:26:5b:97:32:
49:ee:f0:e7:20:c9:c7:52:8b:b3:79:63:b0:94:45:
e3:dd:d5:f9:8e:0f:a9:1c:05:bd:0a:2e:27:fb:35:
81:fa:51:5b:06:ef:07:ca:28:1f:70:b2:2b:b7:16:
1f:17:e3:63:9a:6b:50:76:f8:2c:b1:34:01:fe:b7:
f9:f9:85:99:a4:13:b3:85:d9:69:50:79:3b:99:e2:
a7:e9:86:fb:34:b8:f9:f1:61:eb:b4:f4:1c:c5:0e:
7d:f1:55:7f:a2:7b:92:1b:b1:08:71:2b:8b:7c:76:
19:22:d1:1e:e0:83:3d:e5:50:eb:27:ce:7e:a5:d4:
8f:2b:53:9c:39:0d:de:8e:c7:8f:8a:b6:5a:3c:bf:
f2:cf:63:81:cd:96:1e:86:c4:42:b8:41:b6:cf:f2:
20:48:63:3b:75:ed:26:69:47:93:3f:f3:4c:7d:b6:
d6:39:2a:9b:48:ab:4b:6e:17:cd:e1:67:5a:a5:07:
c3:88:b4:85:fe:20:e5:6f:18:12:1b:03:2b:dd:fb:
84:08:a4:21:4f:f5:88:94:5f:0a:44:00:69:20:c7:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:CB:7C:E3:02:43:6B:8D:85:F2:8E:EC:07:1A:3C:65:11:50:16
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jwnLfOMCQ2uNhfKO7AcaPGURUBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.205.0/24
Signature Algorithm: sha256WithRSAEncryption
78:90:d3:3a:34:2b:a8:44:9d:2f:b5:d6:2f:c6:43:13:68:bc:
0f:5c:d9:80:12:5c:5f:33:5d:d7:b6:85:65:6e:f6:c3:cd:81:
11:29:97:ff:c1:85:96:eb:ee:2e:d4:d5:51:34:a0:1f:5c:ff:
39:4d:39:51:b2:22:04:05:7d:4c:97:53:91:eb:84:c6:a7:bd:
f6:12:90:29:0c:18:62:10:90:64:31:82:44:33:c3:28:c7:5d:
c3:64:e0:a0:d2:00:92:ef:3a:4c:78:76:5c:45:64:07:6f:01:
90:ca:df:c1:09:42:8b:eb:94:bb:39:94:d9:3f:28:83:6e:d1:
2d:90:11:30:aa:91:65:cb:ee:f2:18:eb:e2:e5:80:7f:47:1d:
24:ad:06:6c:66:f1:0d:b8:e2:04:bf:79:b6:20:47:fb:6b:81:
43:ce:06:13:93:1a:3d:ae:d2:dd:f1:8b:ad:f4:6e:b1:39:f2:
39:af:79:53:73:e4:30:34:5c:fa:9f:4a:a8:9e:2f:78:65:7b:
8d:18:81:98:89:f3:25:0a:1b:bb:8e:dd:99:d5:80:f9:42:05:
26:d2:69:84:b0:b4:2b:67:b3:aa:d7:e7:ae:b9:4f:eb:00:f9:
b9:14:d0:b9:b8:31:c1:07:79:4f:88:18:ee:32:06:ed:0d:21:
f5:63:36:5a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHEFTOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDEw
MTA3NTUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGYwOWNiN2NlMzAy
NDM2YjhkODVmMjhlZWMwNzFhM2M2NTExNTAxNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI+dXj9W55+frOReV/UpXUTGSEK3d6nbXhLHaqeZNiz+ccuO
5GWxUbEmW5cySe7w5yDJx1KLs3ljsJRF493V+Y4PqRwFvQouJ/s1gfpRWwbvB8oo
H3CyK7cWHxfjY5prUHb4LLE0Af63+fmFmaQTs4XZaVB5O5nip+mG+zS4+fFh67T0
HMUOffFVf6J7khuxCHEri3x2GSLRHuCDPeVQ6yfOfqXUjytTnDkN3o7Hj4q2Wjy/
8s9jgc2WHobEQrhBts/yIEhjO3XtJmlHkz/zTH221jkqm0irS24XzeFnWqUHw4i0
hf4g5W8YEhsDK937hAikIU/1iJRfCkQAaSDHhFcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSPCct84wJDa42F8o7sBxo8ZRFQFjAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L2p3bkxmT01DUTJ1TmhmS083QWNhUEdVUlVCWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRvzTANBgkqhkiG9w0BAQsFAAOC
AQEAeJDTOjQrqESdL7XWL8ZDE2i8D1zZgBJcXzNd17aFZW72w82BESmX/8GFluvu
LtTVUTSgH1z/OU05UbIiBAV9TJdTkeuExqe99hKQKQwYYhCQZDGCRDPDKMddw2Tg
oNIAku86THh2XEVkB28BkMrfwQlCi+uUuzmU2T8og27RLZARMKqRZcvu8hjr4uWA
f0cdJK0GbGbxDbjiBL95tiBH+2uBQ84GE5MaPa7S3fGLrfRusTnyOa95U3PkMDRc
+p9KqJ4veGV7jRiBmInzJQobu47dmdWA+UIFJtJphLC0K2ezqtfnrrlP6wD5uRTQ
ubgxwQd5T4gY7jIG7Q0h9WM2Wg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org