Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sKQ2eyBXnC_zsWiFg_edes3brHI.roa
File: sKQ2eyBXnC_zsWiFg_edes3brHI.roa (raw, json)
Hash identifier: 5XEYIqthZOaRM/WOzfH57l0kzbipj4i0SN4865UTtFc=
Subject key identifier: B0:A4:36:7B:20:57:9C:2F:F3:B1:68:85:83:F7:9D:7A:CD:DB:AC:72
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D16E1BC
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sKQ2eyBXnC_zsWiFg_edes3brHI.roa
Signing time: Wed 16 Mar 2022 09:20:16 +0000
ROA not before: Wed 16 Mar 2022 09:20:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488038844 (0x1d16e1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 16 09:20:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0a4367b20579c2ff3b1688583f79d7acddbac72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:62:27:7e:ad:17:2c:ce:ea:22:b5:65:31:
02:4c:24:37:87:a9:de:31:02:8f:c5:73:5b:64:57:
d3:b5:5e:2a:a4:18:4b:66:32:ff:d8:84:8e:77:af:
21:68:f5:bc:25:7d:d5:44:18:f6:06:d1:42:f1:ca:
32:a0:50:81:b8:2e:74:23:1b:a3:d7:0a:bb:00:45:
2b:e4:de:00:15:45:a3:c8:d5:9b:2e:74:91:ca:87:
ef:5f:0a:e0:fe:fa:6f:f0:4e:40:2d:f6:85:77:bd:
d4:df:fc:e5:a8:fb:f3:8f:a6:5b:3b:d2:5e:70:6f:
4e:1d:77:09:e1:a9:82:ac:42:ae:61:cd:e2:51:6c:
4c:0e:ac:3a:c7:05:ef:1c:0a:30:85:e9:a9:e3:0c:
2c:b1:76:ef:32:e2:84:3b:3b:b2:8f:46:e0:a2:1d:
5e:bc:c1:4d:a7:5c:cc:55:59:68:ae:84:d4:99:31:
8c:44:96:67:bc:1a:0c:21:7e:93:17:42:5e:79:bd:
19:e4:b9:13:8b:63:7b:c9:c9:67:2f:19:e7:12:c0:
c2:68:a6:b3:f9:52:05:68:0b:c4:1b:21:7a:bf:51:
ff:f9:e7:e5:a8:17:73:99:2e:45:40:36:c4:3d:b3:
de:2b:dd:7a:bd:67:8f:3f:f3:06:66:9e:f2:65:2b:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A4:36:7B:20:57:9C:2F:F3:B1:68:85:83:F7:9D:7A:CD:DB:AC:72
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sKQ2eyBXnC_zsWiFg_edes3brHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
45:50:6b:5e:7d:16:4a:90:99:fa:11:ff:49:01:0b:47:a0:75:
09:ab:79:7a:8c:24:59:3c:4a:97:1a:0c:e4:84:dc:74:04:dc:
47:cc:17:8b:dd:3d:bd:24:b7:47:46:bf:9b:25:a3:29:f4:2a:
5c:c1:74:61:24:68:bc:ce:f1:fa:f5:b7:d9:a7:ad:f6:dd:04:
f3:a9:b5:e8:de:b5:66:f5:a8:50:73:fe:b8:a7:c3:e9:db:af:
e4:e8:bb:75:ff:5c:33:bc:7b:0b:dd:f2:bb:7d:31:60:11:00:
dd:78:5c:af:04:ca:3c:02:c5:eb:1a:a3:7a:a5:2e:62:61:db:
e7:b1:ef:6b:de:f4:a0:4a:66:f0:94:e2:39:7b:fd:c1:02:c9:
e4:28:d6:83:2d:4d:2e:90:3f:b9:df:ce:12:72:e5:46:59:92:
e7:de:73:bc:2d:a9:4a:15:a9:9f:f7:26:68:aa:dd:6c:b1:04:
04:7a:38:0e:5f:f8:d2:04:3f:b2:79:57:cf:23:a6:6a:49:03:
f6:dc:dc:86:74:7b:14:a5:b1:ee:a7:ad:51:ed:31:ed:a1:79:
c6:72:8b:fd:be:e1:fb:33:8a:3a:7c:a8:10:af:6c:be:35:66:
3b:9b:00:0c:90:26:d8:97:21:73:e2:8f:12:a7:d6:8c:05:b3:
d4:b7:38:c6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHRbhvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDMx
NjA5MjAxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjBhNDM2N2IyMDU3
OWMyZmYzYjE2ODg1ODNmNzlkN2FjZGRiYWM3MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALiWYid+rRcszuoitWUxAkwkN4ep3jECj8VzW2RX07VeKqQY
S2Yy/9iEjnevIWj1vCV91UQY9gbRQvHKMqBQgbgudCMbo9cKuwBFK+TeABVFo8jV
my50kcqH718K4P76b/BOQC32hXe91N/85aj784+mWzvSXnBvTh13CeGpgqxCrmHN
4lFsTA6sOscF7xwKMIXpqeMMLLF27zLihDs7so9G4KIdXrzBTadczFVZaK6E1Jkx
jESWZ7waDCF+kxdCXnm9GeS5E4tje8nJZy8Z5xLAwmims/lSBWgLxBsher9R//nn
5agXc5kuRUA2xD2z3ivder1njz/zBmae8mUrYNUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSwpDZ7IFecL/OxaIWD9516zduscjAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L3NLUTJleUJYbkNfenNXaUZnX2VkZXMzYnJISS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRvyDANBgkqhkiG9w0BAQsFAAOC
AQEARVBrXn0WSpCZ+hH/SQELR6B1Cat5eowkWTxKlxoM5ITcdATcR8wXi909vSS3
R0a/myWjKfQqXMF0YSRovM7x+vW32aet9t0E86m16N61ZvWoUHP+uKfD6duv5Oi7
df9cM7x7C93yu30xYBEA3XhcrwTKPALF6xqjeqUuYmHb57Hva970oEpm8JTiOXv9
wQLJ5CjWgy1NLpA/ud/OEnLlRlmS595zvC2pShWpn/cmaKrdbLEEBHo4Dl/40gQ/
snlXzyOmakkD9tzchnR7FKWx7qetUe0x7aF5xnKL/b7h+zOKOnyoEK9svjVmO5sA
DJAm2Jchc+KPEqfWjAWz1Lc4xg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org