Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vXZw_gG7Gc8CadSLgBBvM0ffJO8.roa
File: vXZw_gG7Gc8CadSLgBBvM0ffJO8.roa (raw, json)
Hash identifier: KxRAr79U+aRn9IfF8vbrv/J/cjBZPsOMId5TWJ8E2/8=
Subject key identifier: BD:76:70:FE:01:BB:19:CF:02:69:D4:8B:80:10:6F:33:47:DF:24:EF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CDA4B69
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vXZw_gG7Gc8CadSLgBBvM0ffJO8.roa
Signing time: Mon 21 Feb 2022 13:23:36 +0000
ROA not before: Mon 21 Feb 2022 13:23:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
195.178.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484068201 (0x1cda4b69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 21 13:23:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd7670fe01bb19cf0269d48b80106f3347df24ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:b3:3f:9d:01:1b:71:af:be:12:f5:e6:35:
a9:2e:14:43:0a:99:b1:da:80:d7:9e:32:c4:9b:5f:
a0:cb:cb:4f:d5:1a:9a:eb:de:ec:75:20:06:ad:e4:
b2:60:33:3e:f9:46:3f:a1:ce:04:6e:89:3e:15:99:
36:43:1e:a3:e5:b5:7b:94:97:59:39:ec:70:b7:d1:
32:f7:e2:d9:74:8a:57:aa:4a:03:2c:67:2a:29:f2:
a6:27:7d:71:47:3a:19:7e:b7:4b:06:18:72:b3:c0:
8b:ce:45:78:fb:19:24:3f:a1:34:ca:7f:11:4b:d6:
96:d8:d7:12:f4:9b:60:97:c6:6d:2d:00:5d:62:f8:
5f:dc:30:bc:7a:f4:19:ba:d8:8c:0d:b3:fe:c1:98:
a1:63:8c:7c:cc:e1:c6:1a:13:ea:3f:fb:68:ab:a1:
8a:35:cb:04:1e:7b:f0:10:20:ec:24:92:dc:1f:17:
4b:be:d5:8f:54:f4:09:d5:cb:cb:9e:7b:11:09:51:
3b:9a:6c:f8:47:10:ef:c2:51:e8:dd:95:aa:25:fb:
83:54:4f:21:f7:ce:aa:da:99:6c:23:7f:cb:7d:09:
1a:31:f2:eb:c7:8a:6d:d6:16:52:35:8d:ab:a0:af:
c9:ae:4f:03:36:19:91:a0:74:6e:52:fe:6c:dd:98:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:70:FE:01:BB:19:CF:02:69:D4:8B:80:10:6F:33:47:DF:24:EF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vXZw_gG7Gc8CadSLgBBvM0ffJO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.142.0/23
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:dc:31:9c:1c:ea:cf:ee:89:40:42:41:c0:f7:75:c5:53:02:
65:51:96:1f:7e:f7:94:65:9d:ba:cf:9c:d8:83:f7:1e:ea:4a:
72:7f:4e:29:65:46:bc:75:ca:fe:c1:7b:75:52:e6:38:f9:10:
fe:06:41:53:c5:64:01:14:e9:27:f9:4e:bb:ba:bd:9e:37:4b:
31:36:cb:11:23:7b:f0:34:f4:90:7c:2c:71:e7:bc:77:c7:4d:
4a:a2:07:f8:1c:be:b2:e6:6f:27:36:c9:d7:6f:47:32:97:31:
09:a4:30:58:3a:5e:91:e8:d5:9d:79:af:e3:16:15:0e:17:2f:
bd:10:3e:24:43:b7:64:70:45:cf:f5:82:9a:54:4d:10:4f:98:
e0:f5:fd:36:ba:bf:8e:cc:ff:d5:b4:0b:fb:7b:00:6b:dc:1e:
06:16:e5:ff:07:11:7a:13:5f:40:96:8c:70:be:ab:7f:9b:70:
3a:bc:90:58:bc:bc:ef:26:43:e6:78:55:71:36:4a:d9:89:4d:
5c:53:5d:55:71:7e:b1:63:3f:a0:c3:2b:be:90:cf:d8:5d:12:
52:54:c8:e0:b2:52:bc:a0:6c:e3:42:cb:11:6b:6f:13:ae:da:
f9:5f:3d:2f:71:c7:cc:eb:cb:32:3c:87:71:b1:34:cd:51:43:
08:9b:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org