Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xXd_CSzhmBvvinrzW8PFPhrTDu0.roa
File: xXd_CSzhmBvvinrzW8PFPhrTDu0.roa (raw, json)
Hash identifier: HRqFuyKjHpZRD1nZW/wGC9Qld/UToWL4cDbXkLRgCEA=
Subject key identifier: C5:77:7F:09:2C:E1:98:1B:EF:8A:7A:F3:5B:C3:C5:3E:1A:D3:0E:ED
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D482C61
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xXd_CSzhmBvvinrzW8PFPhrTDu0.roa
Signing time: Sun 27 Mar 2022 18:58:21 +0000
ROA not before: Sun 27 Mar 2022 18:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491269217 (0x1d482c61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 27 18:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5777f092ce1981bef8a7af35bc3c53e1ad30eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:76:00:37:fa:a7:fb:e1:95:1b:a8:6e:72:
0b:5f:61:3e:93:81:5e:22:61:f1:d0:12:5d:91:73:
88:6e:a1:5c:cc:e2:eb:86:35:73:e9:af:c3:92:f7:
3a:8e:65:31:07:ec:c2:9a:cb:d5:16:52:1f:ba:1d:
e7:1f:73:ef:fc:cf:83:83:c6:73:d7:8a:5b:e1:98:
43:d0:bb:e4:ba:d1:ad:10:bf:51:c5:be:11:96:2b:
ec:1d:4c:2b:01:24:63:5e:ac:1e:65:bf:c7:c0:c8:
d2:21:d6:22:f2:a2:94:39:91:b9:29:da:80:9c:3c:
1f:18:ce:a4:a2:d0:99:7f:57:64:4d:ee:a9:c6:b0:
02:fe:59:ce:6b:54:9d:23:fc:ba:6b:3c:6b:d6:0a:
ec:b5:ea:e8:4e:f3:c4:00:14:6c:a2:47:3c:60:47:
9b:bc:cf:19:e5:33:57:08:87:08:7c:91:c2:34:0d:
9e:1d:3f:de:14:15:cf:03:d6:3b:2a:5d:8c:51:ab:
28:04:5b:8d:90:64:be:54:4c:66:c9:4b:23:5e:46:
1b:35:92:c6:72:fa:fa:54:58:9a:3a:78:7a:88:e4:
52:ff:9a:bf:d6:c9:f6:5e:18:6d:9f:10:df:9a:23:
97:e2:3a:50:c2:55:65:0a:48:31:3d:5e:15:a6:06:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:7F:09:2C:E1:98:1B:EF:8A:7A:F3:5B:C3:C5:3E:1A:D3:0E:ED
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xXd_CSzhmBvvinrzW8PFPhrTDu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e5:e1:07:75:d8:a6:51:aa:22:7f:37:33:e5:33:56:14:0c:
f7:ae:47:8e:be:81:fb:d7:b5:66:24:ae:3d:8c:e1:19:83:c7:
3b:f2:67:d6:96:bb:62:6f:d2:5e:41:11:64:bb:0d:70:e7:15:
1e:7f:d7:0d:e9:ce:fb:6e:f2:17:0e:83:7d:6d:e2:f7:3b:3b:
bf:c0:a2:36:b9:98:63:b7:b7:ac:e8:79:6f:1c:82:0f:97:c0:
30:c0:6b:75:75:69:1e:41:2a:b0:06:60:fa:a6:ac:12:ae:44:
3d:7d:5d:0f:ca:c8:2f:45:43:66:dc:2e:9f:9c:41:f8:ad:4b:
a6:94:86:68:d5:6c:57:30:80:4a:28:64:31:aa:7d:b9:44:f7:
1a:ae:9d:72:80:f7:20:20:ad:3c:96:cc:97:ee:f3:2d:3b:30:
13:9b:af:4c:74:38:69:a7:45:84:d3:09:ac:72:22:c6:42:50:
68:a3:f5:88:28:f3:6e:8e:f4:f7:77:61:82:a7:7d:c1:54:2d:
89:1c:95:7c:91:06:91:3b:30:ba:51:e6:00:48:b9:dd:f1:2a:
ca:a6:e0:2c:ca:dc:2f:72:ff:0e:cf:e7:ff:f1:e1:25:8e:14:
ad:bd:ae:56:cc:e5:04:8c:f4:ba:c2:ee:d4:6e:e7:7e:0f:f9:
af:24:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org