Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/z9fpSswVccX9TcIGvZygc_79Fq8.roa
File: z9fpSswVccX9TcIGvZygc_79Fq8.roa (raw, json)
Hash identifier: jXVD/gbLJlzN6aKoLsmY79WiTehjm6qvOd+P8BmZFp0=
Subject key identifier: CF:D7:E9:4A:CC:15:71:C5:FD:4D:C2:06:BD:9C:A0:73:FE:FD:16:AF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C3F35EB
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/z9fpSswVccX9TcIGvZygc_79Fq8.roa
Signing time: Sat 01 Jan 2022 07:55:38 +0000
ROA not before: Sat 01 Jan 2022 07:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199839
IP address blocks: 212.111.200.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473904619 (0x1c3f35eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfd7e94acc1571c5fd4dc206bd9ca073fefd16af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:81:7d:20:06:2e:f8:1d:13:91:66:35:f6:
68:5a:32:36:9b:3e:22:d7:98:e0:33:69:ba:e5:12:
4d:e4:10:39:e5:38:3e:f1:02:6d:7a:ce:da:5c:07:
ee:84:38:1f:d7:6e:a4:ea:e8:ce:0c:84:99:2f:40:
39:ed:fc:91:aa:6b:da:62:a6:57:bc:69:df:28:b0:
9f:40:9b:aa:11:e1:b9:4f:19:d7:b2:14:62:b3:4a:
e3:fe:31:b6:9e:f2:1b:95:ad:30:9c:c1:d5:0e:42:
81:29:cf:d3:30:75:16:2f:27:ff:7a:b2:44:14:17:
7f:88:33:6f:2b:02:f7:30:3f:04:09:11:44:00:c0:
58:47:f9:2d:26:d4:91:8a:0e:ce:08:2a:5b:40:98:
2d:29:89:10:ea:04:94:2b:7a:f5:00:97:19:12:0f:
11:1f:91:fa:f2:e3:cd:fa:c3:91:b1:65:c8:99:8e:
ba:75:19:01:87:a1:18:27:b9:3d:e9:17:85:96:58:
f5:b2:37:50:20:43:0e:8f:85:c5:f7:2d:83:47:23:
f8:76:4e:d3:c8:50:19:8b:cf:ba:80:7c:6a:2e:3d:
49:69:a4:01:fa:61:5e:11:4f:bd:a3:ef:e1:29:38:
9e:7f:e8:ae:ea:73:f3:4b:89:7f:1e:78:05:e0:80:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D7:E9:4A:CC:15:71:C5:FD:4D:C2:06:BD:9C:A0:73:FE:FD:16:AF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/z9fpSswVccX9TcIGvZygc_79Fq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.200.0/23
Signature Algorithm: sha256WithRSAEncryption
01:f3:0a:9f:da:e3:f4:9c:28:9b:3b:37:c2:0f:60:65:3e:89:
e8:0a:d9:b0:59:1b:e8:4d:79:a3:4a:90:30:60:27:fc:65:e2:
f0:40:16:3b:22:0e:f6:3e:a3:a3:92:e3:f8:1f:53:c3:04:fd:
8f:7e:7f:fc:d7:ed:e5:8e:3a:23:39:8d:ab:04:d3:f4:31:89:
c6:98:dc:17:07:19:99:e0:b5:5d:ca:4d:eb:70:0a:f2:5f:69:
c6:de:e7:cf:c8:eb:13:b9:78:6e:ae:4f:41:82:be:05:a3:4a:
4f:b7:a9:e2:42:eb:44:be:06:37:10:c7:ef:cd:46:90:4d:85:
7d:70:86:85:9c:1f:c6:f9:7e:a2:fc:09:ad:20:e1:e2:1e:01:
6d:1e:71:8b:fe:d8:31:80:06:54:f1:43:f7:71:33:b5:a8:3d:
ef:79:af:5f:b1:bb:a7:ad:e9:87:bd:7d:d5:17:53:1c:81:7f:
3e:52:40:7e:f1:4f:c5:6a:11:71:63:1e:e7:59:8c:36:fa:80:
df:57:c0:7e:13:b2:08:a7:78:be:4b:58:c2:d0:16:6a:f0:9e:
13:3d:b6:f6:09:af:34:da:f4:40:b4:1a:3d:e2:4f:95:cb:b4:
c5:34:91:71:e0:39:f1:7f:40:50:22:49:fc:42:8e:10:07:5c:
40:c5:a9:0b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHD816zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDEw
MTA3NTUzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2ZkN2U5NGFjYzE1
NzFjNWZkNGRjMjA2YmQ5Y2EwNzNmZWZkMTZhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIcqgX0gBi74HRORZjX2aFoyNps+IteY4DNpuuUSTeQQOeU4
PvECbXrO2lwH7oQ4H9dupOrozgyEmS9AOe38kapr2mKmV7xp3yiwn0CbqhHhuU8Z
17IUYrNK4/4xtp7yG5WtMJzB1Q5CgSnP0zB1Fi8n/3qyRBQXf4gzbysC9zA/BAkR
RADAWEf5LSbUkYoOzggqW0CYLSmJEOoElCt69QCXGRIPER+R+vLjzfrDkbFlyJmO
unUZAYehGCe5PekXhZZY9bI3UCBDDo+Fxfctg0cj+HZO08hQGYvPuoB8ai49SWmk
AfphXhFPvaPv4Sk4nn/orupz80uJfx54BeCAKpkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTP1+lKzBVxxf1Nwga9nKBz/v0WrzAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L3o5ZnBTc3dWY2NYOVRjSUd2WnlnY183OUZxOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdRvyDANBgkqhkiG9w0BAQsFAAOC
AQEAAfMKn9rj9Jwomzs3wg9gZT6J6ArZsFkb6E15o0qQMGAn/GXi8EAWOyIO9j6j
o5Lj+B9TwwT9j35//Nft5Y46IzmNqwTT9DGJxpjcFwcZmeC1XcpN63AK8l9pxt7n
z8jrE7l4bq5PQYK+BaNKT7ep4kLrRL4GNxDH781GkE2FfXCGhZwfxvl+ovwJrSDh
4h4BbR5xi/7YMYAGVPFD93Eztag973mvX7G7p63ph7191RdTHIF/PlJAfvFPxWoR
cWMe51mMNvqA31fAfhOyCKd4vktYwtAWavCeEz229gmvNNr0QLQaPeJPlcu0xTSR
ceA58X9AUCJJ/EKOEAdcQMWpCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org