Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/42hjQQJBysExhcztgELib9WH3Hw.roa
File: 42hjQQJBysExhcztgELib9WH3Hw.roa (raw, json)
Hash identifier: kootcdw7Xo18/JQ9Kq9VkYYCATXJehJD/CGgrwHUQ8o=
Subject key identifier: E3:68:63:41:02:41:CA:C1:31:85:CC:ED:80:42:E2:6F:D5:87:DC:7C
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 3546A347
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/42hjQQJBysExhcztgELib9WH3Hw.roa
Signing time: Sat 01 Jan 2022 06:59:50 +0000
ROA not before: Sat 01 Jan 2022 06:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205473
IP address blocks: 212.126.116.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893821767 (0x3546a347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 06:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e36863410241cac13185cced8042e26fd587dc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:45:1c:49:d5:d4:f9:d4:b5:95:f1:97:1a:
93:35:b8:e8:eb:a4:cc:f2:58:2a:52:90:56:2a:2c:
2a:cd:ee:7d:b5:1a:a1:07:3a:cd:81:54:ed:e5:0c:
36:c7:2e:66:f8:d3:cd:b1:38:d7:6d:0b:ba:ff:b1:
78:1b:30:45:9c:d8:8f:b9:27:4c:ad:cc:c0:d1:31:
ab:2a:23:4b:69:3f:88:3f:cd:77:cb:99:eb:7c:d8:
32:b4:18:d3:53:1a:23:23:98:7c:c3:4f:19:0a:7d:
5e:74:9f:c3:cd:4e:eb:7d:8c:eb:22:cd:ee:ef:aa:
ad:67:06:7c:59:21:84:7f:10:b7:15:62:1b:76:8e:
26:61:0b:6c:de:3f:00:66:c5:98:19:2a:07:cb:0f:
cd:0e:c3:22:df:88:f2:9d:2e:fb:37:e8:ac:c3:3e:
06:a0:cc:9a:37:6e:54:39:a1:9a:53:2b:be:40:87:
b3:d6:f6:2e:2a:67:b7:6d:9f:c7:6e:46:3e:72:e1:
79:b9:22:a4:5b:d5:c8:04:f8:2d:82:95:b8:c3:d7:
3b:42:eb:72:3b:fc:f0:84:bc:32:da:85:83:b0:76:
ac:bc:b3:0f:b3:c5:58:ff:10:d7:d5:1f:87:4b:d1:
df:25:4f:d6:28:a1:44:0c:ba:f6:ed:a2:41:63:45:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:68:63:41:02:41:CA:C1:31:85:CC:ED:80:42:E2:6F:D5:87:DC:7C
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/42hjQQJBysExhcztgELib9WH3Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.116.0/24
212.126.126.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:9e:49:a4:ba:c6:a6:84:16:58:d4:cd:bf:3c:a2:7b:11:e9:
34:7f:15:32:ca:d3:d9:2b:66:5b:0e:5b:61:f3:7a:3f:40:0a:
ea:ce:29:c4:18:c4:13:5a:12:42:19:24:b5:69:1e:3b:7c:ad:
72:98:fc:aa:4b:0b:33:6f:88:2b:b8:e7:c3:a3:48:2f:af:d3:
05:f4:b5:3e:fb:3c:b0:b9:49:9a:55:01:12:fe:60:88:0a:99:
60:b3:eb:07:68:67:2d:9c:64:e0:3e:70:8b:1f:d7:89:5f:04:
f6:ad:31:58:ee:41:43:55:6e:2a:c8:b2:67:2f:55:b2:50:5e:
97:2b:8f:b9:6c:72:48:8f:be:3b:5d:f7:93:ad:8e:83:3f:d9:
9b:73:ef:f5:a9:06:07:54:43:aa:c8:72:43:de:aa:bb:40:77:
04:fb:0d:f2:cc:39:fa:51:85:a8:2f:e1:f7:81:22:7b:d6:2d:
b2:40:17:39:97:cd:58:e6:19:1a:be:29:04:b6:12:96:e9:9a:
15:fc:ac:00:e1:c4:06:f1:03:e2:0f:d0:45:a1:c5:d0:f6:2a:
ed:65:d6:dd:f7:2b:b2:3f:09:dd:f6:85:80:73:47:74:ff:af:
7d:82:d7:67:5e:3f:06:03:bf:4d:e6:5d:e1:33:6d:a3:59:5c:
05:5e:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:28 2023 by rpki-client on console-fra.rpki-client.org