Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/L-Mk62ZhBlnDXTqAjXCatP2YfCI.roa
File: L-Mk62ZhBlnDXTqAjXCatP2YfCI.roa (raw, json)
Hash identifier: bD7aCCHA/1md7v0KPhd0gRbfaVe9NJ3akuOozfunYwY=
Subject key identifier: 2F:E3:24:EB:66:61:06:59:C3:5D:3A:80:8D:70:9A:B4:FD:98:7C:22
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 3543D69F
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/L-Mk62ZhBlnDXTqAjXCatP2YfCI.roa
Signing time: Sat 01 Jan 2022 06:59:49 +0000
ROA not before: Sat 01 Jan 2022 06:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
46.21.251.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.122.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893638303 (0x3543d69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 06:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fe324eb66610659c35d3a808d709ab4fd987c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:24:85:5b:96:89:df:7a:9d:28:d5:ed:77:
b6:0f:0b:b5:28:22:b6:1b:64:b1:5d:58:d2:82:ca:
74:ca:49:ce:06:c1:09:05:59:41:b3:21:e1:ad:91:
20:d7:5d:df:7f:5f:7a:7b:cf:67:8f:d5:af:cd:4e:
b2:7a:ef:f6:da:30:09:18:7f:31:83:c3:7f:81:d8:
06:2c:77:0d:12:0d:ab:b4:8f:5c:be:1a:37:f8:49:
d9:4d:03:ae:09:06:8a:54:f8:49:e1:61:83:53:6e:
dc:db:e9:2b:d7:6f:37:06:86:ea:ce:fa:d9:40:a4:
f1:16:7c:ea:ee:f5:67:81:e0:e1:1f:c2:39:fd:e0:
27:4e:0b:e4:1b:a7:ec:8c:b7:5f:0e:11:85:e3:2e:
34:c5:3e:6e:af:0b:7d:93:6e:05:5e:d8:8e:4b:91:
28:eb:6e:e6:02:a7:68:05:b0:ab:3b:5b:40:3e:ef:
c4:44:2c:9f:00:36:86:a0:69:35:6e:ba:fc:d6:0f:
51:b1:85:2d:ca:68:aa:50:79:1d:e8:46:c8:f5:be:
eb:9a:0c:19:1a:b9:07:1c:5b:cb:04:58:d7:bb:73:
5b:2a:e1:e9:aa:d0:a4:e1:5e:cd:00:89:82:19:e6:
c5:4b:23:07:c0:4e:df:a5:1a:b3:3d:0f:d1:94:d8:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:24:EB:66:61:06:59:C3:5D:3A:80:8D:70:9A:B4:FD:98:7C:22
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/L-Mk62ZhBlnDXTqAjXCatP2YfCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.96.0-212.126.98.255
212.126.100.0-212.126.102.255
212.126.104.0/21
212.126.113.0/24
212.126.116.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::/48
2a04:2dc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
7e:21:da:6e:75:ab:f2:93:8c:34:21:48:91:7b:5c:9a:92:e5:
65:09:9d:c6:ea:d7:17:83:a8:9e:61:bb:c2:f2:29:2b:22:de:
b9:81:84:bd:2f:24:c2:99:ec:2d:c1:7a:ca:76:9b:3e:7d:8c:
4f:75:61:a5:1d:44:25:a3:d1:36:c2:77:7b:44:b5:25:39:30:
87:fa:ea:fd:e1:c6:46:45:90:e1:bc:46:b4:0a:ce:2e:c0:ca:
25:d5:d4:8a:89:50:68:92:77:23:6c:99:9e:de:a1:44:da:98:
be:79:32:d8:15:d2:26:37:88:ac:3d:91:2b:90:cf:dc:8b:40:
79:21:74:16:f4:b5:5c:01:23:12:d3:31:42:de:63:da:46:f7:
ae:92:f8:48:f7:0d:0f:20:94:18:39:be:ea:ed:8d:cd:80:ab:
a2:fa:2a:3f:ef:e9:f8:09:43:89:ec:85:15:e8:f4:72:f5:be:
0c:3e:f9:c0:25:15:78:ec:02:c4:29:ae:0d:ed:ef:6d:d3:76:
64:46:a1:ef:65:55:e5:27:3d:2d:cd:95:95:58:d0:34:2d:44:
d0:b9:78:d3:4b:2a:eb:7c:45:79:92:1d:fd:c9:c2:0a:bf:72:
5a:ef:4c:1a:07:d9:37:71:cc:b3:cd:0a:fc:19:29:15:33:d7:
26:04:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:12 2023 by rpki-client on console-ams.rpki-client.org