Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Zx9tDuLFop5lgmxY11NHP4jCtRg.roa
File: Zx9tDuLFop5lgmxY11NHP4jCtRg.roa (raw, json)
Hash identifier: WUQOHLs2RcH+6fFzZxbUDfzQKhtajYx2KAlsDlwZeaM=
Subject key identifier: 67:1F:6D:0E:E2:C5:A2:9E:65:82:6C:58:D7:53:47:3F:88:C2:B5:18
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 3545AA5A
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Zx9tDuLFop5lgmxY11NHP4jCtRg.roa
Signing time: Sat 01 Jan 2022 06:59:50 +0000
ROA not before: Sat 01 Jan 2022 06:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200865
IP address blocks: 212.126.96.0/22 maxlen: 22
212.126.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893758042 (0x3545aa5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 06:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=671f6d0ee2c5a29e65826c58d753473f88c2b518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:73:4a:90:9b:58:6c:fd:73:74:e7:89:a3:
4e:38:5f:6f:4c:af:ca:ef:24:88:fa:13:db:46:1d:
bf:c3:10:2f:ea:b3:dd:c7:d1:f0:fb:21:c8:8a:7d:
70:f7:a5:30:d1:ba:95:a6:fa:30:94:51:ca:59:50:
18:ed:47:1f:4d:3b:97:d7:eb:97:a0:66:7f:50:96:
f6:8a:eb:2e:b9:7c:55:a4:11:ca:c3:4b:73:b0:c9:
f1:1c:92:dc:17:35:15:f0:e8:dc:79:23:a2:6b:39:
62:3b:76:e5:2a:5b:d9:2a:32:38:53:87:b0:a1:b5:
19:93:ad:e7:8a:d5:2a:ea:2a:a0:1e:b9:cb:f4:7b:
61:bd:69:ff:8c:bb:db:64:a8:24:33:ea:8c:1c:8b:
11:e0:eb:ce:1d:94:ad:a1:2b:67:73:71:ce:29:35:
28:40:7d:ba:b6:94:a2:51:b3:1e:a0:19:a0:68:a1:
5a:8c:20:76:db:50:be:63:1b:fa:7f:0f:c5:dc:9e:
5f:9c:f2:0c:2d:98:3b:08:92:b9:72:aa:59:79:76:
7d:6e:cb:19:b9:3e:bc:d6:fa:fa:3c:ab:4b:92:5c:
f5:f5:85:95:88:e0:4b:75:45:e8:6e:9e:5a:fe:03:
50:f2:d0:d6:e3:95:89:42:d0:25:7f:a1:dd:2b:35:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:6D:0E:E2:C5:A2:9E:65:82:6C:58:D7:53:47:3F:88:C2:B5:18
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/Zx9tDuLFop5lgmxY11NHP4jCtRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0-212.126.100.255
Signature Algorithm: sha256WithRSAEncryption
82:31:4d:e7:16:b7:ba:f6:eb:78:44:49:0e:10:15:bf:72:2b:
db:cc:29:d8:7a:ce:38:2f:c2:85:65:1d:50:19:a0:19:1b:40:
e7:ec:aa:65:85:91:36:96:82:62:c2:2d:99:a9:0c:21:be:94:
86:9a:69:93:80:f9:ef:db:81:95:2e:0e:24:cd:98:30:36:35:
e7:8d:da:2d:8c:a8:ad:58:18:8c:58:31:a1:92:34:f6:f9:83:
fd:02:1e:53:0c:5a:00:f7:1c:8a:91:f1:52:0e:2e:64:ac:02:
e6:c9:f7:a0:8f:f0:02:f8:91:93:32:51:70:2e:b6:92:1f:90:
a3:1a:e1:37:f5:74:0e:78:2c:43:c9:88:d3:d0:fe:9d:a0:5f:
1b:e3:b7:92:24:1c:b3:5b:92:8f:29:7b:61:dd:7b:4c:18:c0:
51:b6:7c:6e:e0:6c:d8:b6:c0:a3:9c:79:53:96:ba:7a:73:89:
e9:b6:f6:8e:36:cd:f2:63:35:1b:74:ef:da:a0:f2:63:30:cc:
a7:c5:c5:d2:58:90:cc:a1:97:88:06:9b:5f:2d:6b:4a:cf:7b:
d9:cf:b8:b7:fb:28:54:12:b5:0e:13:8c:78:51:bc:9d:73:93:
ed:6b:52:ac:91:47:07:8f:1d:52:74:10:31:51:29:e4:95:f0:
c4:d5:7f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:12 2023 by rpki-client on console-ams.rpki-client.org