Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/chSX8Abgp85yPB-9Rr4unS-FZm0.roa
File: chSX8Abgp85yPB-9Rr4unS-FZm0.roa (raw, json)
Hash identifier: 5inOUTil3oL9ERp1lvFgTo7OD6MWpyjuqXz8upjd08E=
Subject key identifier: 72:14:97:F0:06:E0:A7:CE:72:3C:1F:BD:46:BE:2E:9D:2F:85:66:6D
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 3556B158
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/chSX8Abgp85yPB-9Rr4unS-FZm0.roa
Signing time: Thu 06 Jan 2022 13:45:06 +0000
ROA not before: Thu 06 Jan 2022 13:45:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39216
IP address blocks: 212.126.98.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.96.0/22 maxlen: 22
212.126.96.0/21 maxlen: 21
212.126.96.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/24 maxlen: 24
212.126.104.0/21 maxlen: 21
212.126.104.0/23 maxlen: 23
212.126.103.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.100.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.108.0/23 maxlen: 23
212.126.107.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.124.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.123.0/24 maxlen: 24
212.126.122.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:1e::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894873944 (0x3556b158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 6 13:45:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=721497f006e0a7ce723c1fbd46be2e9d2f85666d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:76:94:ae:81:e5:79:54:ec:ea:87:bf:9e:
f3:43:85:92:97:42:18:99:fc:a5:9b:2c:3a:9e:b8:
75:f0:27:6e:0b:51:4f:c5:93:f8:eb:e0:82:58:9b:
f9:ad:3b:68:da:07:9b:66:a2:45:a5:a3:31:97:fd:
49:05:e7:f8:58:3e:66:6c:81:ab:1f:41:a3:ec:06:
5d:fe:f1:51:c5:bd:85:84:4c:d2:bb:db:a8:29:a1:
49:a2:32:8c:46:14:d5:5b:22:fa:d7:7e:b3:f1:d6:
58:1a:0c:1c:d7:b1:f4:27:3e:02:7b:c0:16:09:67:
f3:4d:d3:f8:07:4d:d7:ce:e8:ea:3f:d2:a5:61:af:
42:39:a4:4f:8b:b6:9a:e7:18:38:c6:a6:94:da:19:
3c:c1:dd:0f:30:c9:a9:32:fe:5d:cb:d1:6f:49:9a:
65:c7:c9:7f:a5:33:02:2d:6e:85:90:ce:8d:88:3a:
d6:21:17:54:31:ab:57:4f:95:21:2c:8f:e1:d5:12:
e6:c5:84:6e:92:af:85:ca:08:d7:81:1e:23:89:22:
0d:84:b1:c5:e4:43:12:07:36:41:b6:8d:8f:ea:69:
43:a1:9b:e5:78:5e:5f:0c:db:7f:9f:ef:de:eb:7a:
49:a3:ef:11:17:53:3e:43:85:dc:05:bc:a8:f8:43:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:14:97:F0:06:E0:A7:CE:72:3C:1F:BD:46:BE:2E:9D:2F:85:66:6D
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/chSX8Abgp85yPB-9Rr4unS-FZm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.96.0/20
212.126.117.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::/48
2a04:2dc0:19::/48
2a04:2dc0:1e::/48
Signature Algorithm: sha256WithRSAEncryption
86:30:c4:ec:47:71:a1:be:0a:76:47:c9:88:02:ac:e5:27:d9:
b3:8c:2d:ea:c8:ad:ca:ce:bd:cd:63:bf:78:d6:26:21:a6:76:
f6:6c:7e:bf:43:5e:1f:d1:30:0c:89:46:42:90:0a:46:c6:08:
bd:b3:42:30:48:52:24:ba:e5:86:7c:53:31:c3:97:8e:ff:65:
3a:e5:54:5e:c5:80:ca:c7:df:71:23:14:9c:1b:8d:52:c3:18:
7d:c6:a2:dd:49:b5:5a:c3:6a:10:81:dd:d8:b6:0d:b2:ae:6c:
7e:a2:24:fe:12:64:9e:b0:3f:c3:ed:2e:11:02:84:f6:8b:0d:
16:bc:71:55:4f:de:3b:ce:e5:a6:fb:a7:f3:1f:44:00:c2:5b:
fe:52:fe:f0:c9:a3:cd:ec:a2:85:10:77:89:13:f5:24:82:74:
6f:51:2c:15:67:38:52:0a:bb:7e:bd:8b:29:58:a3:5d:d5:b1:
54:65:7c:38:f7:b8:a5:3d:6b:da:f8:5b:24:a4:b1:5a:02:b7:
f6:1b:12:2d:ea:a6:b4:4e:6f:8f:76:79:e0:fc:85:4a:a3:e1:
67:b3:cd:b4:bd:24:27:88:1a:d1:85:f7:5f:d5:d6:3b:c2:9c:
5d:27:f4:06:10:10:b6:ac:19:3b:4f:cc:b0:91:a8:1d:b0:69:
0c:99:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:28 2023 by rpki-client on console-fra.rpki-client.org