Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/JOb1--TKG2AMDmmCdRcnQuNMsI0.roa
File: JOb1--TKG2AMDmmCdRcnQuNMsI0.roa (raw, json)
Hash identifier: Hj0+piX0WqE6soS7FcswgHgcgZdFA/Xm+64jcIaPVL8=
Subject key identifier: 24:E6:F5:FB:E4:CA:1B:60:0C:0E:69:82:75:17:27:42:E3:4C:B0:8D
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 38EF2819
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/JOb1--TKG2AMDmmCdRcnQuNMsI0.roa
Signing time: Sat 01 Jan 2022 12:56:55 +0000
ROA not before: Sat 01 Jan 2022 12:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51280
IP address blocks: 212.80.27.0/24 maxlen: 24
212.80.26.0/24 maxlen: 24
212.80.26.0/23 maxlen: 24
212.80.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955197465 (0x38ef2819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 12:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24e6f5fbe4ca1b600c0e698275172742e34cb08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ad:bf:6e:47:db:90:5d:1d:e5:e4:37:06:db:
d3:f9:1d:f7:d5:ef:63:c4:00:d1:a1:f6:eb:82:f7:
f3:76:c6:9d:f8:de:d0:74:d3:00:3e:ab:85:5a:87:
7d:6d:e3:73:7a:8f:2c:d7:13:a0:20:69:10:0c:3c:
d0:a9:cc:ae:5f:6b:44:85:e9:36:c0:f3:01:5d:5b:
a9:73:c2:47:72:47:32:09:20:c6:b0:c1:14:e9:5d:
ae:95:00:9f:ef:a9:a3:4c:6a:8e:b6:5c:23:6a:5f:
cc:74:db:43:30:b3:36:91:1c:73:0b:82:2c:3c:76:
14:f3:e9:db:86:72:e2:63:38:31:88:e1:9c:15:09:
98:da:cb:35:ba:e6:64:12:bd:4e:9c:ef:bd:61:17:
73:72:03:0f:46:92:8f:72:2c:6a:c1:c9:5d:8c:1f:
ff:7c:b5:38:2c:24:6c:e8:34:aa:b5:fc:7e:2d:74:
3f:28:ee:d3:00:61:49:f8:71:67:5d:77:64:30:e3:
7a:fb:16:8b:8a:18:2e:84:23:ff:b3:d6:af:85:6c:
98:ee:61:d2:58:a9:06:39:81:e2:fe:50:eb:3b:d0:
22:a2:f3:db:c0:5a:25:70:e4:62:66:0a:f2:f8:07:
38:3a:ca:0d:dc:4d:3f:db:d4:d1:34:01:6e:3f:ad:
e0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:F5:FB:E4:CA:1B:60:0C:0E:69:82:75:17:27:42:E3:4C:B0:8D
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/JOb1--TKG2AMDmmCdRcnQuNMsI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.25.0-212.80.27.255
Signature Algorithm: sha256WithRSAEncryption
b3:8b:67:00:cb:ac:5f:69:6f:25:1d:92:92:7e:99:98:90:45:
fc:73:55:da:89:76:b4:3f:66:6d:56:6e:b0:30:3e:c7:b2:02:
bc:2d:9a:86:e8:37:ae:73:f5:f5:29:8f:6b:a0:c7:50:8a:ea:
28:70:bf:3d:c6:b0:97:da:a5:fb:72:e8:16:05:ea:71:79:bf:
e3:f5:9a:ca:61:a2:d3:df:fe:40:6e:ea:43:3d:fa:ba:fc:a4:
ff:f5:05:a6:d7:d5:40:6f:35:88:0f:44:5a:5f:7e:9a:92:37:
65:01:1d:d3:a2:da:22:e3:89:0b:0c:3a:96:57:6f:d6:12:9c:
99:cf:3f:7b:65:2d:c2:c6:13:48:d6:23:a2:52:b5:18:cc:02:
7b:a5:7d:9c:f9:ec:ca:37:a2:90:ea:50:7f:84:ad:74:f7:38:
48:8c:ff:3a:75:c4:6c:eb:27:f1:36:be:9b:67:98:89:75:35:
86:60:9b:86:aa:8d:08:6f:0b:59:c6:31:39:0f:8e:24:2c:af:
1e:da:e5:0e:cd:a7:93:3b:36:47:50:da:51:ed:55:96:f4:2c:
2b:55:9c:f3:77:0d:d4:af:81:25:dc:e4:42:c6:fb:26:4c:42:
22:9e:73:fd:34:3f:ed:fe:26:a2:50:81:b9:31:ab:d2:27:b9:
8a:e3:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:58 2023 by rpki-client on console-fra.rpki-client.org