Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/fEy-ni9xGJBhnpSh-Xg-gzAPDkY.roa
File: fEy-ni9xGJBhnpSh-Xg-gzAPDkY.roa (raw, json)
Hash identifier: aCbwQXd3aFsWnyZkQmLjlVt4G9IEM46yGqaHvEPP9L4=
Subject key identifier: 7C:4C:BE:9E:2F:71:18:90:61:9E:94:A1:F9:78:3E:83:30:0F:0E:46
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0184136C2BD66A154E0FF571AF027C193F95
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/fEy-ni9xGJBhnpSh-Xg-gzAPDkY.roa
Signing time: Wed 26 Oct 2022 08:32:46 +0000
ROA not before: Wed 26 Oct 2022 08:32:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44966
IP address blocks: 212.16.71.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:6c:2b:d6:6a:15:4e:0f:f5:71:af:02:7c:19:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 26 08:32:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c4cbe9e2f711890619e94a1f9783e83300f0e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:a7:36:e4:1e:f7:8b:92:22:16:73:85:4e:
0e:30:be:47:2d:b8:c0:8c:8d:b5:5b:6f:f7:3d:a5:
a3:6e:ce:10:7c:c0:8b:42:86:c8:cb:88:47:0c:2e:
6e:01:9a:a4:dc:5b:22:7d:5b:fb:8b:9a:82:58:ba:
fe:d0:0c:64:32:10:ce:14:57:b5:38:37:d9:89:fc:
04:34:a8:e6:d5:0d:db:66:1c:99:17:ed:d2:11:04:
25:c9:7b:86:9e:b6:95:8e:e0:e6:96:8d:86:49:0a:
ab:aa:1d:ee:bf:7f:2e:fc:28:4f:36:92:94:e2:a3:
a4:bf:18:fb:28:38:57:b1:ab:e9:b7:83:72:3d:43:
fa:d2:d2:62:b5:46:04:12:10:34:e8:a3:24:33:99:
b7:21:6d:2e:be:0c:32:8a:42:e9:12:2d:08:75:30:
f5:62:47:79:3b:e7:d8:ae:ba:9f:e4:fb:2e:23:56:
4b:00:6a:1b:6d:f3:2e:06:4d:80:af:39:61:20:7b:
16:1f:99:58:53:e8:1d:2b:8c:f4:69:c7:5c:67:d5:
e6:f5:8a:58:cd:80:6c:f6:e3:0b:89:3a:71:eb:d2:
9e:eb:0f:cd:35:10:2c:b0:29:a4:f3:04:6d:5d:88:
b6:cc:2a:d7:90:68:8c:e2:cd:68:56:bf:b9:77:9c:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:BE:9E:2F:71:18:90:61:9E:94:A1:F9:78:3E:83:30:0F:0E:46
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/fEy-ni9xGJBhnpSh-Xg-gzAPDkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9a:59:fe:d3:5d:14:69:8f:a5:7a:96:84:43:ea:44:49:9a:
8c:93:89:be:2f:e3:d7:5d:c5:77:df:e5:c3:96:2a:0f:ff:22:
48:ee:0b:a2:56:9d:60:6d:fe:20:58:b0:1e:4a:5b:cd:46:b4:
1d:04:02:3b:a7:3f:c9:b2:c6:8c:3d:86:dc:ca:b2:df:54:c0:
49:ef:68:f3:0b:72:10:da:c3:fe:b5:58:14:1d:d8:8e:a4:1f:
58:86:08:f1:3c:c5:26:dc:35:ea:6a:72:57:33:2a:28:48:78:
9f:a9:de:46:a4:31:15:72:be:e1:d2:bf:ca:7c:30:d5:d3:2a:
71:75:04:9d:aa:db:67:f8:5a:a0:0a:11:0d:01:1a:c5:f8:5e:
b0:d4:24:24:e5:a3:c0:0d:0a:50:68:07:0b:b1:32:e1:99:16:
e4:03:b3:06:df:0f:91:c0:7c:a2:a7:f9:a9:04:8b:9a:2d:2e:
8a:90:bf:17:dd:da:27:44:11:d2:63:1b:50:22:c4:c2:a0:f3:
cc:33:a5:2f:d9:1e:57:eb:6f:61:81:e3:f7:e3:d3:6f:d9:1a:
c3:51:58:9f:b8:d0:2e:0c:5d:78:74:21:8f:90:f1:64:03:a3:
2b:3f:b9:4c:c2:b7:11:92:ae:e4:04:b3:69:48:be:bd:a1:50:
71:05:85:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org