Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/innjxjrA7GZTub-bONSeLOu61pQ.roa
File: innjxjrA7GZTub-bONSeLOu61pQ.roa (raw, json)
Hash identifier: tF9jwDgztQVrc1qjBPaXw6T55LQa57nZ+vJWIwKhdYw=
Subject key identifier: 8A:79:E3:C6:3A:C0:EC:66:53:B9:BF:9B:38:D4:9E:2C:EB:BA:D6:94
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 39543D70
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/innjxjrA7GZTub-bONSeLOu61pQ.roa
Signing time: Thu 10 Feb 2022 09:01:10 +0000
ROA not before: Thu 10 Feb 2022 09:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60458
IP address blocks: 212.80.21.0/24 maxlen: 24
212.80.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961822064 (0x39543d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 10 09:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a79e3c63ac0ec6653b9bf9b38d49e2cebbad694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:52:44:ea:db:68:6d:db:be:ea:fe:2e:a3:
b1:88:3a:6d:d9:86:72:56:5d:8f:1a:b7:e9:08:d5:
41:41:ef:41:99:8e:ae:ad:a0:0a:41:7e:74:d7:8f:
56:51:56:05:85:af:9d:62:8b:95:4a:92:48:85:58:
23:e8:fe:d2:05:38:34:af:c7:21:f5:ea:04:e9:95:
d8:9d:d8:76:51:f1:28:8f:ac:b3:26:6d:91:93:f6:
c3:b6:f7:3b:c2:03:35:78:de:e0:24:77:06:0b:54:
6d:f0:3f:6b:94:7b:56:9f:08:d1:e5:98:43:b9:05:
87:6e:6f:77:1c:be:52:11:bd:ef:1c:0b:1d:da:69:
b3:9d:c5:35:ca:eb:c6:58:34:89:77:87:71:5d:0d:
00:1e:eb:d1:28:3a:c7:72:12:69:8b:b7:f9:85:d6:
55:7f:f9:5c:b2:47:c7:65:98:a5:f4:cf:fc:74:3e:
65:8a:d4:5b:7b:4a:47:a7:89:aa:bf:3f:c9:1c:21:
95:c8:57:e5:05:e6:eb:9f:0e:a2:18:a7:f2:60:63:
c3:9a:7f:4a:da:0a:95:8c:1d:e0:18:db:f5:5a:8d:
b0:d7:1a:5d:24:e5:66:b1:bd:07:fd:94:ca:d7:ff:
ac:4b:11:47:42:d6:45:ce:0d:be:be:5a:18:ca:86:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:E3:C6:3A:C0:EC:66:53:B9:BF:9B:38:D4:9E:2C:EB:BA:D6:94
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/innjxjrA7GZTub-bONSeLOu61pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.20.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:8b:1f:94:e7:2a:7a:d7:89:58:63:09:f6:f9:88:6c:6a:0e:
d9:da:1a:af:85:ac:0d:90:85:60:4e:7e:e8:da:0c:58:c7:e9:
ee:ee:1c:2f:0d:a1:7c:9b:4c:92:49:94:23:c2:9a:d8:f9:d9:
f2:af:f1:22:3b:bf:52:60:41:81:60:fd:29:9c:6b:46:cd:04:
9d:e3:be:d4:65:d6:1f:57:d9:9b:6e:5c:48:e6:f7:fe:11:e9:
4c:33:fb:cd:9d:83:90:f7:28:0d:90:5b:3f:1c:82:3b:a9:a5:
fe:75:41:28:34:ac:1f:30:cb:e1:bb:de:b0:fb:80:aa:cd:7a:
73:87:17:0e:5d:50:d8:74:ca:4c:9e:61:de:a6:e9:17:de:42:
51:bd:a8:e5:8b:51:e1:91:98:ca:2a:54:f1:a6:b8:75:fd:6f:
52:5b:fe:ad:cd:39:f6:ac:10:fc:82:09:62:74:64:84:6b:c3:
5c:70:cd:f2:e0:e9:1f:c8:1d:f2:b5:5c:d3:36:bf:97:55:c4:
bb:53:c7:f2:da:7d:31:a5:d2:16:18:d6:76:ed:14:1a:ca:a5:
de:f8:0c:03:c5:5b:d8:a9:4c:7c:17:4f:3e:67:86:01:a8:94:
41:84:15:37:02:dd:5e:76:07:be:9c:50:1b:8b:46:48:9d:96:
c9:dd:15:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org