Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/ePziCaF9FGUTy8IpZ29zWVQdxeU.roa
File: ePziCaF9FGUTy8IpZ29zWVQdxeU.roa (raw, json)
Hash identifier: ULWL32nN9i6dcZZG3QWJbTTEXpFpmZG4m4IrQaZtEpY=
Subject key identifier: 78:FC:E2:09:A1:7D:14:65:13:CB:C2:29:67:6F:73:59:54:1D:C5:E5
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 1C70CFF5
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/ePziCaF9FGUTy8IpZ29zWVQdxeU.roa
Signing time: Sat 01 Jan 2022 06:53:19 +0000
ROA not before: Sat 01 Jan 2022 06:53:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44870
IP address blocks: 212.107.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477155317 (0x1c70cff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 06:53:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78fce209a17d146513cbc229676f7359541dc5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:03:e8:78:c7:8c:40:21:a8:40:2b:66:b6:
c9:89:12:19:63:72:9f:31:ba:e0:c4:0a:d9:e0:c9:
14:58:aa:d5:07:b3:23:b8:bd:db:19:68:36:da:3d:
06:df:c8:e2:f8:78:9c:0d:17:f1:c9:ac:15:7f:ef:
c9:ad:af:d7:72:04:66:19:7f:79:2f:25:0c:c5:17:
73:1f:68:75:82:e8:c0:68:16:cb:ae:e2:94:d0:47:
21:34:f4:d1:07:62:45:11:84:24:fe:51:f6:7e:b6:
fe:dc:d1:bc:57:28:26:b6:d8:f8:87:0d:6d:2a:69:
1b:d0:9b:32:32:ce:48:b4:1c:c4:72:b6:08:d9:84:
76:a3:75:d3:f2:de:b0:2f:ba:77:72:34:2f:5a:27:
2f:3c:ae:21:f4:ed:f0:72:65:83:14:9a:fe:e4:50:
cb:52:9b:02:77:34:89:10:f1:93:b2:df:32:f2:7c:
c7:80:ab:87:b2:bb:98:a1:a0:f0:82:2f:8f:bc:58:
c8:3b:28:84:71:80:86:6e:23:15:ce:c0:01:d6:6b:
71:30:03:9f:4a:04:86:0e:71:ff:43:a5:6b:3f:91:
f3:85:48:62:d2:a1:f8:e7:ef:dd:f9:70:06:c6:04:
e7:06:99:13:b2:1c:8c:fa:1e:a6:5b:68:f3:4b:ee:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FC:E2:09:A1:7D:14:65:13:CB:C2:29:67:6F:73:59:54:1D:C5:E5
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/ePziCaF9FGUTy8IpZ29zWVQdxeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.240.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:d9:fb:e9:7c:a0:75:99:48:5d:d1:a5:25:64:8c:c7:6b:0a:
2a:4a:4c:b3:b4:92:b9:51:bc:4e:65:b3:fd:e1:e2:d6:9d:72:
5b:16:04:ca:37:00:08:04:fd:6e:6f:d0:25:73:7e:4b:8b:35:
16:05:18:bf:eb:74:e5:ac:cd:83:e2:74:36:ed:0c:d0:43:3d:
46:bd:43:27:8a:37:e2:b9:1b:3f:87:f5:cc:02:a7:28:9c:68:
44:b8:dc:8e:4e:f6:9a:6b:6f:9e:9c:95:5e:59:ae:67:80:4f:
0a:d9:e4:39:73:af:aa:51:46:d5:87:70:bd:2b:1b:a6:0f:0b:
6c:64:94:42:20:39:77:71:d7:9e:a9:ba:93:5d:50:a2:4a:ad:
7f:1a:0f:bd:d7:2f:56:64:54:17:86:a9:87:8b:07:b5:cd:36:
a4:32:a7:51:48:c9:7b:45:b3:36:7e:59:a0:6a:d9:37:b9:0d:
d3:6d:d7:a5:ca:a6:ba:79:06:c8:1b:6c:01:c7:28:f3:a7:e2:
78:3c:2a:1d:02:06:65:39:fe:48:29:f2:5f:3a:5d:6e:cf:85:
f5:ed:28:ae:2c:75:97:f2:64:df:ff:d3:18:a6:e5:46:7b:40:
67:92:96:c0:9a:d1:2c:8a:11:06:12:25:c2:cd:ba:12:c7:b3:
49:44:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:32 2024 by rpki-client on console-fra.rpki-client.org