Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/sxBh3e-2NIoA8XDjvi15d5EmU5c.roa
File: sxBh3e-2NIoA8XDjvi15d5EmU5c.roa (raw, json)
Hash identifier: D8qc3K74UEcitrCuH5xc4WxrnoNmIUnO9JeKvWGxJ8I=
Subject key identifier: B3:10:61:DD:EF:B6:34:8A:00:F1:70:E3:BE:2D:79:77:91:26:53:97
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 06700008
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/sxBh3e-2NIoA8XDjvi15d5EmU5c.roa
Signing time: Sat 01 Jan 2022 06:03:35 +0000
ROA not before: Sat 01 Jan 2022 06:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12735
IP address blocks: 212.102.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108003336 (0x6700008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jan 1 06:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b31061ddefb6348a00f170e3be2d797791265397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:5e:0d:9d:f9:1e:23:6d:45:ee:2e:80:c2:
db:72:fa:bf:9f:9d:1f:61:1a:29:05:9a:2d:98:e8:
2a:30:98:e2:5c:e0:ef:e9:70:0f:bf:bb:84:10:5e:
65:96:2d:52:5d:62:2f:da:43:f8:8e:24:1c:68:cc:
86:20:0b:c6:c2:cf:a2:63:04:8e:b2:5a:be:2c:5c:
28:81:29:cf:ea:40:73:e6:b6:5c:d6:ce:96:ba:2b:
5b:2f:40:b6:08:f9:87:f5:e8:96:73:40:90:12:71:
cd:f4:bb:35:d7:29:6e:1d:c9:23:00:5f:2c:8b:24:
f7:72:f7:25:70:ed:ea:16:41:9d:2e:ce:fb:20:29:
54:0c:04:26:a9:77:42:8e:a4:48:38:57:35:9b:66:
fe:8e:3b:d8:ee:9e:4a:d2:53:0b:c9:b1:25:44:ab:
4b:6a:43:f7:1b:7d:d5:e3:61:1d:cf:3b:ab:73:24:
7b:66:98:77:ba:65:b1:65:01:39:95:ac:c6:26:68:
f4:80:a6:3e:4f:c3:16:ea:e8:a6:13:9d:33:d9:86:
32:4e:8a:6d:b8:59:aa:6b:d7:43:fb:d2:b4:3e:92:
d6:2f:82:7c:14:70:80:7f:d1:71:98:38:ab:26:8c:
ea:32:d1:5f:f9:f1:dc:d4:51:d4:d0:2f:7a:cf:4c:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:10:61:DD:EF:B6:34:8A:00:F1:70:E3:BE:2D:79:77:91:26:53:97
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/sxBh3e-2NIoA8XDjvi15d5EmU5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a0:49:0a:9a:fd:2a:c2:c1:bc:91:c9:e6:09:7d:66:0f:4c:
ad:f8:a2:ef:b2:b2:77:38:b7:77:33:d6:76:e3:1b:3b:b4:cd:
11:97:f5:27:c4:b0:87:e1:17:27:bf:b0:47:9b:c2:84:38:d4:
a3:70:bf:31:29:af:b6:7b:b2:1b:a9:66:f7:58:b9:73:45:76:
b6:ef:bd:15:73:43:e4:7d:6d:f0:67:1d:b2:14:cf:29:60:3a:
c2:c5:c3:30:f5:e9:b1:f2:5d:7a:68:72:6c:5b:01:9e:d1:dd:
d3:2a:f0:90:68:18:ac:1b:4a:66:4e:69:7f:c3:fa:dd:fb:58:
17:e2:fc:99:3e:12:1b:0d:41:4a:5c:6c:68:44:c1:f2:09:f1:
a2:62:8b:90:b4:b6:f4:9c:f7:17:20:27:de:cf:3f:19:a1:16:
33:32:58:47:08:5e:31:93:f5:d9:27:46:24:16:a4:bd:47:fb:
c8:3e:53:3c:0f:db:fb:38:f3:24:65:33:35:e9:87:2d:44:be:
40:2f:f9:68:0c:ed:7a:53:4d:f8:b9:d3:9a:75:c2:18:f7:eb:
4c:2a:f1:06:d9:1b:dc:d8:bb:1a:ed:40:51:10:51:1f:a5:2d:
87:00:1a:9e:34:48:03:54:8d:b7:3d:22:57:e8:f1:a2:b9:e0:
e7:be:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:47 2023 by rpki-client on console-ams.rpki-client.org