Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/I2Ay7KOUqD0FrAE0i-sYmyeZ7l4.roa
File: I2Ay7KOUqD0FrAE0i-sYmyeZ7l4.roa (raw, json)
Hash identifier: fwj9R+5WGaEMUqUKgrLQa5CtkfsV8scbAgP17mOCwI4=
Subject key identifier: 23:60:32:EC:A3:94:A8:3D:05:AC:01:34:8B:EB:18:9B:27:99:EE:5E
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 07AB6E
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/I2Ay7KOUqD0FrAE0i-sYmyeZ7l4.roa
Signing time: Wed 26 Jan 2022 05:40:31 +0000
ROA not before: Wed 26 Jan 2022 05:40:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212661
IP address blocks: 212.146.160.0/22 maxlen: 22
212.146.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502638 (0x7ab6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Jan 26 05:40:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=236032eca394a83d05ac01348beb189b2799ee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:cd:4d:2a:ea:2c:ed:9e:68:2c:49:1f:22:
6e:a8:d2:57:2a:5b:54:61:9f:70:62:fb:e0:41:56:
a5:3d:45:81:b5:ce:af:f5:15:a6:a8:dc:b2:d1:31:
58:53:5a:ae:0c:04:ec:7e:b9:de:39:23:30:2e:cc:
03:d2:de:25:09:e5:37:04:76:ba:26:44:71:a9:b2:
c2:98:b4:8e:5d:fa:c6:6a:04:f0:c0:9a:fd:0a:73:
8a:ed:95:b0:1b:8a:61:fb:f0:29:3d:c1:85:87:93:
e0:90:16:25:75:cf:b6:35:ed:0b:5c:8a:3f:98:ec:
83:39:c6:2a:b5:c9:63:41:fa:52:e2:51:d7:ec:2a:
bb:66:2d:49:a5:f9:5e:ab:aa:70:ad:15:1b:10:fb:
d4:bf:b1:65:73:37:e8:f5:3c:b1:a7:5c:e1:ef:dd:
7a:e0:28:c3:c7:87:93:f4:a0:ea:7c:83:4c:83:a7:
ea:4d:6b:55:00:70:f0:99:36:c6:2b:b7:9a:2c:40:
77:08:f1:81:32:a4:3c:1a:e1:8a:7c:3f:6c:93:20:
36:b3:94:4e:b6:65:e2:50:e4:26:25:f6:76:dc:51:
27:44:2a:f5:b4:be:9d:91:64:ea:8e:08:02:84:52:
d3:56:b0:a8:3f:c9:ea:e9:e9:66:1f:cc:06:48:f4:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:60:32:EC:A3:94:A8:3D:05:AC:01:34:8B:EB:18:9B:27:99:EE:5E
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/I2Ay7KOUqD0FrAE0i-sYmyeZ7l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.146.160.0/22
212.146.172.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7d:4f:6c:50:d9:dc:63:13:26:c4:a7:e6:9a:fc:53:b3:cb:
22:ad:46:18:04:99:e3:f4:18:fe:06:44:d8:36:c8:4a:4c:a5:
a7:66:b6:d6:7a:f3:ed:a7:a6:2f:85:7d:6d:07:65:8a:60:f1:
e1:5a:4e:fb:f8:9e:48:38:bf:ea:a1:4c:11:df:fc:66:17:1f:
af:26:c8:31:09:a3:16:9b:48:a7:3e:11:fa:99:ae:66:2a:da:
b0:dd:08:6f:dd:59:80:09:74:27:0a:23:09:19:9a:10:24:ff:
b5:cf:2c:d3:a4:27:22:37:1a:15:02:5b:5e:10:e9:46:9e:8f:
21:4a:04:ed:05:28:16:ce:50:18:51:e9:bb:b1:88:5a:0e:57:
bd:dd:9a:4c:0d:8a:49:be:21:65:af:86:e0:a1:13:00:8b:5f:
0a:7f:f6:ae:1b:d8:3d:10:a6:77:da:e4:f2:e4:21:ff:77:94:
ab:cb:79:aa:6b:e0:f2:4e:f2:37:89:10:9c:83:bd:9c:3f:63:
26:4d:35:98:65:7e:19:47:cc:cf:55:12:19:4a:2e:c4:a7:51:
b5:1d:2d:79:88:ed:30:4d:2e:3f:e6:6f:f7:25:d7:3a:04:fd:
68:67:bc:7c:f7:28:63:ba:10:0a:e6:6f:bf:5e:7c:ea:55:28:
24:7f:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:15 2024 by rpki-client on console-fra.rpki-client.org