Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AzYZvIwIuqDRY7tH8bE1RbMR9VE.roa
File: AzYZvIwIuqDRY7tH8bE1RbMR9VE.roa (raw, json)
Hash identifier: uW+ITsZoAiAHZ0ifc843YB9xBNOlz5AYpdhaxI1kXtQ=
Subject key identifier: 03:36:19:BC:8C:08:BA:A0:D1:63:BB:47:F1:B1:35:45:B3:11:F5:51
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1ABCB0D6
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AzYZvIwIuqDRY7tH8bE1RbMR9VE.roa
Signing time: Sat 01 Jan 2022 16:03:10 +0000
ROA not before: Sat 01 Jan 2022 16:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199333
IP address blocks: 212.252.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448573654 (0x1abcb0d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=033619bc8c08baa0d163bb47f1b13545b311f551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:8c:bf:51:62:b1:76:bd:3a:8b:3d:d1:eb:
8a:db:40:e9:c1:d6:1c:b5:e0:01:57:5e:35:6e:81:
a5:7f:34:ce:45:8f:b2:01:d5:e3:de:a1:61:ec:20:
56:ec:da:8a:4b:64:3d:e9:3c:3e:76:c1:9c:ee:02:
68:af:fa:a9:c7:ab:1d:74:5f:1a:00:69:a5:4f:f0:
33:a4:74:fd:f2:9c:64:1a:6d:b4:e7:2c:b1:47:23:
2f:df:4b:c9:14:9d:13:d7:a0:46:ca:db:ae:77:de:
58:5c:54:5f:4a:81:ce:df:74:65:83:26:d2:b0:89:
0a:fc:8c:1c:25:f5:ad:67:ed:40:cb:b3:e6:82:15:
61:e0:d2:a6:e5:46:06:9c:64:70:59:9c:87:79:f8:
ed:5a:28:c7:a0:21:28:3f:46:f1:fc:b6:96:71:15:
82:ef:2e:3d:7d:65:8d:51:f3:6a:fd:7a:2c:36:b1:
18:d7:47:d7:03:ab:3e:95:3d:15:c9:8a:81:86:ec:
c6:32:be:d1:c2:11:08:64:45:fc:bd:98:63:bc:eb:
37:84:29:97:fa:07:81:5a:7b:d8:84:40:27:5e:28:
f4:87:48:28:04:9a:f4:55:15:8e:db:01:f4:7c:c5:
8e:d0:56:9e:a5:11:97:3b:46:43:08:be:0e:33:68:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:19:BC:8C:08:BA:A0:D1:63:BB:47:F1:B1:35:45:B3:11:F5:51
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/AzYZvIwIuqDRY7tH8bE1RbMR9VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.124.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c6:c2:e7:54:50:3e:0f:02:0f:7a:97:bc:dc:7c:a8:54:55:
a8:7b:6c:5b:dd:c9:95:1e:c5:f4:53:76:33:0b:4f:16:0c:ac:
4d:33:bc:54:e0:69:df:eb:89:77:72:8a:c7:ce:dd:c2:3a:1e:
2f:f3:8f:c2:03:42:bb:5f:3b:90:de:f8:d9:f7:1d:65:77:96:
26:e6:50:4d:a1:c8:3c:75:f2:41:d1:ba:58:47:6d:51:34:68:
99:4b:71:21:33:c7:ba:74:bd:1d:c1:db:7b:9f:c8:9f:8c:08:
22:48:5f:6f:bb:8d:d7:38:ea:dc:a2:89:82:f1:ae:fe:ac:f3:
cf:f8:56:c1:81:ad:9d:84:fd:08:88:6f:a3:ba:74:6c:e2:65:
da:04:c0:a9:0c:6e:65:a6:4f:25:8f:00:ea:8c:79:a4:db:7f:
bc:70:37:d4:f5:58:3f:f8:f1:ce:47:52:3f:72:b3:94:9b:40:
67:48:63:09:b7:49:df:c8:1a:8c:03:c7:e9:5b:b0:dc:91:9c:
96:7a:46:76:26:fe:dd:47:b7:ff:1f:93:45:0b:23:f5:bd:12:
15:dc:3e:4f:ba:81:1b:93:ad:66:af:83:77:3b:f4:ae:22:09:
7b:f9:b8:f9:ae:2d:da:53:47:af:4b:af:6b:36:e5:0e:36:a2:
68:b3:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org