Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gNsrnhOOifRliX2YAaAqxNO_NTE.roa
File: gNsrnhOOifRliX2YAaAqxNO_NTE.roa (raw, json)
Hash identifier: 8kTJs7TYNBG1JTWiKPSD1mpQ9Dqotwz1CDrg448+e+Q=
Subject key identifier: 80:DB:2B:9E:13:8E:89:F4:65:89:7D:98:01:A0:2A:C4:D3:BF:35:31
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1AA6192D
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gNsrnhOOifRliX2YAaAqxNO_NTE.roa
Signing time: Sat 01 Jan 2022 16:02:59 +0000
ROA not before: Sat 01 Jan 2022 16:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5458
IP address blocks: 212.252.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447093037 (0x1aa6192d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80db2b9e138e89f465897d9801a02ac4d3bf3531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:7d:b8:fa:fd:aa:82:ff:93:e7:68:f3:49:
49:a4:a0:f8:cd:68:28:ce:2a:98:2f:64:96:6f:fd:
2d:1f:a7:2c:bd:ac:de:b1:4d:c1:24:f8:e7:65:d4:
c8:b2:00:b4:b7:e0:2d:de:e3:78:6e:01:8a:06:65:
1e:de:15:a4:17:b0:75:22:e3:76:f6:c8:9c:48:e3:
69:20:24:ad:6d:c7:a0:f2:92:ed:f2:3e:ce:85:a4:
0c:5f:47:21:70:58:fd:d9:fb:cf:f2:37:0c:16:b6:
ea:87:1c:58:ce:c1:39:bb:ec:51:c0:43:21:ff:bf:
f4:9b:47:9a:5d:6c:34:28:fc:b5:fb:91:c5:0b:a2:
23:8c:f7:b9:8b:eb:ea:bf:a0:62:f9:cf:64:cf:c9:
1b:37:91:d6:3e:52:33:3b:18:c1:6d:f1:a5:e8:41:
d4:30:70:13:5b:43:b1:70:bf:76:8c:f7:34:16:83:
5e:b4:20:e8:ca:d2:09:b1:2e:30:4e:c3:dc:fa:fd:
39:01:e0:1f:b4:f1:66:9c:15:39:1e:6c:03:36:8c:
35:9b:63:3c:9d:b9:6d:12:3f:ad:71:05:50:98:c7:
04:ca:ec:e6:6f:53:b8:af:c2:e8:07:64:6e:65:ec:
ce:6f:7e:88:9a:ea:53:40:31:38:d6:b6:a8:3d:ab:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DB:2B:9E:13:8E:89:F4:65:89:7D:98:01:A0:2A:C4:D3:BF:35:31
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gNsrnhOOifRliX2YAaAqxNO_NTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.33.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b9:3b:07:e1:37:56:4a:56:23:e6:8f:bb:42:ea:5a:09:38:
97:c1:5d:72:d1:a5:1a:ad:12:d1:d2:37:5d:eb:1a:b5:5e:a3:
8a:b0:b3:f9:65:ef:de:cf:18:01:13:06:fe:84:aa:4d:ba:78:
65:7a:67:b0:ec:ba:67:2e:7b:9f:b7:9e:54:8c:46:04:96:01:
39:37:6a:78:3c:e0:40:ee:c0:31:6a:3a:2f:fe:fd:d9:db:46:
cc:04:85:62:2d:9d:0d:54:ba:eb:de:ce:d4:62:40:a7:79:86:
dd:79:99:10:fd:c1:d4:6e:98:37:4f:46:e0:b6:6a:20:1d:ee:
53:44:c5:be:4f:f2:89:37:b1:61:11:62:5f:47:b1:be:30:56:
00:33:22:53:3b:25:3f:93:f6:1d:f8:1a:e3:d2:e7:48:8d:3f:
68:55:c9:83:46:84:0f:aa:c0:5b:08:d7:92:26:02:54:65:62:
41:b2:21:99:8c:45:e5:7c:8c:96:37:df:fc:38:78:59:ef:5b:
6f:40:cf:3b:1d:98:8d:1a:24:8d:da:82:db:7c:59:9f:13:da:
c7:71:34:43:33:45:89:ce:ca:79:b1:12:70:aa:14:78:f9:a0:
f3:f6:ca:b8:93:9c:8f:e1:75:01:75:c9:63:76:1c:9b:30:32:
a0:e8:70:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org