Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eaf169-fd91-48f7-953b-7e69c7283de4/1/8ks4fqadjJ63uirgMkg6HDv6SmQ.roa
File: 8ks4fqadjJ63uirgMkg6HDv6SmQ.roa (raw, json)
Hash identifier: fdXIGJPgdElPJ8wMoz3fJq0wNI7eKZQzPGJL9+6D/ro=
Subject key identifier: F2:4B:38:7E:A6:9D:8C:9E:B7:BA:2A:E0:32:48:3A:1C:3B:FA:4A:64
Certificate issuer: /CN=09a8c234f2b0d6c9ca13e5411da29cf2c44f2891
Certificate serial: 79D6A5
Authority key identifier: 09:A8:C2:34:F2:B0:D6:C9:CA:13:E5:41:1D:A2:9C:F2:C4:4F:28:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CajCNPKw1snKE-VBHaKc8sRPKJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eaf169-fd91-48f7-953b-7e69c7283de4/1/8ks4fqadjJ63uirgMkg6HDv6SmQ.roa
Signing time: Sat 01 Jan 2022 01:55:19 +0000
ROA not before: Sat 01 Jan 2022 01:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.52.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7984805 (0x79d6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8c234f2b0d6c9ca13e5411da29cf2c44f2891
Validity
Not Before: Jan 1 01:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f24b387ea69d8c9eb7ba2ae032483a1c3bfa4a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:f4:6a:06:36:4e:53:4b:1e:db:37:1d:a6:
35:68:78:99:91:54:35:63:d2:93:6c:2b:ad:38:f5:
bf:dc:4c:fe:fd:53:28:48:2b:3e:50:93:bf:79:b3:
f5:09:25:a2:df:07:7c:39:b1:41:9e:96:d2:d4:16:
3d:e7:57:30:26:8e:1b:97:09:e8:87:fa:60:f3:e8:
b3:69:a6:08:ba:3d:a3:6c:45:31:66:4c:93:e3:27:
06:59:65:d5:aa:a9:f7:b9:f8:49:db:ea:3e:db:07:
6b:5d:d4:56:89:4c:e4:a7:d3:46:4a:a1:3f:f4:4f:
47:54:28:98:27:f8:e2:19:41:92:03:fa:d3:b6:bc:
a2:55:5a:ce:23:ef:c3:bf:d4:db:0a:b6:09:ae:95:
e7:b8:14:b8:2a:9d:36:65:22:c0:72:20:0c:71:8d:
67:ea:d6:7f:5e:4f:18:b3:3d:64:cb:09:81:5d:a4:
21:df:ce:cd:e8:09:c6:8e:57:a8:c9:4f:6b:c8:66:
4c:ff:7d:c0:fe:8a:93:2a:05:9b:a7:13:a5:ca:07:
61:60:53:fd:80:85:51:22:50:59:7c:00:db:f9:7f:
82:c4:fb:3a:c7:be:b8:34:86:e7:3d:d1:85:7d:4c:
36:f1:c0:d4:17:1e:8d:c4:e7:44:22:c9:be:db:05:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:38:7E:A6:9D:8C:9E:B7:BA:2A:E0:32:48:3A:1C:3B:FA:4A:64
X509v3 Authority Key Identifier:
keyid:09:A8:C2:34:F2:B0:D6:C9:CA:13:E5:41:1D:A2:9C:F2:C4:4F:28:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CajCNPKw1snKE-VBHaKc8sRPKJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eaf169-fd91-48f7-953b-7e69c7283de4/1/8ks4fqadjJ63uirgMkg6HDv6SmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eaf169-fd91-48f7-953b-7e69c7283de4/1/CajCNPKw1snKE-VBHaKc8sRPKJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ea:72:3a:93:82:f0:42:74:d2:0e:f6:e5:03:b3:92:7c:7c:
fa:e1:57:e2:85:7d:66:6c:30:2e:c0:e8:d6:4a:ad:62:86:b6:
4f:99:78:84:21:2d:bd:b9:9a:ad:7c:f8:06:f8:5f:1f:02:0c:
a1:8e:d4:9f:c1:4c:fc:21:40:e6:9c:6b:62:2c:f9:98:75:4c:
1b:db:50:b1:94:72:f9:d4:e0:1d:6d:ba:8a:14:bd:04:62:ca:
7c:ba:84:b3:6d:87:25:52:e2:bb:9a:c7:8f:6d:c1:4a:ab:fa:
8c:51:8a:e7:0e:bf:b1:c9:cf:be:df:89:2d:8c:ef:54:e5:c7:
b1:11:f0:9a:cb:e9:66:0a:4e:da:de:3a:a1:ee:d1:7b:ba:96:
ca:b6:6a:72:ef:a4:89:47:6c:8f:f8:fe:38:8c:d2:21:b7:3f:
5b:5c:56:6c:f0:b9:b9:2b:ee:6b:68:ba:b8:56:52:9c:12:51:
59:42:6e:f9:59:f5:37:33:3d:fd:e4:08:90:70:3a:82:e3:d0:
ac:df:0b:6d:a9:45:be:69:b2:39:e8:1f:6e:18:0f:65:38:3b:
4e:8c:03:77:b6:eb:21:a6:69:ad:35:e7:9e:e1:5a:73:a4:fd:
64:61:a0:1d:61:7e:4c:d1:e9:17:bf:e9:35:0f:24:df:74:99:
62:4a:05:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:08 2023 by rpki-client on console-ams.rpki-client.org