Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/5EFoA18Aw2ub3id-jiKBhOMi2xk.roa
File: 5EFoA18Aw2ub3id-jiKBhOMi2xk.roa (raw, json)
Hash identifier: BVP/Lr0hWSrWK0plDUfelQpoIZesuJSdc2EC9+cNb4s=
Subject key identifier: E4:41:68:03:5F:00:C3:6B:9B:DE:27:7E:8E:22:81:84:E3:22:DB:19
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 05FC36D6
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/5EFoA18Aw2ub3id-jiKBhOMi2xk.roa
Signing time: Thu 24 Mar 2022 11:52:53 +0000
ROA not before: Thu 24 Mar 2022 11:52:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51424
IP address blocks: 212.4.132.0/24 maxlen: 24
212.96.184.0/24 maxlen: 24
213.211.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100415190 (0x5fc36d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Mar 24 11:52:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e44168035f00c36b9bde277e8e228184e322db19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:34:5f:de:bf:68:57:50:dd:4b:1d:92:d1:
30:d5:85:f9:fa:f6:c9:4b:e7:78:c6:67:e5:a9:bb:
07:1e:33:05:15:71:79:54:55:e0:3f:03:13:68:6a:
d3:ba:4e:30:69:fe:90:c5:21:68:2c:73:05:ec:ab:
a2:43:74:57:e9:aa:6a:eb:62:df:5f:31:d2:81:29:
57:d6:9d:18:ca:4d:5e:e9:f1:55:3e:5b:7c:ad:21:
f8:b5:a2:d2:86:fb:23:c6:3c:b8:63:4a:a2:39:32:
6c:07:4a:e1:13:26:62:3d:0a:19:85:54:56:98:28:
8a:d0:0c:87:52:d0:94:e8:81:cb:77:98:0c:18:67:
0d:cc:61:0d:76:3a:6e:83:b3:09:6f:f6:07:4c:b5:
44:e2:96:98:47:31:45:52:69:37:8f:6b:55:64:b8:
6e:d0:4f:fc:01:f3:37:2e:fc:c1:19:41:14:61:37:
f8:94:81:00:ee:3f:4c:e0:65:d9:34:bb:71:27:05:
98:ec:a6:fc:ff:46:93:8b:06:64:c1:63:94:81:97:
40:a0:f8:00:a1:78:b9:85:cf:0a:44:77:9a:11:fa:
ab:dc:7d:1d:88:6c:f9:82:3b:68:2b:63:10:01:8a:
e2:01:fd:79:3d:0c:39:4b:a8:f5:fc:49:d1:03:cb:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:41:68:03:5F:00:C3:6B:9B:DE:27:7E:8E:22:81:84:E3:22:DB:19
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/5EFoA18Aw2ub3id-jiKBhOMi2xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.4.132.0/24
212.96.184.0/24
213.211.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:94:8c:32:9f:b9:8c:7e:e7:4a:cd:f4:3e:34:84:df:64:cf:
1a:29:79:b7:6b:64:78:fd:a5:4a:cf:7c:30:ae:63:35:20:a3:
cc:e1:eb:ac:91:78:e0:ce:44:cd:2f:10:d4:43:b5:f0:95:b6:
ae:4b:e1:c1:7f:5b:5e:b4:39:64:ba:6d:ee:53:bf:7d:e7:2d:
f5:07:38:67:8a:35:4b:98:f4:30:1f:7f:94:78:e4:03:c3:55:
9a:69:5a:23:1c:e4:ac:e3:2a:8e:1d:bc:91:dc:2f:2e:45:7e:
19:43:74:73:1a:03:c0:13:84:87:fb:36:ff:34:1b:bb:c6:cb:
27:e2:9c:a0:a7:6f:7d:5a:8f:26:b0:80:51:7b:4e:f7:b6:bb:
69:6b:c5:b6:d0:93:b2:89:c6:49:c9:fc:91:65:00:c1:60:22:
f6:4d:ce:e3:b5:b0:66:9a:1b:96:df:b3:c6:32:5d:4b:f2:d4:
2c:3a:48:f9:bb:54:00:7d:9b:14:05:d4:bc:ce:b5:a9:fc:c8:
25:f9:19:dc:c2:a0:8f:a7:d5:54:59:2f:c9:5b:15:7c:e7:82:
7b:ae:c6:76:57:f6:c7:fa:de:41:1d:28:66:c2:90:51:c7:60:
38:a6:c8:97:6b:65:9a:3f:ce:e7:ec:ff:91:bf:9c:61:bc:49:
3e:90:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:08 2023 by rpki-client on console-ams.rpki-client.org