Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/A2h1shw2zxBUHqyRhSlmqTb5ftI.roa
File: A2h1shw2zxBUHqyRhSlmqTb5ftI.roa (raw, json)
Hash identifier: W7T2nh7LUuRJVVxa+T04bSSkRHL4NCqHXrJwrV7qzTs=
Subject key identifier: 03:68:75:B2:1C:36:CF:10:54:1E:AC:91:85:29:66:A9:36:F9:7E:D2
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 020F938F
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/A2h1shw2zxBUHqyRhSlmqTb5ftI.roa
Signing time: Sat 01 Jan 2022 01:59:59 +0000
ROA not before: Sat 01 Jan 2022 01:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20794
IP address blocks: 217.12.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34575247 (0x20f938f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Jan 1 01:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=036875b21c36cf10541eac91852966a936f97ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:80:35:02:8d:17:26:67:e1:e0:2d:86:f6:
e9:7c:d2:b8:4c:7f:71:e0:1b:5a:6c:de:73:91:8f:
45:0d:37:63:9f:e6:ae:c6:7c:a8:cd:f1:49:ad:e1:
4e:ac:10:6a:a6:20:d0:d7:99:ce:45:f5:ee:f2:cf:
ad:62:22:7a:2a:2e:c0:3f:53:3d:a2:d0:8d:2e:be:
7f:cb:b2:06:75:f3:b9:4e:fa:3e:b4:8b:57:86:44:
f8:97:51:01:8e:45:21:bb:81:97:d5:bb:e4:9d:37:
b3:12:c5:e6:f5:e1:ad:7a:2e:e2:01:5d:56:37:81:
d6:a2:1e:91:c6:b3:e2:e2:c6:f5:cc:77:2c:88:2e:
3a:41:3a:6f:d3:30:36:84:01:dc:f1:ae:25:89:f4:
89:4f:ae:99:39:7b:66:92:5f:4e:90:e6:1a:ca:23:
f3:d7:c9:dc:b8:33:08:20:ab:fb:54:bd:4f:27:12:
73:e3:49:00:f5:a9:aa:d1:3e:3b:df:59:16:12:60:
37:10:09:c2:d8:94:2c:df:2f:e3:ba:ec:d0:38:56:
e4:f5:bb:aa:5e:58:10:c6:45:93:9f:af:bf:5f:90:
fd:a8:18:57:a4:eb:c0:29:4e:c2:65:ca:6f:88:70:
49:51:db:4d:7d:e5:af:2a:8d:06:ed:d1:fd:c7:cb:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:75:B2:1C:36:CF:10:54:1E:AC:91:85:29:66:A9:36:F9:7E:D2
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/A2h1shw2zxBUHqyRhSlmqTb5ftI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:9e:ec:5d:35:b8:78:92:7e:1b:c4:65:0a:f8:a5:a7:1d:35:
fa:f5:57:7f:b2:24:95:d6:5e:c0:b3:bc:dd:d8:0a:b7:ea:e3:
b1:80:7e:24:fc:11:f1:78:2d:e4:be:a3:ff:97:e1:a1:af:21:
04:ea:86:b6:4e:8a:02:af:8f:8d:d8:fa:f1:16:25:77:5c:a6:
dc:da:49:1f:c2:d9:b8:0c:58:61:c7:88:ec:9e:96:11:f5:ec:
48:70:aa:55:d8:c6:36:3e:8b:84:63:da:ae:4a:dc:90:d9:ab:
c1:26:ac:a1:a4:17:c3:94:ca:25:97:e9:3e:ea:ba:72:00:4a:
76:73:c6:4b:46:dc:91:f8:44:b7:1a:82:8e:7c:5b:16:8b:09:
94:c3:90:0d:0e:59:6e:46:ec:24:18:0c:26:16:d1:36:b4:99:
99:ad:2f:f5:dc:04:30:2e:d4:4b:89:31:6a:90:a7:0e:f3:ab:
64:27:ef:b7:1a:9e:62:51:07:d9:4d:12:f5:0b:91:61:cc:d3:
2a:42:f2:ee:3b:2e:d4:3c:fb:fb:97:bf:d9:43:01:23:3d:2e:
0c:33:bf:43:94:f3:53:0e:e6:1e:9b:0c:33:3b:b0:cf:22:0c:
2c:b7:9b:81:eb:7d:e9:e0:13:ee:70:8d:54:ad:e2:df:03:c3:
a8:07:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:40 2024 by rpki-client on console-fra.rpki-client.org