Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/0L8QNl7vnwzEQZKfgpDzLQBHf1o.roa
File: 0L8QNl7vnwzEQZKfgpDzLQBHf1o.roa (raw, json)
Hash identifier: USsz0u9PljytKPuuOxpmgmvm9sagztsqehGjcPo1qJg=
Subject key identifier: D0:BF:10:36:5E:EF:9F:0C:C4:41:92:9F:82:90:F3:2D:00:47:7F:5A
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 953A65
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/0L8QNl7vnwzEQZKfgpDzLQBHf1o.roa
Signing time: Wed 08 Jun 2022 07:22:02 +0000
ROA not before: Wed 08 Jun 2022 07:22:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3301
IP address blocks: 212.39.32.0/24 maxlen: 24
212.39.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9779813 (0x953a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jun 8 07:22:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0bf10365eef9f0cc441929f8290f32d00477f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:cb:2e:6c:15:21:20:ab:a5:b3:dc:83:74:
a9:37:43:30:35:b8:ef:57:8a:a1:d7:85:58:1d:b1:
d5:46:7e:6d:f2:1d:79:9d:f4:9b:87:81:79:2a:32:
bb:ed:3b:3c:89:f6:0d:94:60:98:9b:45:e6:5a:6a:
1f:f7:3c:c4:01:a9:0f:62:ef:49:c6:14:1f:4d:50:
d1:3d:f0:fe:3e:3f:86:4e:7c:13:5b:9c:99:c9:54:
15:ab:c1:49:3e:de:6c:1b:d4:b9:ab:19:ea:42:41:
d9:b9:48:88:eb:46:48:d4:16:68:70:96:dd:44:bf:
87:5b:ce:09:90:f1:1b:60:3d:4e:5d:21:cf:13:10:
ee:5a:c9:84:90:92:15:cb:3e:c8:e7:dc:b8:05:5e:
58:86:83:12:c7:7c:eb:0c:36:d8:16:b8:74:88:35:
39:75:7b:c5:d0:a7:23:1a:47:8b:0a:e0:0a:46:b2:
59:d1:5f:97:f6:be:fd:8b:c4:42:c4:72:f2:65:57:
ba:f8:c2:f1:6e:b0:ad:45:ff:7b:7e:f8:22:8e:2f:
97:ef:50:79:36:dd:46:3b:dc:9c:49:6d:7f:36:04:
22:6b:7a:30:a0:d1:26:28:a7:92:5d:8a:96:11:30:
05:ae:b0:f8:47:ff:00:e5:35:98:64:4a:6c:84:f0:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:10:36:5E:EF:9F:0C:C4:41:92:9F:82:90:F3:2D:00:47:7F:5A
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/0L8QNl7vnwzEQZKfgpDzLQBHf1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/24
212.39.34.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3e:9e:8c:ca:3e:89:34:0b:87:51:44:0b:af:84:97:eb:87:
e1:38:04:7f:81:1d:24:5e:ee:35:66:ed:be:3a:be:a9:21:95:
33:f7:67:b1:fc:83:b4:48:03:13:dd:ed:78:f3:67:17:30:7a:
54:3e:0b:89:59:b0:45:51:7a:5b:21:29:76:98:1e:14:fc:fb:
4a:96:89:6c:c6:fd:6b:c5:8e:0d:f3:e5:85:a1:22:f9:5d:3f:
0f:43:ae:56:ca:96:fa:b8:c9:42:f7:00:f8:25:1e:2f:76:29:
3a:68:a4:7e:94:15:21:22:9a:1d:3c:1a:c9:62:62:ad:6f:a4:
6a:91:ef:e9:52:40:70:fd:40:eb:65:92:f3:03:a0:3f:f1:e7:
d5:54:9b:6e:bd:4e:fe:a7:2d:c9:ff:ae:c3:c7:38:ca:d8:50:
39:3c:be:81:9a:e5:cf:b2:65:b6:3c:6e:b4:db:ff:c4:bb:31:
fd:1f:c7:79:ca:20:78:32:a9:05:6b:e0:62:52:42:02:33:df:
57:14:fe:6d:7e:06:62:0a:7b:6e:f1:2d:2d:77:bb:5e:38:2a:
2f:34:b4:4a:d8:91:f3:ab:36:8e:e5:74:7c:13:bb:57:f0:23:
9c:f7:4d:01:93:b2:e0:ad:8c:f3:41:17:85:a9:b1:c3:f4:32:
76:9e:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:00 2024 by rpki-client on console-ams.rpki-client.org