Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/AL2hTqA-qyXgdp9uX8PAvRiR-4M.roa
File: AL2hTqA-qyXgdp9uX8PAvRiR-4M.roa (raw, json)
Hash identifier: MAWLTr7WiWuZSid5BHj3XvDNyDn9tFarHVvydxf3oBw=
Subject key identifier: 00:BD:A1:4E:A0:3E:AB:25:E0:76:9F:6E:5F:C3:C0:BD:18:91:FB:83
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 0D976DAE
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/AL2hTqA-qyXgdp9uX8PAvRiR-4M.roa
Signing time: Sat 01 Jan 2022 08:53:30 +0000
ROA not before: Sat 01 Jan 2022 08:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48522
IP address blocks: 217.150.190.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228027822 (0xd976dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jan 1 08:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00bda14ea03eab25e0769f6e5fc3c0bd1891fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:ef:14:be:8a:28:45:3d:99:16:29:61:18:
ee:63:c5:f2:31:cd:2d:7f:13:96:0f:5a:60:0d:09:
ea:db:8e:a8:49:14:67:80:a0:b6:41:0f:44:3b:6e:
e0:d8:5c:51:33:e6:54:e9:78:a4:3b:5c:a1:0b:46:
80:aa:94:ed:24:37:fb:c6:e0:b8:b4:7b:dd:fd:ea:
b3:12:f3:a3:08:a9:b9:b4:3a:83:ec:5e:90:eb:1f:
38:1c:5e:a1:e6:ce:69:49:97:44:9c:56:0f:56:63:
ae:2e:8d:74:2b:1d:60:2f:67:2b:87:a0:65:df:17:
39:ff:d3:a9:71:2f:ce:71:87:4c:ea:fb:99:ad:52:
4d:2b:25:65:03:3d:7d:e6:b2:2f:7d:f6:f9:34:26:
e4:2e:d6:3b:eb:a5:0e:a6:dc:09:12:61:d9:30:ee:
f0:67:a4:bc:d6:bb:a5:b1:a9:20:37:1f:3a:a6:53:
09:26:ce:3d:65:bd:cc:e4:24:64:59:d3:34:6f:7b:
47:ef:41:e4:77:d1:e4:b1:c5:b9:b9:0b:34:38:ea:
0c:13:d2:f9:b9:60:d7:60:54:eb:8d:49:d5:d8:b4:
a3:1d:78:68:31:57:9e:46:8a:be:ad:98:10:a1:e0:
9b:8a:d8:28:0d:46:3a:3c:dd:3e:fb:64:b0:dd:52:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BD:A1:4E:A0:3E:AB:25:E0:76:9F:6E:5F:C3:C0:BD:18:91:FB:83
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/AL2hTqA-qyXgdp9uX8PAvRiR-4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.190.0/23
Signature Algorithm: sha256WithRSAEncryption
66:09:58:81:14:a9:bb:20:3f:6c:de:0c:0f:87:7f:ec:e0:b1:
82:54:e7:1c:a2:49:d7:a9:37:e9:49:ab:ef:d9:1c:75:a7:cc:
b7:ba:e2:a6:62:17:08:fb:c4:09:7a:41:2c:b8:e3:3e:95:30:
8a:7a:f6:62:fa:7f:4c:54:b3:ea:cd:77:a3:8d:fd:61:71:f5:
17:65:2f:16:df:fe:19:da:92:dc:3d:58:ac:33:8a:8d:1f:c5:
b8:10:84:4d:9e:4a:5b:ee:0a:e3:23:5e:5c:dd:ed:ab:dd:e4:
c0:ab:81:d7:22:8c:4a:27:46:59:8e:cd:a9:06:eb:55:fe:c7:
bb:4b:36:04:3a:8e:e2:65:3b:25:18:22:e0:1f:90:e7:9b:86:
70:7d:f6:b4:8c:42:f0:80:34:40:03:14:9d:b0:93:98:d2:f8:
ba:70:25:a7:64:87:cf:b4:2f:7e:19:99:61:37:42:28:3d:a4:
09:bd:03:74:92:c5:a2:a5:ac:ff:31:a7:b2:9b:e1:05:1c:c4:
bd:bb:39:0d:58:32:d8:8a:f4:6c:ca:d6:73:2c:73:e7:6f:c9:
be:8a:02:27:ac:12:f0:15:00:a3:38:b0:16:7a:e7:9f:eb:0a:
b3:6e:1e:e2:60:c3:66:2d:e8:75:4b:e9:61:4f:fe:bb:19:37:
db:00:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:20 2024 by rpki-client on console-ams.rpki-client.org