Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/8yX7dAbYsGDo-zIFXtxB3SDUbts.roa
File: 8yX7dAbYsGDo-zIFXtxB3SDUbts.roa (raw, json)
Hash identifier: EILxEPn8SlQhP6PV+C2pvxdHr/w5kdQyxse972gclUs=
Subject key identifier: F3:25:FB:74:06:D8:B0:60:E8:FB:32:05:5E:DC:41:DD:20:D4:6E:DB
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 01855E280FEF1F514E19DCA8C87933434014
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/8yX7dAbYsGDo-zIFXtxB3SDUbts.roa
Signing time: Thu 29 Dec 2022 13:52:41 +0000
ROA not before: Thu 29 Dec 2022 13:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200995
IP address blocks: 212.72.236.0/22 maxlen: 24
2001:7bb::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:28:0f:ef:1f:51:4e:19:dc:a8:c8:79:33:43:40:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Dec 29 13:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f325fb7406d8b060e8fb32055edc41dd20d46edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:5b:fd:db:c5:dc:37:ec:e3:bb:f0:4d:1e:
64:f8:39:8e:af:bf:e6:df:19:e6:ca:cd:9b:ba:4a:
4b:31:d2:d0:2d:3b:32:d2:84:e1:4f:37:2e:4a:ee:
0f:74:4d:a0:ae:37:01:be:f5:c9:4b:f6:ec:16:ef:
b1:42:7b:64:96:29:12:21:3a:d0:f3:c0:e4:0d:ca:
ec:bb:56:0e:59:28:f9:b6:67:97:7a:75:a3:c7:ed:
fc:b3:13:bc:24:db:d8:73:c1:b7:7f:a1:fc:29:44:
a4:6c:92:6c:de:c5:62:72:dc:24:0c:62:5d:2d:42:
9d:45:54:78:db:84:83:a2:7a:8b:7e:46:f1:9b:2e:
32:eb:4b:a2:98:00:59:dd:6f:72:29:fd:b7:ba:79:
c9:41:28:36:66:39:02:38:05:9b:00:84:88:cb:75:
9d:db:d7:44:c8:45:e6:32:48:a2:36:04:cf:e1:13:
70:3d:05:2f:d5:5e:a7:c1:5d:5b:72:53:39:fc:8f:
16:40:cb:34:4d:da:1e:29:c5:82:bb:7c:db:37:9a:
b1:7e:28:86:15:cd:ba:f0:2e:36:93:2b:ea:eb:01:
a1:16:29:c7:94:54:51:c2:df:1d:c1:31:cb:7e:25:
d5:47:cf:e8:26:b4:9b:f9:10:70:b9:3e:bd:95:2c:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:25:FB:74:06:D8:B0:60:E8:FB:32:05:5E:DC:41:DD:20:D4:6E:DB
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/8yX7dAbYsGDo-zIFXtxB3SDUbts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.236.0/22
IPv6:
2001:7bb::/32
Signature Algorithm: sha256WithRSAEncryption
97:fc:5b:6e:12:98:d6:f8:25:2f:64:c6:bc:fd:a5:8f:69:63:
d1:1f:61:70:8e:5b:59:47:cd:63:eb:08:f6:c7:7c:2f:30:c1:
43:4a:5e:4d:fa:35:e0:1e:2c:9c:26:c6:9d:e3:b6:79:63:9c:
ee:25:44:3a:19:09:8b:66:13:58:fc:40:f0:7c:b9:b0:3a:ec:
5b:ba:67:45:d9:a8:ec:86:59:93:be:f0:41:79:33:96:f5:cf:
b4:99:aa:07:eb:d5:5b:1d:31:98:ea:21:68:0d:4f:73:d9:27:
b9:91:c2:e9:6d:4a:2d:34:ea:dc:fd:d1:b5:d4:fb:6d:23:1f:
95:9b:c6:3e:b2:0a:57:1d:a9:c3:11:c1:47:bb:2e:30:b1:1b:
f1:65:8b:bb:c9:19:e5:bc:3f:26:b0:6a:db:98:66:73:75:32:
26:4f:34:0c:d6:bc:0d:13:29:03:33:b8:5b:50:8d:2f:36:8a:
85:5a:47:c0:8e:c5:be:0b:d6:06:3b:1c:bd:3d:29:98:62:ec:
ae:be:28:89:18:52:dd:f2:af:5f:ac:7f:4c:29:3e:29:0a:f7:
0e:a5:26:96:75:c9:b4:26:b8:c9:36:23:ee:68:20:02:81:f5:
50:a3:35:96:d4:40:17:89:a7:60:85:54:28:b6:e1:4b:aa:df:
07:73:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:39 2024 by rpki-client on console-ams.rpki-client.org