Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/uVoUHfrYUc15BKi3o9mOdc7Fd1Y.roa
File: uVoUHfrYUc15BKi3o9mOdc7Fd1Y.roa (raw, json)
Hash identifier: JTAAqgGmchzjnwTDF35wK9FvSMQOHNLU3q92Jk3HKHc=
Subject key identifier: B9:5A:14:1D:FA:D8:51:CD:79:04:A8:B7:A3:D9:8E:75:CE:C5:77:56
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 0184CDFD4F8DBE06CCAADE3E5B042065DBDA
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/uVoUHfrYUc15BKi3o9mOdc7Fd1Y.roa
Signing time: Thu 01 Dec 2022 14:00:40 +0000
ROA not before: Thu 01 Dec 2022 14:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200995
IP address blocks: 212.72.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:fd:4f:8d:be:06:cc:aa:de:3e:5b:04:20:65:db:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Dec 1 14:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b95a141dfad851cd7904a8b7a3d98e75cec57756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:63:29:75:2c:fb:a8:1e:1f:4f:f6:ed:ee:
a3:ed:6f:91:14:64:cc:9f:86:2f:a6:e0:31:86:14:
bf:0a:71:75:64:e1:dd:d7:a3:96:bb:1a:51:4f:90:
31:48:cf:2a:e0:9e:66:0b:54:8d:d7:03:80:16:89:
00:89:a9:58:23:96:7c:be:5a:3d:49:4f:69:1f:1d:
c5:e6:b8:5a:6b:96:05:2c:85:0e:3e:70:75:2f:ce:
7a:4a:5f:71:ab:d5:1e:4c:c0:b0:dd:2b:0c:3f:f1:
7c:3d:9c:62:ce:97:28:75:85:9d:da:be:7f:f4:da:
6f:c3:ae:fb:f6:93:bf:eb:4f:a3:53:05:28:fd:4a:
31:70:21:3d:7d:64:7c:f9:0c:91:54:39:07:f6:a7:
67:76:89:fb:97:44:ba:78:96:34:d9:82:cf:50:96:
22:a4:4d:66:0c:28:7a:9f:ea:04:32:33:a7:73:aa:
bf:3a:fb:20:7f:01:05:ee:8f:85:d8:40:33:d3:96:
39:5f:9d:60:0a:6b:14:47:96:e0:04:80:a1:c5:78:
6b:b2:ee:f4:b7:39:19:dc:da:9f:5e:63:00:35:1e:
66:88:fc:87:d7:57:81:0a:1f:9b:f5:9e:7b:e2:6a:
03:5a:80:a6:fa:bf:26:87:68:82:3a:4d:60:0c:1a:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5A:14:1D:FA:D8:51:CD:79:04:A8:B7:A3:D9:8E:75:CE:C5:77:56
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/uVoUHfrYUc15BKi3o9mOdc7Fd1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.236.0/22
Signature Algorithm: sha256WithRSAEncryption
40:de:e8:2e:3d:77:ad:2c:1a:70:9b:28:54:fe:4d:30:08:7c:
6e:04:f5:2f:4c:a0:22:e4:5a:01:70:c1:1c:95:d5:34:8e:95:
c5:84:07:3b:0b:b0:3b:26:1e:ad:f4:7b:be:55:bd:b3:10:31:
fb:df:7f:dc:94:40:31:c8:77:2f:ad:38:53:78:20:91:06:f3:
0c:6a:fb:a4:8d:54:81:1a:d8:b7:e5:0f:d2:53:ab:03:1d:aa:
cc:e5:d1:b6:b8:16:da:13:2b:07:72:63:a3:29:da:a0:c1:77:
57:e0:59:10:75:3c:24:58:e0:bc:0b:b4:7c:f8:e3:4a:c0:e5:
b5:16:8f:99:49:72:2d:bf:9c:8c:0a:b3:bc:09:ce:d6:72:ab:
20:2e:67:1f:cf:ff:ed:85:6f:d3:b0:8c:94:11:b3:43:02:8a:
d6:1d:89:cf:74:52:16:09:39:e9:e9:87:cb:3e:53:79:cb:19:
ce:7a:b2:1a:a2:33:f1:97:9e:8b:82:c7:21:a3:f4:aa:c3:54:
92:24:69:12:64:ee:9d:0f:32:07:20:6b:32:52:35:83:b6:ff:
e9:d1:4f:7d:3f:8b:dd:f3:89:ca:33:cc:47:fc:81:d6:2c:09:
59:4a:cd:02:b0:2b:7f:b3:38:06:71:b4:fc:6f:af:7e:6d:73:
65:00:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:14 2024 by rpki-client on console-fra.rpki-client.org