Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/vwqs5YVTZRtQQOG9nf0Lv62E0Mk.roa
File: vwqs5YVTZRtQQOG9nf0Lv62E0Mk.roa (raw, json)
Hash identifier: 5DwjSNUglxC+cEDbfUGk7jFaPCH6ZIRKefiKU7z+Xpo=
Subject key identifier: BF:0A:AC:E5:85:53:65:1B:50:40:E1:BD:9D:FD:0B:BF:AD:84:D0:C9
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 37E369BA
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/vwqs5YVTZRtQQOG9nf0Lv62E0Mk.roa
Signing time: Sat 01 Jan 2022 16:04:52 +0000
ROA not before: Sat 01 Jan 2022 16:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30787
IP address blocks: 212.218.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937650618 (0x37e369ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jan 1 16:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf0aace58553651b5040e1bd9dfd0bbfad84d0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:cf:3e:aa:a1:b5:7d:66:9c:1d:30:14:04:
ae:28:25:c9:d7:f2:41:cc:aa:6a:5d:1d:67:d5:31:
56:7c:aa:ca:44:d2:9d:e4:17:a7:52:02:99:71:80:
2b:60:9d:ac:e8:36:14:79:ef:29:c4:ed:19:a4:90:
9b:d7:06:4a:67:09:98:b9:ef:38:8d:a5:f1:e2:d3:
23:45:dc:00:4a:f7:1b:09:8e:23:96:7a:09:d8:74:
04:5e:45:47:73:0c:e5:8f:71:d1:57:a7:89:8e:f7:
0c:64:37:d3:3b:98:ac:c8:e9:eb:97:91:5d:61:4b:
a8:0b:63:9c:8a:f0:5f:e4:3b:af:46:03:6a:b7:70:
e5:db:c7:b8:b6:e2:5b:d3:cd:7d:13:2f:11:2e:e9:
e0:17:db:d4:c5:34:95:a1:eb:5f:03:b7:3c:35:71:
28:06:d3:5f:e8:2e:09:f6:ea:75:70:0c:50:7b:b1:
1a:89:eb:b6:99:c9:a3:0b:de:f5:9b:06:19:c0:92:
6b:eb:4c:a6:51:fd:a3:bc:fe:88:02:12:c7:5f:f4:
49:42:38:b6:cc:2d:40:f4:e3:1d:84:1d:90:08:9e:
1f:ea:fc:c9:cf:25:97:2a:e6:3a:d4:aa:be:01:7c:
81:b9:93:6a:23:ea:b9:34:22:5f:a1:ae:81:f1:a5:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0A:AC:E5:85:53:65:1B:50:40:E1:BD:9D:FD:0B:BF:AD:84:D0:C9
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/vwqs5YVTZRtQQOG9nf0Lv62E0Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.218.188.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e2:72:36:03:92:7b:34:21:90:a6:b1:30:35:4b:20:79:39:
f1:2d:3d:1e:83:68:e1:4e:57:80:cb:6f:fe:6c:1f:3c:43:cf:
55:b1:c9:79:5d:d3:69:31:3c:0d:ec:44:83:5a:43:7c:36:21:
89:eb:d6:7e:77:28:02:c3:87:3d:97:88:0e:46:d0:8e:b4:c9:
75:5e:c2:10:8c:9b:81:8b:c6:2a:89:3f:cf:55:b6:bd:7e:19:
f0:15:b6:36:0d:06:8e:62:12:cc:ac:e1:e4:d6:fd:49:2c:36:
38:78:83:00:e4:1d:d6:26:4d:fc:08:28:48:00:46:7f:1a:22:
6c:d4:cd:7f:30:ec:73:2a:d3:3d:f8:6b:56:87:80:90:72:f7:
af:bf:9d:6e:4a:0d:53:35:a8:ae:5c:23:6b:b3:76:a6:08:39:
8c:5d:01:59:78:8c:09:19:8b:7b:93:0d:7b:a2:47:c3:e0:de:
c6:d0:91:0f:11:f0:94:56:e8:08:59:48:54:e9:0c:cd:2d:76:
14:e8:66:f5:4c:6c:e6:10:09:74:25:13:ea:ac:8f:8b:3a:0b:
be:0b:f3:2c:69:2b:80:4d:d9:e1:ae:58:c5:da:3e:ca:a4:66:
d7:fc:56:7d:8e:08:e8:72:62:b8:36:d2:ce:b6:b0:38:d7:c3:
03:ec:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:40 2024 by rpki-client on console-ams.rpki-client.org