Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/Ea3-i3KC8bafOV5et5RIgBmSZ-E.roa
File: Ea3-i3KC8bafOV5et5RIgBmSZ-E.roa (raw, json)
Hash identifier: YsMP2cPJTgKnZPgqYlSCZfiw8xICSu4PIiGs6L3VceI=
Subject key identifier: 11:AD:FE:8B:72:82:F1:B6:9F:39:5E:5E:B7:94:48:80:19:92:67:E1
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 7AA007
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/Ea3-i3KC8bafOV5et5RIgBmSZ-E.roa
Signing time: Sat 01 Jan 2022 01:57:15 +0000
ROA not before: Sat 01 Jan 2022 01:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49849
IP address blocks: 212.70.152.0/24 maxlen: 24
212.70.152.0/22 maxlen: 22
212.70.155.0/24 maxlen: 24
212.70.153.0/24 maxlen: 24
212.70.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8036359 (0x7aa007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 01:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11adfe8b7282f1b69f395e5eb7944880199267e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:31:d7:85:21:e2:ab:2a:0b:52:e7:d1:c7:
b4:fc:c9:a4:da:11:c4:ab:38:57:ff:fd:1f:4e:f2:
49:fd:83:8b:e8:44:4f:0e:9f:d2:57:94:0d:96:8d:
e9:e4:1e:b6:e4:ae:53:d8:fd:87:b1:31:c9:63:08:
f2:7b:e6:3c:e8:0f:d1:b0:21:d5:3c:2d:d7:ab:80:
06:8b:26:4a:3c:86:4e:26:cd:24:63:4b:93:3d:37:
24:0a:16:9f:3f:bf:6a:08:5c:13:55:45:7f:ce:73:
ba:7a:69:0c:a6:29:05:44:75:95:4a:a9:d1:d1:b3:
89:44:af:34:d9:73:3f:54:db:bb:a9:51:9a:55:83:
fa:03:09:6a:b9:b8:2a:15:75:82:91:de:cb:10:b3:
f6:01:74:ee:78:eb:81:0f:b3:1a:6b:72:84:c5:ec:
b0:38:0b:55:31:c2:a4:fd:4f:eb:cc:1d:75:fe:35:
2c:10:ce:1d:cf:9b:50:1e:25:57:27:ed:a9:04:5b:
da:06:49:bf:1e:5c:4a:a4:7b:81:01:6f:c8:19:68:
8c:1b:7b:62:76:a6:d3:05:59:b9:04:b3:bd:81:6e:
f7:04:ce:ae:9d:bf:c9:6e:0d:62:14:a9:31:1b:df:
82:e6:6d:a6:3c:25:b2:6b:70:4f:1d:02:13:43:3d:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AD:FE:8B:72:82:F1:B6:9F:39:5E:5E:B7:94:48:80:19:92:67:E1
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/Ea3-i3KC8bafOV5et5RIgBmSZ-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.152.0/22
Signature Algorithm: sha256WithRSAEncryption
43:85:f8:4b:37:74:f2:17:e6:18:89:96:e6:b6:66:58:35:61:
f1:35:84:e2:06:e2:a4:b2:7c:a4:fb:33:ef:2a:c3:b5:da:17:
28:af:a1:d3:26:38:9e:d9:ed:c3:9f:2a:07:92:1f:75:39:10:
3d:45:b3:d4:65:b8:39:dc:9f:31:1d:e1:df:ee:a0:9a:49:d5:
c5:fb:b3:ab:5e:a6:42:a3:4e:b1:e5:a4:5b:78:a3:45:c5:80:
1b:7e:74:da:84:2e:c1:9d:a2:b6:e7:ff:71:d3:ba:b8:79:bb:
70:dc:b8:7f:4c:4a:ce:93:02:c6:92:3e:09:a0:58:15:e2:67:
96:d2:f0:dd:de:68:1b:4a:68:4f:9d:06:98:fe:2f:32:10:00:
25:61:cb:0c:94:50:e5:ca:60:9b:b1:22:87:90:51:c6:b4:e4:
c1:30:20:e0:e8:1f:95:3e:ff:c3:85:81:3d:f6:39:2d:7b:a9:
54:73:ef:37:75:a2:4e:16:0e:80:e0:ea:9c:c5:9a:bb:18:1e:
27:79:09:72:8e:ef:46:d6:32:f1:3c:0b:00:b7:d1:79:04:8a:
89:df:f9:9c:7d:6e:cc:9e:db:7f:68:af:d8:b2:72:6e:02:a7:
cb:db:ce:df:d0:8c:d5:1c:09:68:fd:d0:47:a7:81:c4:a6:11:
96:cf:ff:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org