Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/m66s1dfhC0RnuehMkbiKShVC4tM.roa
File: m66s1dfhC0RnuehMkbiKShVC4tM.roa (raw, json)
Hash identifier: CtGGhkj0/sjgWRsvoW95uFvzmyStANV7JKxjrI+9hOg=
Subject key identifier: 9B:AE:AC:D5:D7:E1:0B:44:67:B9:E8:4C:91:B8:8A:4A:15:42:E2:D3
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 0FFA78C7
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/m66s1dfhC0RnuehMkbiKShVC4tM.roa
Signing time: Sat 01 Jan 2022 08:53:43 +0000
ROA not before: Sat 01 Jan 2022 08:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33824
IP address blocks: 212.19.63.96/29 maxlen: 32
2a02:2e0:413::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268073159 (0xffa78c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 1 08:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9baeacd5d7e10b4467b9e84c91b88a4a1542e2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:25:c0:c8:f4:d2:b3:b5:f0:7c:5e:9f:5f:
5b:9b:22:70:0a:7d:27:3a:b8:26:e3:9f:3f:d9:1b:
dd:7c:84:24:6f:a3:90:06:4c:5b:f2:a1:02:e1:06:
3f:ba:21:5f:f8:11:f8:94:3d:42:70:c0:d6:a7:b7:
48:5b:c9:23:99:ce:93:9a:6b:a1:33:5f:dc:cb:c8:
85:d1:f6:a9:4a:bc:73:97:47:cb:3d:71:fa:81:ea:
04:e3:57:1a:68:99:ee:38:af:5c:60:68:0b:4d:16:
dc:14:da:e4:2a:3b:5e:03:b6:4c:e1:e7:dc:b3:22:
d3:7c:55:1e:2c:2f:da:27:be:b7:26:4f:ed:e9:76:
1b:59:15:c4:a5:56:bf:19:86:94:20:41:3c:8a:c9:
ff:94:7b:93:ef:3c:82:72:82:ab:e0:e6:15:0d:6f:
be:f9:0c:75:7b:f1:ed:a2:93:55:0a:07:d1:00:26:
86:a7:da:5c:72:48:aa:be:0d:d3:a5:52:c0:6d:62:
7d:cb:dc:af:e7:e4:23:e8:87:b7:80:fa:4a:9e:f4:
54:12:ef:a6:be:0d:06:0d:b1:0e:d7:34:a4:29:c1:
4a:0e:40:69:55:5a:8d:99:e9:0d:8e:84:1d:e2:46:
3a:8a:00:a7:72:17:28:56:0b:7f:5c:b1:97:d6:32:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:AC:D5:D7:E1:0B:44:67:B9:E8:4C:91:B8:8A:4A:15:42:E2:D3
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/m66s1dfhC0RnuehMkbiKShVC4tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.19.63.96/29
IPv6:
2a02:2e0:413::/48
Signature Algorithm: sha256WithRSAEncryption
bd:99:72:bf:19:b1:d5:8e:cc:8a:5d:7f:c5:da:92:e6:53:79:
9b:39:1e:a7:aa:f0:48:e6:b1:76:56:6b:c4:85:b5:94:30:3c:
67:8d:f2:d0:fe:85:e8:6b:17:3e:e4:93:58:5a:51:5c:02:a0:
f4:e5:54:da:61:7e:6a:6d:67:76:a4:db:74:48:bf:1f:e7:3e:
1b:22:bf:6d:6c:db:ad:ba:64:af:df:51:e5:4a:98:0e:b3:83:
d0:ad:49:98:36:b2:58:f7:32:4f:31:c1:96:73:5d:18:8b:2a:
1f:57:6c:de:97:58:8d:63:a9:d5:db:a8:09:03:cb:5d:74:b8:
d8:f6:75:0f:08:68:cd:6d:ee:5f:f8:94:d1:65:a3:7c:a7:d7:
f2:df:1d:f4:96:c2:c4:be:35:f5:5a:d0:88:bd:59:83:57:74:
47:76:e4:58:67:c8:8a:b2:bd:ab:c7:8d:af:61:08:42:09:91:
2e:2e:ef:75:c7:d4:44:f4:4a:45:01:d7:03:09:d2:d7:89:b1:
93:e8:1f:91:b8:1a:c2:3d:1c:9e:c4:29:2c:e1:99:df:db:1c:
f1:c2:b8:2a:2c:68:61:35:d1:9b:af:e0:1e:3a:89:7a:97:45:
cd:df:62:1a:d1:f8:a3:91:a5:83:33:0e:68:11:9d:22:14:dd:
3e:32:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:37 2024 by rpki-client on console-fra.rpki-client.org