Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/ptAvwY3DJmhq0-ptJT4Ta9yCBjU.roa
File: ptAvwY3DJmhq0-ptJT4Ta9yCBjU.roa (raw, json)
Hash identifier: sLZfotVwxchpv7jgy8ugteqTyaKOWEEjImewsBDy/34=
Subject key identifier: A6:D0:2F:C1:8D:C3:26:68:6A:D3:EA:6D:25:3E:13:6B:DC:82:06:35
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 0684541C
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/ptAvwY3DJmhq0-ptJT4Ta9yCBjU.roa
Signing time: Tue 14 Jun 2022 09:20:44 +0000
ROA not before: Tue 14 Jun 2022 09:20:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8879
IP address blocks: 212.101.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109335580 (0x684541c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jun 14 09:20:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6d02fc18dc326686ad3ea6d253e136bdc820635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:c6:e3:5e:34:47:50:df:63:cd:92:c0:60:
ef:d6:02:29:a7:04:41:86:8c:ca:60:a0:d3:2b:d2:
3a:0c:12:1f:c2:e3:62:a2:fb:ee:71:a3:cc:67:d3:
e1:98:b0:07:94:df:9d:02:65:a3:8f:b3:e4:15:03:
be:26:51:55:ea:c7:6f:7c:87:14:d7:6f:c9:e7:e9:
49:5f:da:60:f3:34:5b:75:f0:e3:f2:84:35:ed:2c:
fa:8c:f4:ab:01:88:04:35:e3:8e:53:a5:e6:1e:f8:
43:41:ef:36:3d:fe:81:5f:0b:30:a3:a1:95:31:bb:
d6:c1:ab:83:c4:dc:a7:f5:70:14:da:f2:40:08:32:
17:3d:bc:d6:76:d1:3f:db:9e:e1:47:e2:7b:72:fe:
8c:52:27:23:a5:ea:24:0f:92:0d:f1:09:d4:2b:60:
15:cb:df:70:6c:6e:b2:92:44:07:e7:e2:5d:a4:c6:
14:15:3e:1f:41:3c:30:55:22:7a:ec:5d:37:e8:2f:
5d:26:13:48:e1:be:85:a1:28:84:99:27:71:df:2b:
50:e0:d2:7d:0a:86:a7:b3:df:f1:9a:78:38:c5:69:
2b:4a:b3:83:ee:74:91:3e:d3:ea:ba:24:95:1c:fe:
a4:a8:1d:37:b6:55:a6:1d:93:9d:71:d0:17:d5:d2:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:2F:C1:8D:C3:26:68:6A:D3:EA:6D:25:3E:13:6B:DC:82:06:35
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/ptAvwY3DJmhq0-ptJT4Ta9yCBjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:29:be:c7:0f:86:68:a3:50:fc:36:48:fb:91:e1:29:93:23:
32:ce:25:16:81:a2:d8:48:9b:e8:22:08:97:96:2f:8f:b2:4e:
8a:68:47:9d:9a:6f:e2:4c:eb:0f:67:c9:09:a6:78:d9:34:3c:
03:9b:80:6c:38:f1:69:f9:48:1f:a0:cd:77:bc:6f:c7:30:c6:
3a:80:9b:8d:1c:f2:72:31:6b:0e:32:a9:b7:df:1f:77:fb:c8:
f0:bc:eb:79:20:ce:56:23:85:79:1d:2f:4a:9c:21:aa:80:08:
4c:26:35:f1:07:0f:59:20:a5:68:80:5f:b6:2a:2a:44:25:f7:
d7:e6:d9:51:fc:90:39:be:39:63:9c:8c:98:07:98:b5:65:b3:
ae:d3:e8:32:d2:1c:e8:e8:cf:67:c1:09:90:0e:12:dc:89:c5:
06:b2:2d:28:a7:ef:8d:53:38:7e:67:45:6d:69:02:cb:fb:d1:
a8:44:66:d2:c6:f5:13:31:4a:57:8c:e5:41:b3:3a:db:4b:ee:
8f:11:85:42:d7:b8:ba:aa:e8:20:92:23:01:e9:62:9b:70:cb:
b1:6d:c0:74:86:9d:df:47:79:e7:5d:b7:89:01:bb:21:38:f3:
d3:9e:4e:9c:cb:50:95:a2:fe:aa:52:66:18:56:60:66:24:90:
f6:67:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:17 2024 by rpki-client on console-ams.rpki-client.org