Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/aKiYMocRFa0l8QPTEAXyqASIIkU.roa
File: aKiYMocRFa0l8QPTEAXyqASIIkU.roa (raw, json)
Hash identifier: fJNtk7HBfj+RdJ1YpSDmbnbZR+fQfdgKnqoIxUnGsOU=
Subject key identifier: 68:A8:98:32:87:11:15:AD:25:F1:03:D3:10:05:F2:A8:04:88:22:45
Certificate issuer: /CN=51798cc1434bce8478b6ae49aa0bac24c5f117fc
Certificate serial: E4CD3F
Authority key identifier: 51:79:8C:C1:43:4B:CE:84:78:B6:AE:49:AA:0B:AC:24:C5:F1:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXmMwUNLzoR4tq5JqgusJMXxF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/aKiYMocRFa0l8QPTEAXyqASIIkU.roa
Signing time: Fri 18 Feb 2022 20:46:30 +0000
ROA not before: Fri 18 Feb 2022 20:46:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 212.52.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14994751 (0xe4cd3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51798cc1434bce8478b6ae49aa0bac24c5f117fc
Validity
Not Before: Feb 18 20:46:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68a89832871115ad25f103d31005f2a804882245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:69:1d:f3:d7:6e:a4:14:42:9f:cf:72:f1:
45:53:7f:27:54:8e:28:87:28:55:f0:c1:e3:13:64:
57:fc:ac:d3:5a:f6:54:63:0f:61:0b:12:85:22:4b:
d5:13:c3:99:29:c4:e6:34:f0:7c:8b:31:e6:3e:96:
e7:fc:17:b8:96:56:2f:86:46:b2:2a:80:38:b1:0e:
19:6e:a3:4d:ff:a5:30:05:ca:82:f1:82:ab:8e:e5:
5e:d7:a6:21:02:b6:2c:b8:83:5e:33:ff:f6:68:b6:
0d:80:67:20:a3:a7:3f:19:9e:8c:55:ce:8e:b7:db:
cd:a7:71:2f:c7:f5:83:95:a7:67:cd:de:75:06:d0:
50:77:d8:b6:42:70:9c:b8:55:f2:0f:17:45:f7:2c:
71:5c:c2:5a:25:7b:49:5e:0c:22:95:3d:94:95:50:
d5:ff:6f:08:45:94:e4:07:72:d1:13:6b:4b:c0:47:
e0:33:0b:c9:a4:77:91:5a:b1:ad:d9:4a:3d:8d:2d:
0e:11:9c:5b:68:aa:76:6e:bc:3b:ce:ee:05:ff:6a:
85:e0:2c:80:c4:63:bc:de:76:77:eb:15:4c:6d:cc:
6b:31:36:ca:51:2f:7b:85:53:2a:17:6b:51:02:04:
de:37:ea:b9:45:39:87:3b:d8:ac:21:7c:55:bc:51:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:98:32:87:11:15:AD:25:F1:03:D3:10:05:F2:A8:04:88:22:45
X509v3 Authority Key Identifier:
keyid:51:79:8C:C1:43:4B:CE:84:78:B6:AE:49:AA:0B:AC:24:C5:F1:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXmMwUNLzoR4tq5JqgusJMXxF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/aKiYMocRFa0l8QPTEAXyqASIIkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/UXmMwUNLzoR4tq5JqgusJMXxF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:03:89:9d:9a:47:f4:3b:77:41:03:d8:95:06:dc:19:ce:44:
4b:5f:de:37:d1:73:cf:f3:88:51:05:28:05:bf:ee:62:45:36:
72:a2:18:3a:7c:48:20:fc:ed:c6:73:6b:d4:a2:fa:97:d0:c5:
3a:1a:e6:1c:75:2e:65:b3:20:83:2b:aa:40:cb:c0:cf:b9:a9:
3f:06:e9:0a:35:d1:f4:a8:b5:b7:52:7d:3c:12:6e:3a:91:ff:
5e:77:f1:d1:e7:ee:22:97:93:05:cf:71:11:84:53:91:ec:72:
fe:2a:4d:37:ff:e3:af:cf:c4:e6:6d:f3:f9:30:09:a1:47:59:
10:b7:88:bd:24:6a:df:75:29:af:02:8a:95:a2:bb:6d:df:82:
18:61:ac:31:41:12:0c:9c:a7:a3:56:5a:ec:1c:43:54:38:8f:
9c:ca:26:6f:32:f1:53:4b:6a:a8:f8:11:9e:a2:05:3e:62:a5:
29:e2:85:ba:aa:c7:b4:4f:90:ae:d9:7d:24:2e:3c:89:49:49:
6d:2e:c2:08:37:da:e7:4a:6e:98:0c:75:67:0b:97:3f:8e:a8:
ce:bf:21:70:aa:95:56:2d:0a:73:22:ec:4a:f6:1e:38:f9:1b:
a1:30:84:53:79:86:48:a0:4c:69:bf:23:80:16:d2:5c:8e:5a:
c9:1b:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:49 2023 by rpki-client on console-ams.rpki-client.org