Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/4T5dN9L3DizFz7PG4q6L9CkYhaw.roa
File: 4T5dN9L3DizFz7PG4q6L9CkYhaw.roa (raw, json)
Hash identifier: Clp1iShDTQdUfzePJRFZbPDtxC1CJVLIJgxgZ0SoXc0=
Subject key identifier: E1:3E:5D:37:D2:F7:0E:2C:C5:CF:B3:C6:E2:AE:8B:F4:29:18:85:AC
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 07418F72
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/4T5dN9L3DizFz7PG4q6L9CkYhaw.roa
Signing time: Sat 01 Jan 2022 09:55:43 +0000
ROA not before: Sat 01 Jan 2022 09:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12417
IP address blocks: 212.44.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121737074 (0x7418f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 1 09:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e13e5d37d2f70e2cc5cfb3c6e2ae8bf4291885ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:86:df:36:20:5a:34:5e:46:35:ca:d4:1a:
ef:59:cf:a3:16:ac:f2:82:56:3a:04:d4:31:31:f7:
01:cf:f3:6e:83:41:5a:82:43:9f:f2:20:b2:75:89:
7d:0c:23:21:3f:b2:ec:9b:88:ae:70:91:ed:b9:aa:
1a:eb:17:7b:e5:17:48:58:06:2d:5b:db:10:a4:f9:
fc:20:ad:ac:fa:cf:51:4d:e1:37:7c:87:a7:12:7c:
9b:95:b8:84:7d:3e:f7:d2:62:06:07:d0:0c:63:9e:
a1:76:fa:32:2c:98:77:3d:b4:e6:fc:b8:d0:b9:3e:
73:d5:43:ad:b1:20:dc:b1:d2:72:55:b4:35:a7:52:
5d:96:8e:96:a2:b7:27:61:58:db:e0:fa:d4:9c:8b:
ed:43:1d:24:26:13:2f:7f:d1:73:77:d7:7c:75:c1:
f4:66:fd:1d:a8:06:3b:09:0b:2f:4d:4d:93:bf:f3:
ea:d5:51:58:d6:d2:27:c5:24:fc:85:8f:af:d9:ba:
2e:f4:b7:9a:c3:9b:d4:6b:b8:93:2f:67:71:de:36:
17:59:9b:af:fe:6a:5d:e1:31:d8:be:73:fa:32:e5:
36:39:c3:cc:7b:34:33:c8:39:2d:13:b2:88:61:0b:
83:e6:80:85:8e:91:0f:cd:e6:b7:4c:5b:42:b2:db:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3E:5D:37:D2:F7:0E:2C:C5:CF:B3:C6:E2:AE:8B:F4:29:18:85:AC
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/4T5dN9L3DizFz7PG4q6L9CkYhaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6e:83:af:f0:d7:a9:8f:62:07:8a:7e:c4:a4:66:32:58:ac:
6a:80:b6:74:b8:f3:39:f3:96:47:12:7f:c5:35:cf:66:c6:80:
1b:5f:d8:aa:68:3e:27:ee:52:25:26:fe:fe:19:0a:be:de:82:
73:47:78:15:14:c7:1d:9f:8a:6d:cb:dd:56:ad:19:a5:d4:5b:
6e:62:24:ff:f9:2f:4c:e9:23:08:66:17:7c:e7:36:37:5d:4d:
01:d5:ea:fc:eb:64:8a:71:30:b9:7a:15:be:90:69:a7:72:33:
b1:56:cb:ef:92:9c:75:69:ec:59:ef:75:f8:96:0e:cd:17:b5:
03:6b:05:fb:97:e8:0d:a8:4a:61:3e:6d:eb:c0:ce:b3:e6:55:
25:0a:f2:11:b3:28:e3:41:e8:b3:c8:ad:41:01:1e:ab:30:6f:
50:6b:2e:17:17:c7:fc:9e:9b:fc:10:a9:c2:1a:21:37:e3:c4:
45:40:26:0d:5f:54:13:9b:a3:cd:10:05:0d:e7:fc:6b:f9:bd:
db:b5:34:cd:15:04:4d:4e:4b:3c:a8:2d:95:9d:5b:c5:24:eb:
8c:3e:40:34:42:17:1f:d1:3e:ee:d4:bd:14:9e:65:3f:77:70:
da:78:6a:eb:6c:74:02:75:74:9c:b7:8a:3a:a1:fb:a5:a8:27:
ff:24:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:26 2023 by rpki-client on console-fra.rpki-client.org