Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/r3HXbblVWICkyfQh-vrP-3yaUq4.roa
File: r3HXbblVWICkyfQh-vrP-3yaUq4.roa (raw, json)
Hash identifier: wikWsqf7C+MTnuhu9xKNj6n7ZBhuS5HiQaW1UGjqdPU=
Subject key identifier: AF:71:D7:6D:B9:55:58:80:A4:C9:F4:21:FA:FA:CF:FB:7C:9A:52:AE
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08DBFAC7
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/r3HXbblVWICkyfQh-vrP-3yaUq4.roa
Signing time: Wed 19 Jan 2022 06:20:26 +0000
ROA not before: Wed 19 Jan 2022 06:20:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32780
IP address blocks: 212.60.12.0/24 maxlen: 24
45.67.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148634311 (0x8dbfac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 19 06:20:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af71d76db9555880a4c9f421fafacffb7c9a52ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:82:9a:e8:d7:64:94:42:3a:42:3c:3c:2c:
d4:43:3b:94:b1:f1:f3:e0:73:e6:4b:f0:ca:78:c8:
9e:4d:04:31:b8:8e:9c:be:dc:a8:c7:3a:db:aa:05:
64:7f:f3:d4:16:be:5f:1f:b6:16:42:89:48:c2:94:
94:fb:9e:81:5e:17:ba:45:46:ec:ff:d2:2c:be:e3:
21:ce:54:0c:8a:57:9d:75:97:c9:c3:49:7a:01:ba:
2e:50:8e:c1:6d:4b:9c:bc:e5:7d:2d:9d:fa:33:a6:
03:c0:13:53:c0:dd:aa:d1:97:0d:6c:f1:69:f4:84:
81:ab:ef:19:90:1a:e1:20:b6:06:0c:11:31:d1:af:
06:f0:c8:7e:83:ac:d9:1a:9d:6f:b5:49:06:2b:e3:
16:ca:e3:46:e3:6f:9a:5c:9b:1a:30:d4:36:15:f8:
dd:d0:81:60:84:c4:55:2f:6c:a7:75:86:b2:99:33:
17:cd:69:d6:8c:9a:8b:74:2d:86:f6:85:7c:0d:ce:
30:d9:a7:2c:91:d1:c0:b4:8a:d9:66:8e:28:36:52:
0b:76:8d:ed:4f:47:6d:2e:5f:fd:de:7e:d5:d5:6d:
cf:ab:8d:3e:0d:7a:df:c5:47:ee:5e:e3:7f:3a:84:
05:1a:52:17:25:6e:48:cf:6e:3e:80:27:c0:f2:ea:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:D7:6D:B9:55:58:80:A4:C9:F4:21:FA:FA:CF:FB:7C:9A:52:AE
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/r3HXbblVWICkyfQh-vrP-3yaUq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.141.0/24
212.60.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:02:4b:c5:d0:38:25:0d:09:26:e1:d6:7d:ec:59:89:a7:3e:
39:59:0e:77:33:3c:57:8b:11:c3:fd:f5:32:d3:1e:6c:18:cc:
95:76:c4:04:58:08:f0:37:05:78:81:78:ed:ce:43:46:8f:13:
91:ce:9e:bc:f1:3c:9a:7e:fe:7c:10:6f:90:4f:45:11:65:ef:
29:e5:95:0a:60:a0:c9:ca:57:e1:30:7e:93:38:0c:43:8b:99:
c0:04:ca:57:67:e7:5d:9e:a2:31:fb:21:d7:85:44:c4:9d:f3:
30:80:65:82:53:ed:0e:6e:fa:85:cc:b6:72:da:1f:dd:6f:80:
5c:2f:b8:0e:bf:53:cf:d3:fe:53:a5:fd:86:f2:74:d6:2c:8c:
5b:5f:5f:c5:2f:0a:14:4b:2e:15:6f:22:c1:4d:82:f9:ec:99:
f0:d6:2d:13:00:65:a7:fe:ec:6e:eb:68:ed:ed:8a:62:bc:81:
8a:57:f2:84:2f:97:51:91:6e:a3:b2:32:ff:20:05:82:37:9e:
be:a6:38:ce:8c:c9:3f:76:db:5c:dd:73:6a:70:b9:7c:5b:61:
61:47:c1:9f:41:ae:f3:71:e6:8d:8a:a9:3b:3e:c2:34:7d:62:
7d:d0:15:fa:97:85:24:2e:31:6d:75:c0:82:1b:5f:65:1d:e0:
47:d4:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org