Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/gd8HkYPve87_vC7jZH2uNgYPJ1A.roa
File: gd8HkYPve87_vC7jZH2uNgYPJ1A.roa (raw, json)
Hash identifier: BAG26mZdunZe9u+2x9yz3ZD5EQGs5hpV7GXAw3In0ng=
Subject key identifier: 81:DF:07:91:83:EF:7B:CE:FF:BC:2E:E3:64:7D:AE:36:06:0F:27:50
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 272F8482
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/gd8HkYPve87_vC7jZH2uNgYPJ1A.roa
Signing time: Sat 01 Jan 2022 07:54:09 +0000
ROA not before: Sat 01 Jan 2022 07:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203878
IP address blocks: 212.54.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657425538 (0x272f8482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 1 07:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81df079183ef7bceffbc2ee3647dae36060f2750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:69:7b:29:23:be:6f:7b:d7:cc:57:9a:3a:fc:
bb:70:40:07:93:09:e6:a7:2c:3e:22:97:76:fb:07:
50:33:de:5d:a2:7c:f3:5d:46:b6:ca:50:4f:96:26:
3c:82:67:2f:6f:d6:69:fa:46:0d:38:b9:24:e5:e8:
21:e2:8c:ed:db:b8:c3:1f:9a:cf:f6:b8:2a:6f:14:
03:2a:0d:f9:5c:75:a7:54:9c:ea:75:46:0d:9b:87:
f1:04:b6:ad:d1:ff:00:50:6c:98:5d:2a:51:45:52:
11:30:55:44:c2:ac:a1:f1:49:b5:00:f1:9c:d6:b1:
5e:8d:c7:4d:87:1b:70:9e:51:35:27:3c:14:50:bc:
51:08:a5:ea:e6:85:4f:e9:67:ed:19:27:ef:d3:03:
cb:f1:d0:dd:4d:fc:56:9d:bd:3b:62:be:8f:dc:d8:
e9:4a:e9:f4:7b:0b:09:ac:ea:af:46:9f:ea:75:b1:
63:c6:cb:c2:bb:97:d4:13:65:2c:a1:57:da:5a:f3:
7b:ef:46:0e:1e:0d:da:e0:cf:68:7d:a3:cd:f6:d6:
e4:9b:5f:14:86:40:0c:5e:e3:bb:e3:9d:90:10:00:
b9:c6:90:8c:e6:10:58:0f:50:61:54:a7:f6:c5:2f:
ab:86:2e:9d:a3:2d:7c:e6:0d:a8:c6:2d:f9:54:5d:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DF:07:91:83:EF:7B:CE:FF:BC:2E:E3:64:7D:AE:36:06:0F:27:50
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/gd8HkYPve87_vC7jZH2uNgYPJ1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.54.213.0/24
Signature Algorithm: sha256WithRSAEncryption
94:01:8e:b1:51:56:12:e5:c6:f6:62:e8:a0:4f:1a:2e:f2:75:
4b:21:f6:ba:64:74:c9:74:70:38:d1:dd:f7:09:a7:57:6d:8f:
01:e6:5a:35:3a:57:6e:c4:f6:3e:12:63:e6:4c:a8:89:20:c0:
11:5d:85:65:0f:af:f2:f1:3a:de:0c:6d:c4:7c:55:8a:ac:c2:
7f:1a:f6:7e:8c:cd:41:41:6f:46:b7:3d:db:90:17:d0:0e:2a:
c2:21:53:4c:9d:f2:a3:91:10:04:4b:89:b1:69:c7:77:09:bf:
bc:a4:f3:2d:fe:df:44:10:0f:f0:bf:d8:e6:50:19:74:b7:53:
82:ac:9f:79:12:89:a2:fd:fd:7d:c1:2c:ca:4f:70:98:5d:b3:
50:19:05:3e:f7:5d:a5:6d:e7:f5:b9:fb:79:7b:17:cd:27:dc:
63:bb:c0:c3:22:94:62:5a:7d:31:8f:1d:25:a4:3f:e2:25:f5:
dc:aa:f6:af:ff:7c:77:cf:a3:a1:0f:08:b0:91:a4:05:a8:b0:
44:ac:9c:f0:6e:be:19:1b:0d:d5:bd:fe:50:c9:43:b3:47:1c:
01:9b:8f:1f:d6:b6:b9:4d:83:5b:a6:13:81:3b:16:8d:66:93:
39:13:a6:04:a3:92:e1:09:13:a3:e5:d4:d9:56:7b:06:3f:1c:
cb:71:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-ams.rpki-client.org