Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/6A5igVdWl77M0VIl4kYGOqIpzF4.roa
File: 6A5igVdWl77M0VIl4kYGOqIpzF4.roa (raw, json)
Hash identifier: bNB5wSsJ2ATCw2LuNwVP7wJe7e8mzipyo/n6D3dYGwc=
Subject key identifier: E8:0E:62:81:57:56:97:BE:CC:D1:52:25:E2:46:06:3A:A2:29:CC:5E
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 3497F20B
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/6A5igVdWl77M0VIl4kYGOqIpzF4.roa
Signing time: Tue 01 Mar 2022 12:14:01 +0000
ROA not before: Tue 01 Mar 2022 12:14:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60398
IP address blocks: 212.40.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882373131 (0x3497f20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Mar 1 12:14:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e80e6281575697beccd15225e246063aa229cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:f8:83:b1:76:96:2f:0f:95:21:72:89:4c:
b8:89:36:55:52:b3:d6:32:1c:92:73:72:ed:57:6e:
82:29:76:e7:be:64:5f:83:bd:2d:59:92:bd:d1:d6:
72:7b:c2:ae:48:74:9a:44:ed:8a:5c:a1:01:2a:37:
87:14:9d:08:36:6c:d6:e6:c6:5a:2d:25:6d:d2:b3:
06:4e:c4:d9:0d:37:b5:b5:0b:b7:19:f4:00:7b:1d:
c1:3b:46:99:57:e3:17:5b:ad:51:8c:d8:be:5b:98:
3c:d7:df:17:d8:ad:4a:63:be:0f:00:70:1c:6b:b0:
08:c3:fe:0a:25:80:10:a9:4d:50:a3:e3:f3:2f:19:
35:f5:4b:f3:b7:67:76:5c:5c:7d:bf:6c:91:3b:d3:
b3:b8:5e:c6:e1:2e:f8:0d:54:ae:cf:f5:a3:62:77:
1a:1a:f9:2a:60:f5:2b:01:3a:15:b4:df:f3:84:aa:
81:e5:ae:c1:b4:bf:91:f8:6c:bb:b3:ba:f5:c4:07:
3f:06:bc:a0:89:d7:a5:ee:1b:80:78:35:18:c8:e6:
4e:26:d8:a5:9c:40:19:93:f7:8c:5d:8e:56:2e:ed:
6b:f1:3d:4e:30:b3:a9:71:4a:21:d6:a0:d0:21:21:
ce:17:fe:72:31:e7:4d:4e:4d:cd:34:2f:c2:92:44:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0E:62:81:57:56:97:BE:CC:D1:52:25:E2:46:06:3A:A2:29:CC:5E
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/6A5igVdWl77M0VIl4kYGOqIpzF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.40.140.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5c:0e:0f:45:85:65:de:3b:40:41:f1:a4:fe:3f:a5:5f:01:
84:8f:ff:4c:34:10:a3:cc:ae:1d:4c:3b:df:4c:80:0f:6c:23:
70:fa:f1:54:05:06:7d:11:f7:2d:c9:08:42:b7:08:fa:25:95:
63:01:e3:e3:45:0d:7b:6e:c4:b7:dd:55:28:92:30:d8:0b:93:
6c:6d:96:94:e9:3b:9d:cc:4a:80:65:1b:fd:27:7c:a5:25:8d:
c7:53:9d:c1:bf:8a:85:59:27:94:51:ef:81:38:12:4c:d4:e1:
4a:3d:88:db:99:41:ce:1b:58:55:73:24:b7:1c:73:a6:4a:26:
f1:58:ee:26:a5:5d:28:c6:15:64:97:0e:a6:0e:a5:44:25:ad:
69:a8:2e:60:49:a0:2c:aa:75:4b:4d:f1:56:24:83:5f:e2:85:
a9:80:11:71:e3:2c:88:63:b8:b7:a8:27:6a:be:9d:07:4d:17:
87:e9:d1:7a:af:64:e4:11:82:cd:92:c2:ff:0e:7d:b0:05:92:
5b:d8:2c:bd:07:ab:ac:25:74:f2:3b:b1:9f:8e:ef:9b:8d:3f:
b3:6b:eb:92:7a:09:3d:29:fa:9f:d0:4e:18:94:a8:9c:be:6e:
a3:99:02:2d:d5:7b:20:c4:ca:ff:6f:35:b8:c1:6d:fe:4a:c3:
a8:2f:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:13 2024 by rpki-client on console-fra.rpki-client.org