Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/rg1-bSb1gpUaz2DZoFD-F2DnKrY.roa
File: rg1-bSb1gpUaz2DZoFD-F2DnKrY.roa (raw, json)
Hash identifier: BU1Uhjj/7qgCtiBzEBkA3eqJ5twnXJ+vDDMOJthZ/k8=
Subject key identifier: AE:0D:7E:6D:26:F5:82:95:1A:CF:60:D9:A0:50:FE:17:60:E7:2A:B6
Certificate issuer: /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial: 38774605
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/rg1-bSb1gpUaz2DZoFD-F2DnKrY.roa
Signing time: Fri 18 Mar 2022 16:43:38 +0000
ROA not before: Fri 18 Mar 2022 16:43:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50376
IP address blocks: 212.6.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947340805 (0x38774605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Validity
Not Before: Mar 18 16:43:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae0d7e6d26f582951acf60d9a050fe1760e72ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:19:c8:ee:7d:5a:bb:1a:b5:e3:d4:c9:1b:
d4:39:0d:03:2b:81:66:14:34:b2:c2:ea:69:b6:44:
2b:c4:27:57:08:ec:dc:42:8d:c0:3e:bf:cb:42:82:
14:7f:32:8a:a2:fa:b7:5d:56:2e:e0:f7:4d:42:74:
3f:5c:18:db:32:2b:6b:81:75:a7:d7:a4:37:57:7f:
07:a6:40:e8:19:c8:da:4f:d1:65:a7:64:2c:f0:69:
78:77:61:53:12:c5:24:bc:bc:c4:5f:e9:f0:f1:e8:
e9:0e:b1:aa:67:88:25:fc:54:ca:4c:f2:b2:fb:1f:
1d:7d:a8:ff:fd:d1:ed:45:ff:e5:97:ab:48:41:74:
1a:8e:2a:51:14:50:81:c4:b9:8f:23:dc:c6:47:5c:
9d:9e:70:ed:2f:1f:63:c7:59:92:15:1d:94:01:db:
49:95:24:ac:37:4e:9f:70:23:6b:bc:ca:0a:c5:a2:
21:9c:18:29:93:df:a4:97:a6:ee:a8:19:41:81:0c:
42:1d:63:51:b7:a6:7f:91:53:16:c6:67:e2:fb:1d:
8a:a4:aa:1f:aa:94:9f:9d:14:76:48:67:bc:e5:da:
bc:b3:8f:b2:cc:89:3e:c0:4e:fe:4b:96:7b:ed:3d:
33:e8:55:1a:55:98:f6:da:b6:67:13:7a:2a:fd:e9:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0D:7E:6D:26:F5:82:95:1A:CF:60:D9:A0:50:FE:17:60:E7:2A:B6
X509v3 Authority Key Identifier:
keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/rg1-bSb1gpUaz2DZoFD-F2DnKrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f8:a6:a7:ca:20:98:7c:27:9a:11:27:85:15:4d:df:f6:03:
a1:ce:25:22:97:71:dd:1c:a8:2b:f8:03:e3:db:8b:13:bc:59:
01:4d:7e:b4:0c:22:cd:39:8d:d3:37:7a:e5:6f:3e:ee:57:34:
4b:ec:c4:e2:d5:04:42:63:58:ec:c1:e2:78:a9:52:d4:4a:1f:
3b:75:77:a3:26:5c:72:93:a4:35:ee:70:33:f8:5b:aa:a5:60:
c4:47:b6:82:58:e4:4f:8f:f7:61:35:ab:70:dc:89:63:ce:a2:
d8:2f:55:9d:18:4c:11:ef:38:ba:f4:58:f7:92:2d:5b:c4:48:
96:2d:a5:99:83:31:2b:16:2d:20:95:82:5d:76:51:bf:04:9f:
32:8f:0b:b7:e0:b9:d7:f6:cc:f9:29:23:bb:c0:6d:f7:58:56:
cc:0f:87:a0:9d:30:89:ad:5f:17:db:5a:0c:36:b9:eb:bb:8f:
98:77:f4:51:a6:61:61:bd:5c:f6:db:e0:9b:fe:94:32:2e:e5:
ea:b4:03:5c:34:ab:55:e0:40:a3:15:2c:3c:7f:6f:95:c8:7d:
d2:a5:78:46:d2:27:92:46:e8:29:b1:9f:db:1d:ca:27:94:fb:
eb:86:5b:b1:0e:35:0c:4e:96:f3:4c:c9:30:0c:f6:9e:22:ec:
17:d6:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:52 2024 by rpki-client on console-ams.rpki-client.org