Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/_1KxlQXxsJnMBbEANC7Bmw6t514.roa
File: _1KxlQXxsJnMBbEANC7Bmw6t514.roa (raw, json)
Hash identifier: sU82cA0PM/Raq9n9BOAe7VyTIbwxT1cqfa7AX8K0nXI=
Subject key identifier: FF:52:B1:95:05:F1:B0:99:CC:05:B1:00:34:2E:C1:9B:0E:AD:E7:5E
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: E52A1B
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/_1KxlQXxsJnMBbEANC7Bmw6t514.roa
Signing time: Tue 28 Jun 2022 20:39:02 +0000
ROA not before: Tue 28 Jun 2022 20:39:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 212.23.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15018523 (0xe52a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: Jun 28 20:39:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff52b19505f1b099cc05b100342ec19b0eade75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:26:29:e7:f6:a6:26:8b:90:0d:8a:1f:16:
e9:2e:98:98:5f:29:a7:1a:ca:ed:ce:c6:a3:67:d9:
ad:ed:31:d8:c7:6e:fe:3f:76:a9:a1:61:d8:70:91:
fc:e9:68:92:31:f0:38:c3:0e:95:f1:ce:56:e5:6b:
4c:d5:1e:26:a7:25:d8:01:c2:41:fe:bb:6d:db:eb:
7f:cc:97:81:16:2c:bf:05:4a:0f:e4:b6:f6:44:49:
84:48:74:67:cc:0b:8c:dc:d3:ae:e8:27:e2:32:41:
53:d8:79:47:16:4a:22:cb:73:10:69:7c:ff:19:46:
dd:49:65:98:7c:e8:e7:db:03:45:fb:ad:70:0c:0f:
97:18:2a:26:54:de:c9:04:7d:45:bf:ad:50:e3:dc:
d6:e0:ce:c1:48:1f:fa:bc:7c:18:62:0d:0a:99:a4:
4b:c9:8c:da:8e:12:bd:22:e1:f1:8d:0f:6c:a1:bd:
8e:f1:b0:e3:bc:e4:32:e4:77:03:5f:94:e8:0b:ee:
d7:46:21:a1:62:27:99:0a:18:a1:0d:63:ea:e7:31:
03:6a:ce:bd:fa:7d:f8:af:48:b6:e6:ee:08:18:d4:
69:10:fb:5d:88:e4:d4:9c:fb:ef:a9:78:93:ed:c7:
ea:67:90:52:5a:fa:02:c0:fc:c0:5d:12:ff:ab:2d:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:B1:95:05:F1:B0:99:CC:05:B1:00:34:2E:C1:9B:0E:AD:E7:5E
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/_1KxlQXxsJnMBbEANC7Bmw6t514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.206.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bd:f3:58:73:92:06:2f:67:55:2c:29:7e:0c:1f:c7:18:38:
12:25:a2:95:ea:aa:b7:3f:e3:f0:a4:41:d9:0d:f7:92:61:6f:
53:57:da:c1:f5:b7:a6:55:8f:ed:d9:72:76:98:96:df:df:00:
ee:91:8c:6e:20:93:4b:25:2c:52:53:25:dd:61:8e:81:7c:89:
30:a0:7b:06:b0:94:88:34:a2:c0:b5:4b:df:e0:df:f4:56:ac:
9d:28:72:e8:1f:40:a5:e3:0e:33:07:65:23:9a:eb:81:da:b0:
fe:12:f7:53:23:f5:28:d4:80:6f:53:81:40:e0:f6:d6:c2:c9:
ad:2c:56:84:6c:6e:2d:a1:3d:50:31:b2:4c:e9:26:c2:6f:8c:
a1:d3:2e:25:06:80:55:49:80:c7:60:18:18:35:8d:45:5c:8a:
12:d3:43:42:db:06:b8:ce:80:7e:1b:bc:28:aa:04:33:8b:d9:
63:36:44:a5:20:75:d1:03:40:7f:47:b0:e1:1c:3a:3c:1d:9f:
f9:e8:9d:6d:68:49:6d:5a:73:ba:06:b3:2c:77:21:09:75:7a:
8b:f0:bb:ee:93:ba:29:3c:3d:36:5c:d3:31:f2:74:a2:66:36:
7c:f4:f8:15:06:4f:00:e5:51:7a:bb:f5:34:73:d0:89:bd:38:
82:da:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:57 2023 by rpki-client on console-fra.rpki-client.org