Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/jxggBg4peVrv-N65_o0PNMFg0ZE.roa
File: jxggBg4peVrv-N65_o0PNMFg0ZE.roa (raw, json)
Hash identifier: fdtuo+dJVsa24/+rKsDYSDD5OwOlzm6YyT5ZY2v3+tA=
Subject key identifier: 8F:18:20:06:0E:29:79:5A:EF:F8:DE:B9:FE:8D:0F:34:C1:60:D1:91
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 0943EBD9
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/jxggBg4peVrv-N65_o0PNMFg0ZE.roa
Signing time: Sat 01 Jan 2022 03:55:33 +0000
ROA not before: Sat 01 Jan 2022 03:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43940
IP address blocks: 212.200.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155446233 (0x943ebd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jan 1 03:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f1820060e29795aeff8deb9fe8d0f34c160d191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d5:e6:bb:a6:e6:0c:ef:f8:cf:7d:04:ff:4b:
cd:60:90:a1:83:d2:94:17:c6:c4:a5:cb:31:68:83:
e5:a2:c9:9f:7e:eb:8b:de:36:a1:68:7a:4d:ad:a9:
a4:e5:a9:ce:bb:2d:9e:f0:c5:96:3c:38:84:6c:21:
e3:2c:a0:9d:5e:ae:57:1b:89:ce:e5:85:16:8c:62:
dd:de:1c:a1:5a:7b:4e:e8:43:68:dd:6d:5a:d8:6a:
b4:dc:4b:88:e8:b0:d4:b6:93:72:5d:a6:2a:3a:7b:
96:ea:59:91:33:1c:22:dd:d1:f3:a8:eb:3b:dd:2f:
7e:0a:49:27:9d:d7:9a:ee:d4:11:61:06:98:b9:d7:
d3:52:8f:40:e3:78:46:8a:37:01:64:96:2a:27:5f:
45:8a:69:20:7d:d3:11:4c:a6:c4:68:23:88:16:cf:
35:9b:62:af:d3:74:be:fb:a4:c7:e8:cb:57:49:f2:
ba:24:a8:af:4c:33:d1:76:a7:fd:70:8c:0e:2d:8f:
7b:04:e7:0d:94:16:19:92:f8:19:18:a0:48:60:04:
d2:9b:c6:8f:cb:0a:08:04:04:2f:72:6b:9a:13:34:
ab:75:32:3a:e2:9d:57:41:fb:f8:63:c4:b5:17:a0:
39:1f:c5:c3:91:79:e1:94:06:80:ea:70:c2:b5:2f:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:20:06:0E:29:79:5A:EF:F8:DE:B9:FE:8D:0F:34:C1:60:D1:91
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/jxggBg4peVrv-N65_o0PNMFg0ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
74:af:50:12:63:1f:07:33:7d:c3:70:bf:8c:94:df:ba:60:e8:
a5:6e:04:d0:ac:61:29:43:b7:74:14:7d:15:28:f6:9e:c8:8f:
75:b1:3a:e1:3b:91:69:81:8d:fe:c7:75:b3:3e:ce:96:b3:e3:
45:10:4f:95:cb:0a:46:9b:4c:8b:6b:4c:ba:61:4e:dc:43:97:
60:0c:f5:9e:fc:7e:d1:ef:f8:ca:20:f6:74:5b:a7:ed:a3:a6:
e4:25:33:c4:42:24:40:0f:a1:4a:f1:ad:a4:bc:ab:50:06:a6:
1e:9e:8e:17:81:dd:ca:52:18:45:29:01:09:ce:bd:53:49:87:
a5:3c:ba:9c:32:2d:b0:4f:8a:f9:6a:e7:ac:a9:f4:47:f9:cd:
dc:d6:28:81:76:8b:78:83:ac:e5:05:64:67:85:83:ab:25:10:
ff:30:08:a0:da:e9:2e:14:84:96:d4:29:7c:95:38:39:d9:b7:
7d:bf:ea:f2:d7:64:dc:fd:82:ac:da:fd:16:9c:3c:8a:fa:c1:
0c:83:3d:38:7e:ce:48:c5:3d:35:c4:35:ec:c2:3f:4b:77:51:
26:34:7b:55:73:c6:7c:6a:04:6e:14:06:1b:ff:25:57:51:e5:
92:74:58:26:c4:6a:58:05:36:20:6c:9e:c5:94:32:6e:7c:5a:
20:e0:45:f1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECUPr2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OWIxMzIwZmJjMjRkNmY0MzY2Y2I2NGZjZjVlZDJkN2IxYjZiZGY3MB4XDTIyMDEw
MTAzNTUzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGYxODIwMDYwZTI5
Nzk1YWVmZjhkZWI5ZmU4ZDBmMzRjMTYwZDE5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO3V5rum5gzv+M99BP9LzWCQoYPSlBfGxKXLMWiD5aLJn37r
i942oWh6Ta2ppOWpzrstnvDFljw4hGwh4yygnV6uVxuJzuWFFoxi3d4coVp7TuhD
aN1tWthqtNxLiOiw1LaTcl2mKjp7lupZkTMcIt3R86jrO90vfgpJJ53Xmu7UEWEG
mLnX01KPQON4Roo3AWSWKidfRYppIH3TEUymxGgjiBbPNZtir9N0vvukx+jLV0ny
uiSor0wz0Xan/XCMDi2PewTnDZQWGZL4GRigSGAE0pvGj8sKCAQEL3JrmhM0q3Uy
OuKdV0H7+GPEtRegOR/Fw5F54ZQGgOpwwrUvYf8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSPGCAGDil5Wu/43rn+jQ80wWDRkTAfBgNVHSMEGDAWgBTpsTIPvCTW9DZs
tk/PXtLXsba99zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZiRXlEN3drMXZRMmJMWlB6MTdTMTdHMnZmYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGQvZGYxY2I1LTVmNDgtNDZhMC1hNzZlLWQzZTI4MDBiZDY0MC8x
L2p4Z2dCZzRwZVZydi1ONjVfbzBQTk1GZzBaRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQv
ZGYxY2I1LTVmNDgtNDZhMC1hNzZlLWQzZTI4MDBiZDY0MC8xLzZiRXlEN3drMXZR
MmJMWlB6MTdTMTdHMnZmYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANTI9jANBgkqhkiG9w0BAQsFAAOC
AQEAdK9QEmMfBzN9w3C/jJTfumDopW4E0KxhKUO3dBR9FSj2nsiPdbE64TuRaYGN
/sd1sz7OlrPjRRBPlcsKRptMi2tMumFO3EOXYAz1nvx+0e/4yiD2dFun7aOm5CUz
xEIkQA+hSvGtpLyrUAamHp6OF4HdylIYRSkBCc69U0mHpTy6nDItsE+K+WrnrKn0
R/nN3NYogXaLeIOs5QVkZ4WDqyUQ/zAIoNrpLhSEltQpfJU4Odm3fb/q8tdk3P2C
rNr9Fpw8ivrBDIM9OH7OSMU9NcQ17MI/S3dRJjR7VXPGfGoEbhQGG/8lV1HlknRY
JsRqWAU2IGyexZQybnxaIOBF8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:02 2024 by rpki-client on console-ams.rpki-client.org