Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/9z7C-Fdg06qPif1fXgtF_zL02wo.roa
File: 9z7C-Fdg06qPif1fXgtF_zL02wo.roa (raw, json)
Hash identifier: vtBL2voAQhIKkfTbvSBot0OPQJGYn/29aV7Q4WhO4Yo=
Subject key identifier: F7:3E:C2:F8:57:60:D3:AA:8F:89:FD:5F:5E:0B:45:FF:32:F4:DB:0A
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 055A04AA
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/9z7C-Fdg06qPif1fXgtF_zL02wo.roa
Signing time: Tue 01 Feb 2022 07:29:26 +0000
ROA not before: Tue 01 Feb 2022 07:29:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213176
IP address blocks: 212.59.64.0/24 maxlen: 24
212.59.67.0/24 maxlen: 24
212.59.70.0/24 maxlen: 24
212.59.66.0/24 maxlen: 24
212.59.69.0/24 maxlen: 24
212.59.65.0/24 maxlen: 24
212.59.68.0/24 maxlen: 24
209.35.224.0/24 maxlen: 24
209.35.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89785514 (0x55a04aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Feb 1 07:29:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f73ec2f85760d3aa8f89fd5f5e0b45ff32f4db0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:08:81:64:01:e2:17:3e:7b:32:62:51:a5:
c6:b7:ea:3c:c7:e8:e1:1f:e4:9f:71:62:98:38:99:
e9:db:40:76:09:be:b2:1c:d9:80:0f:18:86:f1:71:
46:3b:e8:0d:7f:e7:14:31:fe:46:69:22:4d:cd:e2:
ce:dc:c9:e5:8c:e8:ac:cf:9b:5d:da:4f:b5:a7:e5:
a3:3e:bc:a5:87:ff:d7:24:d1:d0:3f:bf:27:32:c3:
5a:09:72:94:bd:e9:59:06:a8:c6:4f:79:e9:81:5d:
b1:6b:35:35:29:38:a9:45:27:13:8d:cf:09:39:ed:
b9:c8:4b:1c:bb:45:65:0e:4e:6c:18:7a:9f:49:b8:
33:df:92:7f:9e:6e:be:4a:65:ce:b6:f0:9b:d9:5e:
57:80:e5:c6:0b:db:30:6d:f0:39:0f:29:7f:52:51:
48:d4:09:c0:fb:07:34:1b:ab:20:51:6b:e1:24:26:
a7:c7:b1:20:7a:9b:01:b1:55:1d:ea:6f:01:84:97:
1f:cd:8b:0c:05:53:5a:56:49:a3:3a:cb:c9:b5:36:
12:c0:fb:2c:bd:c0:be:9f:6d:04:ea:5a:5d:27:65:
6d:60:01:7e:ae:53:ec:93:a8:7e:41:b2:b8:4c:8e:
ac:6a:72:3e:c9:9c:83:79:b1:48:15:fd:00:71:73:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3E:C2:F8:57:60:D3:AA:8F:89:FD:5F:5E:0B:45:FF:32:F4:DB:0A
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/9z7C-Fdg06qPif1fXgtF_zL02wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.35.224.0/23
212.59.64.0-212.59.70.255
Signature Algorithm: sha256WithRSAEncryption
12:d8:56:89:bd:42:b8:95:52:c7:66:60:47:32:74:8b:4f:ac:
bc:f0:19:30:07:48:ea:83:38:8d:1f:a4:a4:8a:52:8f:2c:e0:
5f:33:e0:3d:f7:15:20:f7:85:bf:97:a8:d8:97:4d:15:67:1b:
77:12:73:4b:26:d6:d3:94:fd:55:49:c3:19:f4:8e:29:9f:15:
6c:40:e8:54:11:6a:11:4d:9f:40:1b:6c:0d:75:6c:cd:5b:ec:
35:43:c7:ef:85:af:1a:ae:e1:bb:08:27:3f:b8:e8:e7:9b:c4:
da:e3:81:d5:07:01:ed:36:9c:3b:fb:f4:96:61:99:79:28:87:
bb:28:31:76:ff:78:d4:16:c2:d1:bb:f5:8a:47:0c:b3:00:e4:
7a:93:b2:70:10:d0:7e:94:9e:e4:16:88:eb:db:30:d7:8b:e0:
08:23:c9:27:2f:ec:01:23:be:92:b4:38:58:91:f9:ad:56:dc:
29:82:8d:ab:c3:fa:2f:0b:1a:fd:06:9d:3b:84:e2:fb:95:62:
2b:f1:65:4d:91:27:36:e5:95:87:69:41:2b:bd:68:e4:2a:0d:
e0:50:91:c8:ee:b5:16:66:47:48:7b:ae:c2:da:8c:65:72:93:
a2:c3:42:40:d3:d6:b3:6e:06:77:77:ea:da:31:23:d6:19:88:
2b:df:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-fra.rpki-client.org