Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/Yi8XOLnCu3e7CEiDbL8T4oAHyRM.roa
File: Yi8XOLnCu3e7CEiDbL8T4oAHyRM.roa (raw, json)
Hash identifier: O4rA8EEdIWrg7YHAHKNLHpbBZ2U5wCif/mqoeBBK/R8=
Subject key identifier: 62:2F:17:38:B9:C2:BB:77:BB:08:48:83:6C:BF:13:E2:80:07:C9:13
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 862449
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/Yi8XOLnCu3e7CEiDbL8T4oAHyRM.roa
Signing time: Sat 01 Jan 2022 01:51:08 +0000
ROA not before: Sat 01 Jan 2022 01:51:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49029
IP address blocks: 212.23.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8791113 (0x862449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Jan 1 01:51:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=622f1738b9c2bb77bb0848836cbf13e28007c913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:86:20:46:c1:13:2a:ad:f1:5d:c7:7a:df:
03:c7:7e:b1:5b:86:17:5a:d5:3c:f5:28:9a:e3:2d:
e3:62:1c:ea:3c:18:b8:58:8f:2b:ca:75:78:df:45:
ac:3d:ec:0c:de:ac:8e:6f:a3:44:ec:8e:2c:52:aa:
43:83:90:a1:33:bc:28:e4:78:59:73:bc:03:ac:26:
b4:77:37:74:30:fb:c6:77:b1:82:86:d0:34:9a:91:
20:c6:fb:53:03:8c:11:ed:f2:f2:7c:28:70:f9:24:
84:be:4a:f5:2e:6d:87:48:39:f4:f2:d9:29:e9:3a:
cc:29:f2:8d:1d:e6:11:a2:38:f3:cf:ea:57:b9:9e:
2d:28:b3:bd:63:b4:ea:09:3e:6a:36:7e:be:a1:5e:
1d:9f:dd:ed:20:76:59:78:dd:d8:27:df:47:a3:e6:
3e:53:05:81:78:70:7a:49:20:de:be:f6:14:0f:3c:
5d:dc:eb:fe:48:1d:15:df:a0:34:9d:84:6b:6d:1b:
a7:d2:c5:38:79:24:9b:21:37:32:a1:28:fa:4f:01:
ee:cb:8e:51:4e:c3:e2:c8:6b:e6:f1:e6:9e:d4:d6:
99:cb:6d:c4:92:27:fd:43:41:9e:0c:5b:51:72:83:
fc:cd:bb:e9:c3:de:4e:fd:5d:df:74:bb:b3:82:dc:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2F:17:38:B9:C2:BB:77:BB:08:48:83:6C:BF:13:E2:80:07:C9:13
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/Yi8XOLnCu3e7CEiDbL8T4oAHyRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.209.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b8:71:ff:03:15:fe:bb:1a:0a:2b:69:0a:4d:c5:aa:ba:2b:
94:de:85:66:55:b8:5e:3a:90:f0:75:48:dd:ec:21:48:aa:98:
a3:47:eb:e5:a6:1c:a6:93:d8:3e:54:4d:9e:ee:e6:41:29:6b:
a9:1e:9a:c0:8d:ca:fc:df:24:d0:bd:3c:79:36:98:25:96:10:
a4:ed:ff:5e:a7:9f:5f:29:7f:30:c3:52:33:76:09:58:5e:39:
24:3b:49:80:f3:91:ce:3d:ef:25:56:33:b4:29:07:a0:cb:b7:
3f:87:df:89:c3:f4:65:06:5b:83:a9:c5:f5:5b:ca:de:ff:29:
26:c4:0e:a7:4e:11:10:2f:23:71:8c:7e:0f:cc:cb:ca:b4:35:
c4:c5:27:73:4c:31:e2:9c:7a:93:0c:33:dc:91:1a:12:ef:8b:
ee:79:29:bb:e3:bc:7b:ae:14:89:d5:98:e0:75:a5:51:92:2f:
5b:3c:fa:3a:9d:8d:eb:99:77:af:60:21:8e:7b:e3:d2:a4:d5:
5b:77:e8:f5:ae:af:05:5b:c7:c6:69:e4:68:72:6e:59:9f:40:
df:86:25:55:9d:f1:cd:ca:e3:3c:cd:69:7e:54:b9:d7:09:4b:
12:10:7f:d9:d2:8e:4b:37:29:46:09:6c:ed:24:25:bd:75:ae:
23:7c:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:17 2023 by rpki-client on console-ams.rpki-client.org