Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/UVkaJhoYV8yH2vlEurtQWQQtBCc.roa
File: UVkaJhoYV8yH2vlEurtQWQQtBCc.roa (raw, json)
Hash identifier: NajKk/0FSYQbVS2mePvi+Kur8fdLwuLH4pxyp3HvEQg=
Subject key identifier: 51:59:1A:26:1A:18:57:CC:87:DA:F9:44:BA:BB:50:59:04:2D:04:27
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 07C018B4
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/UVkaJhoYV8yH2vlEurtQWQQtBCc.roa
Signing time: Tue 22 Mar 2022 07:33:47 +0000
ROA not before: Tue 22 Mar 2022 07:33:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 212.11.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130029748 (0x7c018b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Mar 22 07:33:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51591a261a1857cc87daf944babb5059042d0427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:39:ee:4e:d8:22:1b:cb:a7:00:19:db:8f:
ca:a3:3c:c9:5d:08:57:d2:3a:64:9d:3c:8d:ab:92:
29:07:92:b1:d8:b6:d0:f2:bd:84:08:57:ac:12:3f:
47:8f:d1:d4:1b:d1:79:75:7b:16:90:69:59:2e:aa:
37:0d:7b:5f:b8:83:f2:50:f2:2f:c5:26:7b:ae:94:
b8:8b:92:6b:30:94:9a:f6:63:64:e5:13:82:17:95:
37:b1:dc:52:17:10:2a:72:9c:68:19:56:08:65:d0:
34:c4:ba:87:78:74:50:2d:d2:da:3d:5e:15:06:f6:
29:ea:78:f7:d7:29:09:73:71:ec:f1:fb:11:80:5f:
6f:11:13:05:f5:ae:78:9c:0c:a1:67:ed:7a:81:dd:
2c:bc:ea:17:c3:eb:82:21:06:61:44:3e:74:c2:94:
89:5a:3a:94:8d:fb:52:ff:f5:ca:23:10:33:6e:09:
67:e4:2a:fd:65:f8:4b:d6:b0:70:ae:04:df:41:e8:
9f:d9:e5:17:17:a6:87:6b:6e:63:cf:93:c9:c1:2e:
66:1f:ed:84:46:10:62:d6:a0:0f:a7:fe:e8:ea:22:
59:a0:7c:df:25:2e:74:da:f8:8f:87:60:a3:c2:5c:
0b:95:98:a7:13:bb:f2:8e:6d:c0:30:f6:f8:23:37:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:59:1A:26:1A:18:57:CC:87:DA:F9:44:BA:BB:50:59:04:2D:04:27
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/UVkaJhoYV8yH2vlEurtQWQQtBCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.64.0/24
Signature Algorithm: sha256WithRSAEncryption
92:71:da:ed:61:ab:79:2e:86:bb:bb:e2:7e:38:9e:b5:5f:5e:
0e:43:4d:9c:65:f0:a3:b3:77:fc:78:c2:9b:13:c8:c6:55:10:
8b:9c:cf:16:b4:6b:9e:97:aa:b1:91:7a:2c:39:84:a1:40:dd:
5c:a8:07:5a:56:71:09:e4:38:58:ab:8c:4b:e1:19:eb:d3:bc:
12:90:8d:4c:86:e3:ad:47:79:50:ae:3e:5b:ba:10:34:1e:1c:
12:9a:e4:07:4b:b4:1b:36:26:a2:96:63:f6:74:43:5b:3d:23:
45:57:e4:46:e4:d1:97:56:11:b9:3d:58:db:3d:8f:55:85:ce:
40:72:8c:2d:13:5e:37:a2:c7:23:b2:a3:eb:12:9a:fa:c1:99:
a2:36:4e:7f:60:98:db:64:ec:64:17:c1:36:bc:01:92:36:da:
df:c5:b7:95:e7:05:57:e1:59:4d:25:c7:ee:25:75:8d:be:8b:
93:85:a1:14:d9:7e:fd:2f:97:67:2f:59:92:eb:68:af:5f:f9:
f8:b2:ee:7e:03:3e:f7:2d:7f:ab:39:fb:88:4f:40:87:39:ed:
de:10:3b:6e:32:55:1e:7d:f6:6f:6e:06:89:cc:99:4b:b6:b8:
3a:30:99:64:5a:b4:a6:43:d5:f1:e0:d8:a3:7d:f9:ff:6f:68:
54:61:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org