Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/pjd94U74aI27ekEd-aTOZ4mvARk.roa
File: pjd94U74aI27ekEd-aTOZ4mvARk.roa (raw, json)
Hash identifier: e32zsMd4If5tYhlsfOOrtiZHtgJa/An72qZ69ke3GmE=
Subject key identifier: A6:37:7D:E1:4E:F8:68:8D:BB:7A:41:1D:F9:A4:CE:67:89:AF:01:19
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 076C4986
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/pjd94U74aI27ekEd-aTOZ4mvARk.roa
Signing time: Thu 17 Feb 2022 10:31:50 +0000
ROA not before: Thu 17 Feb 2022 10:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.11.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124537222 (0x76c4986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Feb 17 10:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6377de14ef8688dbb7a411df9a4ce6789af0119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:ca:a4:04:fc:89:d4:1e:47:5b:fa:b4:f5:
e8:e7:e4:0d:f6:53:07:44:d2:c5:4a:91:0b:f0:f7:
5a:03:f2:8d:79:2d:06:1b:72:5b:f0:de:9f:fb:3f:
36:8e:dd:e0:8f:6c:33:9d:1e:22:23:fb:6d:05:6f:
4e:e9:a8:9c:49:56:dd:1d:5b:74:3b:9d:1d:c9:31:
1e:03:ec:3a:88:39:2c:66:b5:11:b3:02:47:b1:a2:
09:70:50:79:23:f7:fb:52:15:8d:c2:19:8a:78:38:
f7:4e:bb:75:0f:bc:42:9a:8c:73:9e:0d:5e:10:99:
ee:f7:6e:12:22:f3:a5:86:3a:5b:df:e9:61:e9:82:
02:7b:a1:15:1e:4d:ad:6f:3c:f3:d0:93:f1:86:e5:
a7:1a:84:43:2c:be:83:82:fa:d0:69:08:3a:57:72:
e7:cd:5b:72:af:93:08:d4:c1:9b:12:2a:3f:70:ac:
58:38:d4:37:b8:8f:6b:66:39:c8:5a:83:e0:4d:ff:
73:6a:50:7b:2a:1f:84:d5:84:b8:39:8a:8d:a2:bd:
b8:be:69:3b:60:b1:4f:0a:80:53:cd:0d:22:4f:e7:
e4:1d:29:f7:32:c6:0a:26:03:72:ae:31:db:ce:9e:
5e:15:e0:ff:70:1d:77:d2:1e:82:e4:3b:ed:29:4b:
a9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:37:7D:E1:4E:F8:68:8D:BB:7A:41:1D:F9:A4:CE:67:89:AF:01:19
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/pjd94U74aI27ekEd-aTOZ4mvARk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:79:82:5f:83:06:4e:2c:c2:96:30:d8:11:83:53:fe:7f:4b:
b9:ca:69:e4:6f:95:13:5b:a9:88:5f:d9:7f:ce:e6:15:60:68:
0f:a7:ec:78:a2:33:8e:2d:12:54:30:47:37:87:e1:13:67:30:
dd:7e:ed:5b:17:f1:b4:3b:1a:3c:c3:57:7e:c8:98:1f:a8:02:
b2:c0:23:ff:bb:29:27:91:4c:e2:62:79:f4:22:4e:bd:bc:09:
4e:bb:96:60:9e:c8:76:1e:d2:7e:34:99:31:d9:de:a6:44:bb:
e8:c6:cf:69:ab:37:fc:16:70:0a:e0:af:fc:af:4e:7c:a3:19:
cd:e2:bc:90:88:84:9b:31:90:4d:17:26:8d:f5:20:02:8f:cc:
26:a0:e3:3a:1c:5b:1c:cf:c3:4a:48:f0:9e:ed:4f:ff:53:ca:
74:ed:b5:66:09:ab:31:37:40:d1:97:da:3c:64:33:72:fd:55:
96:83:85:8b:57:36:0d:19:d7:71:2d:49:cc:a9:15:04:43:6e:
ff:64:e8:4b:24:ef:67:8c:ad:d2:99:4c:1c:63:7c:b8:ab:22:
5b:ef:7d:dc:eb:d3:74:19:7c:e3:41:57:21:8e:8e:72:58:98:
da:45:85:ec:cc:3a:79:88:ac:0a:2d:87:61:79:99:ef:b9:8e:
b7:45:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:37 2024 by rpki-client on console-fra.rpki-client.org