Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/eLyi7w69M8PhLOkvMCQICk3PDXc.roa
File: eLyi7w69M8PhLOkvMCQICk3PDXc.roa (raw, json)
Hash identifier: r+bgtGIJhBxrZsLXP8nxJseYOJstP3IIb/CvLBLTmfs=
Subject key identifier: 78:BC:A2:EF:0E:BD:33:C3:E1:2C:E9:2F:30:24:08:0A:4D:CF:0D:77
Certificate issuer: /CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
Certificate serial: 24BCBC
Authority key identifier: 63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/eLyi7w69M8PhLOkvMCQICk3PDXc.roa
Signing time: Wed 04 May 2022 23:37:01 +0000
ROA not before: Wed 04 May 2022 23:37:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.23.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407612 (0x24bcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
Validity
Not Before: May 4 23:37:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78bca2ef0ebd33c3e12ce92f3024080a4dcf0d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a8:b5:1d:45:7c:61:bc:13:42:fc:1f:7d:aa:
07:d4:15:ca:a9:31:e0:15:b1:8b:44:76:80:c0:ef:
17:a8:de:d4:5c:9b:17:a4:35:82:02:64:23:4f:58:
d3:dc:89:fc:74:fe:d0:98:a6:07:72:0b:12:1b:f9:
59:ed:f3:f4:af:d8:21:b9:3b:c9:58:32:d4:9f:6e:
f3:0b:46:5a:ca:f1:b6:4f:46:da:ce:fd:df:0a:fc:
d6:d1:9e:55:db:35:b0:20:04:66:f8:1c:4c:77:dc:
98:35:4f:ca:62:e6:95:23:9b:44:18:ad:fb:c6:49:
6b:e3:b2:5c:b2:b4:af:d6:f8:c0:33:6e:1d:6b:cb:
66:49:a3:a5:b0:44:69:b8:52:fc:8b:f3:d4:c4:f6:
d9:4c:7c:09:7d:07:da:65:3e:68:ce:5b:2c:fe:8a:
20:4b:cf:12:2f:1f:d3:c6:ab:1a:31:49:d0:77:29:
84:38:c8:5b:08:ed:4f:5c:4c:a3:41:ae:2c:a3:4c:
2d:e9:6b:ee:b2:1b:13:b5:26:dc:aa:00:07:1a:78:
8f:21:58:cc:8d:86:e0:31:0b:74:0e:45:ba:38:fb:
fa:ce:19:e8:6a:cc:b5:4a:d0:be:13:b7:40:36:e6:
1a:c4:50:86:c1:77:03:62:9d:0b:1e:9b:0e:50:70:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:A2:EF:0E:BD:33:C3:E1:2C:E9:2F:30:24:08:0A:4D:CF:0D:77
X509v3 Authority Key Identifier:
keyid:63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/eLyi7w69M8PhLOkvMCQICk3PDXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bb:93:15:2e:b5:2a:c7:54:6f:46:89:fe:8d:b2:a3:a2:03:
9f:2a:63:55:ac:f2:95:46:e1:03:27:fa:c5:3d:de:16:28:33:
8e:e9:08:68:a9:7c:60:1d:7f:9e:05:72:42:28:3c:ca:4e:2d:
42:44:1f:8b:f9:d3:47:76:cb:d9:dd:59:2d:c8:a8:a1:a8:4f:
22:93:22:9a:8a:4e:d9:d6:76:dc:0f:4f:f5:4b:c5:67:09:e8:
8b:7e:4c:80:52:27:b8:4c:22:10:ea:2f:fe:3d:e6:4a:a8:6c:
8c:29:df:ab:17:5f:b4:12:ac:f6:97:b5:95:80:40:a5:d1:29:
3f:b1:52:6f:c8:42:70:85:e2:4a:3d:a1:05:a5:9c:2b:74:be:
b9:6f:07:58:26:53:09:8b:70:56:e8:2f:98:11:85:73:ea:5c:
52:57:03:35:52:0b:5f:d4:94:9f:04:42:37:39:cc:be:7a:74:
de:a9:6d:25:16:10:0c:63:e4:6d:60:d1:5a:37:bf:2d:f4:26:
fe:de:4a:62:3f:71:eb:71:74:f4:00:7d:74:d6:7b:b6:cc:b7:
68:6a:a0:fa:89:10:2a:52:32:6b:94:40:72:1f:3e:78:86:5c:
37:77:0e:17:40:2e:03:11:4b:9b:37:e4:56:58:f9:0b:6f:9d:
6e:73:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:52 2023 by rpki-client on console-ams.rpki-client.org