Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/rNj2hgvV5t8HMATJp96kXCOxeVw.roa
File: rNj2hgvV5t8HMATJp96kXCOxeVw.roa (raw, json)
Hash identifier: dv8z/69fmP4vwl2d8ovKEhLUSjdpzEuDiPjnrQvvkcc=
Subject key identifier: AC:D8:F6:86:0B:D5:E6:DF:07:30:04:C9:A7:DE:A4:5C:23:B1:79:5C
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 01824390412F067E16C562D2CF1756169809
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/rNj2hgvV5t8HMATJp96kXCOxeVw.roa
Signing time: Thu 28 Jul 2022 06:48:23 +0000
ROA not before: Thu 28 Jul 2022 06:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210329
IP address blocks: 212.115.109.0/24 maxlen: 24
212.115.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:90:41:2f:06:7e:16:c5:62:d2:cf:17:56:16:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jul 28 06:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acd8f6860bd5e6df073004c9a7dea45c23b1795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:cd:9d:98:e2:2a:31:f2:62:f8:fe:10:3f:
bb:b5:cb:68:78:03:b9:91:2d:06:ea:d9:c5:11:69:
15:30:23:be:4b:81:5c:e9:06:be:2b:70:62:c1:90:
09:40:35:d8:32:ee:ea:f3:99:da:18:e4:eb:e7:85:
bc:6c:ce:52:a0:0f:43:56:b4:66:d6:00:1a:a8:f2:
76:a8:de:46:11:1f:c8:38:55:b1:51:4e:59:d8:9f:
7d:c2:28:60:5c:26:35:c9:7c:13:fd:f4:e5:b7:7a:
95:9f:ab:d8:e8:a1:32:55:b0:e9:6d:44:6c:88:8a:
92:28:86:23:50:be:db:36:44:25:ac:b0:ba:44:e6:
66:66:ee:6f:ad:db:ac:20:49:b8:85:c0:69:41:b6:
d4:30:b5:71:e2:4a:ab:98:2f:10:4c:79:2a:3b:bf:
6f:c0:d0:58:ad:87:3a:67:b7:d2:87:69:00:93:05:
8f:94:71:47:ef:6d:5e:e8:0b:ab:e9:ca:8b:cd:bb:
87:53:4a:33:28:81:ad:21:a5:1f:91:14:ff:63:e2:
6b:15:c7:a8:10:46:f9:ec:d9:d1:31:19:79:70:fe:
b8:31:f5:44:3c:3a:77:ab:d8:42:7c:94:cd:f0:67:
04:d3:d9:dc:72:a8:a6:f6:fb:da:0a:7f:ba:df:e8:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D8:F6:86:0B:D5:E6:DF:07:30:04:C9:A7:DE:A4:5C:23:B1:79:5C
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/rNj2hgvV5t8HMATJp96kXCOxeVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.108.0/23
Signature Algorithm: sha256WithRSAEncryption
e8:c2:f1:6c:35:ed:46:3b:18:33:3e:8d:db:9f:6f:a6:f9:60:
b4:47:bb:19:b8:99:18:d8:35:1c:4f:3e:a3:1c:b5:c7:24:07:
a7:8e:e6:59:c9:00:6c:94:af:65:e1:33:27:f2:e0:5e:89:bf:
f7:91:68:a8:0b:18:40:f1:47:34:f5:22:fd:6a:5b:a0:2c:77:
5d:10:b0:49:96:8d:e2:62:27:cd:68:9c:c0:be:16:dc:d2:ec:
54:17:d2:91:83:54:6a:bf:62:28:ea:26:1f:e8:d6:d7:5c:2a:
6f:2c:46:1c:02:88:2c:40:45:2b:27:86:73:9a:56:a2:fc:eb:
b8:0d:05:26:d4:3c:8e:83:a1:00:bc:07:3f:c6:c6:9d:4e:29:
d9:9d:77:c3:05:0c:9e:fb:75:05:3c:7b:14:c0:cb:76:dd:50:
d2:61:37:5d:25:79:76:ae:e6:50:09:ee:78:56:71:da:c1:88:
fc:ef:93:28:4e:c6:f3:4a:74:e6:bb:2b:7a:52:54:15:e0:01:
89:01:4e:27:05:83:a4:22:dd:b8:f9:05:54:ca:c9:67:a2:de:
a4:67:f8:30:64:a6:27:d2:6c:7c:74:1d:6f:2c:86:73:98:31:
45:1e:c8:b8:41:dd:28:79:78:4d:b5:a4:7b:57:1b:9b:87:23:
68:21:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:48 2024 by rpki-client on console-fra.rpki-client.org