Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/cclvLlS8Pfrlka_hMGy9rDVWw6M.roa
File: cclvLlS8Pfrlka_hMGy9rDVWw6M.roa (raw, json)
Hash identifier: F/UahHXG1VHPzwoYbSKhSanuXPO/o1hJt55IV7v64UU=
Subject key identifier: 71:C9:6F:2E:54:BC:3D:FA:E5:91:AF:E1:30:6C:BD:AC:35:56:C3:A3
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 07E5B481
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/cclvLlS8Pfrlka_hMGy9rDVWw6M.roa
Signing time: Sat 01 Jan 2022 02:52:27 +0000
ROA not before: Sat 01 Jan 2022 02:52:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 212.64.214.0/24 maxlen: 32
212.64.223.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132494465 (0x7e5b481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 1 02:52:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71c96f2e54bc3dfae591afe1306cbdac3556c3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:21:61:90:2e:97:8f:8d:2f:fc:3d:12:f1:
f6:56:68:8f:e2:96:99:82:82:2d:64:f4:e4:93:9d:
6a:ef:70:08:32:8e:01:a9:b6:4a:8d:77:84:69:fc:
31:bb:72:aa:81:8a:ae:50:93:78:b3:b1:a7:0f:3b:
74:b9:06:be:4f:aa:37:34:d5:64:9f:54:25:7c:ce:
4b:b9:7a:f7:f7:61:6e:33:69:42:f6:2a:11:91:6b:
7a:8b:aa:6f:7d:c7:db:8f:db:3a:67:23:ef:c6:10:
02:2c:87:f0:3a:0e:2d:fd:cc:1b:6b:6b:5f:10:d7:
a2:f0:51:88:33:1f:37:75:ed:8e:77:94:e5:3a:76:
3d:67:d9:ca:4b:5c:e8:40:de:67:4a:3f:8e:68:8b:
c7:86:9e:b3:ce:0e:b5:c0:2c:7b:32:b7:42:cb:18:
c7:d5:04:89:5d:16:73:a9:aa:61:fd:16:92:99:5f:
c8:90:81:8c:6c:32:a8:2e:b9:eb:ff:a2:2c:70:90:
b1:bb:66:44:b4:5a:4f:7c:32:e0:58:81:88:2a:66:
f9:32:87:41:1d:c1:54:ba:6f:b8:d6:a7:ef:8d:0e:
b6:bc:48:60:67:94:7d:f7:1d:b4:d3:70:26:e0:42:
71:7d:5a:4b:e9:e6:f7:ec:4c:b4:a6:7d:72:bd:b0:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:6F:2E:54:BC:3D:FA:E5:91:AF:E1:30:6C:BD:AC:35:56:C3:A3
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/cclvLlS8Pfrlka_hMGy9rDVWw6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.214.0/24
212.64.223.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ca:54:0a:2f:e3:b7:2b:63:46:e5:26:dc:65:be:8f:a4:7a:
3f:52:78:81:62:0b:0e:eb:c4:e5:44:0b:0f:43:b5:72:b7:2c:
52:2f:24:f1:ba:85:46:28:f7:70:66:a5:07:e5:cb:cd:cd:63:
97:4c:d5:44:26:2e:1b:62:9d:93:19:41:fd:56:98:a6:e5:23:
0a:e8:2d:32:21:9a:e9:32:9e:4c:39:96:b3:0a:82:22:5d:3e:
00:96:5f:ac:b1:87:66:c3:57:ca:20:ff:88:84:00:5e:04:0d:
69:3b:e2:d4:b8:40:ee:0c:4a:9d:c4:3d:67:64:fb:83:58:18:
80:36:a1:3b:f6:1a:31:0d:5c:0b:52:a5:7a:30:92:98:cb:63:
7f:91:e6:e3:81:5d:ca:73:09:29:0b:0f:70:e1:0b:40:6c:46:
fb:7b:c0:d8:f8:1f:df:b9:07:69:ab:dc:13:47:43:db:55:39:
cc:dc:40:b8:cc:44:27:e8:d6:9d:35:37:44:98:64:18:51:30:
bb:ed:bb:58:4a:e3:4d:d4:df:1d:fd:48:8d:1d:8e:cc:84:60:
8f:72:de:c8:21:40:4a:4e:6d:cb:9e:ac:fa:c4:59:86:44:16:
f2:b6:45:38:8c:bb:d4:d1:4b:c7:78:46:67:65:a4:56:28:ac:
30:87:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:14 2024 by rpki-client on console-ams.rpki-client.org