Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/bNYVzV6MUhv-vhUcYbRcc3y9vB8.roa
File: bNYVzV6MUhv-vhUcYbRcc3y9vB8.roa (raw, json)
Hash identifier: 1tfWyI9VZq7cK726nqSWr5FPfwfNMdxtULBrs6AmZ7k=
Subject key identifier: 6C:D6:15:CD:5E:8C:52:1B:FE:BE:15:1C:61:B4:5C:73:7C:BD:BC:1F
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36BB3D60
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/bNYVzV6MUhv-vhUcYbRcc3y9vB8.roa
Signing time: Mon 23 May 2022 08:01:29 +0000
ROA not before: Mon 23 May 2022 08:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57910
IP address blocks: 212.95.210.0/24 maxlen: 24
213.201.70.0/24 maxlen: 24
62.81.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918240608 (0x36bb3d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 23 08:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cd615cd5e8c521bfebe151c61b45c737cbdbc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:23:83:c6:18:aa:bd:51:12:da:6e:2f:74:
a8:53:8d:f6:27:98:25:40:3e:90:db:23:af:b1:de:
99:e4:1f:09:66:c8:2b:b3:8f:e5:08:b5:9f:2c:ca:
53:71:e7:79:62:64:2c:dd:35:b7:95:39:fb:b6:04:
7d:31:c0:f4:05:4d:5c:3b:67:03:79:60:7f:59:34:
9b:b9:ea:10:e3:cd:c3:ef:94:23:06:86:c1:72:af:
b0:ab:76:00:aa:f4:db:3b:de:56:54:f1:ce:03:17:
1e:19:af:3f:80:a0:b5:f2:32:fa:9e:4d:12:74:b4:
b0:67:a0:81:21:9d:52:8e:e4:c8:e6:ce:a7:ea:0f:
de:f6:48:61:7f:72:cb:27:9c:18:d1:f4:ad:27:b8:
43:c6:3e:d4:ff:8c:99:13:61:77:e7:05:a3:94:2c:
c6:35:81:76:21:59:de:fb:2f:4a:75:fa:11:fd:d9:
8b:36:46:43:af:3b:b3:40:61:1e:7a:66:ca:b1:99:
b9:50:80:32:a5:67:4a:7e:19:c4:6c:ea:b4:9a:cc:
c0:c3:03:90:8d:0f:1a:1f:35:a0:0d:b7:73:77:40:
27:4c:de:73:56:c9:8b:13:10:06:ee:d3:dc:81:74:
eb:76:38:11:56:ae:34:14:6d:b7:b0:4f:98:fc:a0:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D6:15:CD:5E:8C:52:1B:FE:BE:15:1C:61:B4:5C:73:7C:BD:BC:1F
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/bNYVzV6MUhv-vhUcYbRcc3y9vB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.81.173.0/24
212.95.210.0/24
213.201.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d2:8c:b2:7a:5d:60:fb:71:e4:e6:8e:cc:7f:81:03:f8:bf:
8f:b7:aa:39:25:b6:52:4f:04:1f:17:d0:47:f3:b9:ea:ec:17:
7e:0f:e6:7f:e5:11:13:21:ec:30:dc:6c:e9:42:a6:77:b9:45:
d9:f2:06:df:d5:2f:8d:d0:ae:77:d3:75:57:ab:8d:ae:58:4a:
64:dc:83:cf:f8:a2:77:f3:17:cb:79:f8:b8:78:6d:1d:19:b8:
a9:37:fd:60:6c:7e:f0:64:bc:4e:d7:38:3e:04:24:06:20:32:
6f:37:aa:33:77:22:3f:bf:49:45:1f:10:bd:10:66:7f:64:e8:
9c:3a:54:a5:02:63:a2:e1:f7:19:81:a5:f5:88:2c:79:9f:4a:
43:1f:c6:d0:04:0d:4a:62:47:49:13:8c:55:c1:ba:2d:17:43:
44:9d:30:45:e3:34:bb:23:c9:2e:20:af:e9:70:f6:01:a2:cc:
09:53:7d:5f:e7:00:7e:e6:9d:f8:3d:9d:03:34:2e:47:67:b0:
c0:35:9e:85:3d:a9:e0:29:fb:87:ae:24:0f:8d:5f:43:fb:c8:
83:fc:08:c1:08:2b:72:60:38:89:71:d5:9f:54:78:99:de:ac:
4c:75:4f:53:87:ad:ae:df:38:4a:d4:b2:d6:7f:ef:f7:55:04:
b8:09:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:48 2023 by rpki-client on console-ams.rpki-client.org