Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/S6T6OPgAYP-SXz0Twj2UK0etRAM.roa
File: S6T6OPgAYP-SXz0Twj2UK0etRAM.roa (raw, json)
Hash identifier: I/NbYVio1rrmVMd/nl7/hmGd8C9gEemdmAJlTFZvcEg=
Subject key identifier: 4B:A4:FA:38:F8:00:60:FF:92:5F:3D:13:C2:3D:94:2B:47:AD:44:03
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 028E34
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/S6T6OPgAYP-SXz0Twj2UK0etRAM.roa
Signing time: Thu 31 Mar 2022 14:21:26 +0000
ROA not before: Thu 31 Mar 2022 14:21:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62313
IP address blocks: 213.32.224.0/24 maxlen: 24
213.32.230.0/24 maxlen: 24
213.32.231.0/24 maxlen: 24
213.32.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167476 (0x28e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Mar 31 14:21:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ba4fa38f80060ff925f3d13c23d942b47ad4403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:7f:1f:84:f0:48:af:9e:42:bb:93:b7:26:
1b:1c:0b:b0:67:7e:68:13:6e:e3:23:4b:7e:11:0e:
d8:35:4e:38:fa:6a:84:22:c6:5f:30:5c:94:71:57:
a8:47:90:c0:eb:ad:c8:a6:44:f8:4c:0e:d3:2e:69:
3c:5a:52:b3:9b:3d:fe:f1:bf:17:37:05:fe:97:74:
90:ee:f5:b8:40:15:4a:c1:84:49:99:16:47:d9:b0:
b6:f7:e1:b2:81:cf:3a:54:9b:a4:60:dd:72:e5:17:
eb:06:47:58:33:80:f4:0b:99:39:6b:83:f7:40:7f:
2d:ea:79:35:32:84:b6:0f:19:28:d4:84:8a:43:93:
dc:5e:4c:5a:09:d8:ce:1c:eb:a9:63:02:69:19:b2:
6d:cd:b2:e2:a0:2b:37:84:b5:39:e3:f8:b7:f9:5e:
00:57:69:5f:14:a1:1c:18:a9:43:a3:ac:13:d4:55:
43:c1:9e:0f:53:8c:13:a6:ad:71:63:6a:5e:33:8a:
22:43:ed:0a:d3:28:77:2e:4b:6c:37:68:b7:8e:45:
89:62:bd:7c:1c:39:61:f4:ce:55:ec:50:66:b1:80:
ae:70:40:94:f2:59:50:08:76:5a:f5:19:bc:39:9e:
cf:34:4c:5a:fe:fc:d1:db:9f:6c:41:94:dd:09:5f:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:FA:38:F8:00:60:FF:92:5F:3D:13:C2:3D:94:2B:47:AD:44:03
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/S6T6OPgAYP-SXz0Twj2UK0etRAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.32.224.0/24
213.32.228.0/24
213.32.230.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a2:80:40:4d:b1:50:dc:79:93:2b:d1:f8:b9:3c:9d:d5:0c:
ce:f8:0a:f4:b4:5b:74:2f:fb:67:2e:9c:d2:1c:76:c5:57:87:
d9:57:68:c2:88:3a:77:13:e6:f6:0f:2f:55:bb:9d:e7:0b:10:
8c:28:cf:e0:e7:03:7b:51:c3:6f:ee:25:68:4f:d1:76:3c:fe:
c4:84:81:4c:e2:7c:cb:9b:5d:40:c3:eb:62:76:03:ae:ba:e9:
3e:59:1e:91:2f:fd:a5:7a:fb:a1:89:dc:44:01:95:72:d7:eb:
17:0c:bb:03:69:8c:5f:ca:27:60:88:d4:2d:1f:67:ce:1b:2b:
99:41:8a:7a:e9:cd:55:c7:d4:b4:d2:e8:a3:7c:48:78:1a:1b:
dc:46:c5:37:c3:33:bb:fa:cd:48:dc:70:90:b8:13:6f:8b:1a:
c2:35:17:e4:5a:9e:52:74:0e:93:d1:b2:9d:60:d4:ef:d9:75:
26:f1:5e:7a:12:15:c0:88:e3:a0:dd:36:b0:f7:e9:1d:43:df:
3f:ea:cb:61:13:31:55:b4:49:61:13:79:1a:84:74:f0:15:2d:
56:4e:62:26:12:04:cd:57:3a:40:68:d8:83:39:c9:5c:76:3c:
cd:2e:7c:41:48:0f:a8:f2:df:1e:d9:0b:58:d7:c3:05:42:8c:
e1:62:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:45 2024 by rpki-client on console-fra.rpki-client.org