Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/1-RLcOx7nu9TpjSNFlfE1is1GJHI.roa
File: 1-RLcOx7nu9TpjSNFlfE1is1GJHI.roa (raw, json)
Hash identifier: AuXwKbTRjGDnP16VcFJiYZF8xo3ZZxfQTZRQf4EgYf0=
Subject key identifier: F9:12:DC:3B:1E:E7:BB:D4:E9:8D:23:45:95:F1:35:8A:CD:46:24:72
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E244960
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/1-RLcOx7nu9TpjSNFlfE1is1GJHI.roa
Signing time: Sat 01 Jan 2022 03:02:58 +0000
ROA not before: Sat 01 Jan 2022 03:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204242
IP address blocks: 213.152.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237259104 (0xe244960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f912dc3b1ee7bbd4e98d234595f1358acd462472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:06:ad:19:45:15:0b:7f:03:dc:0f:0c:4e:
fb:b7:d7:d2:76:92:25:0c:4c:47:ef:fc:1f:3d:25:
ab:e1:2a:92:f3:0e:af:ce:87:55:da:a7:e3:b7:79:
e2:e5:9f:d6:4f:ee:fe:b3:73:52:f1:4b:4f:21:ee:
b1:aa:62:20:0a:c9:7e:0e:7e:cd:ff:b8:c7:d8:99:
e4:45:73:cc:fd:0f:2c:a9:01:dd:ef:f0:5d:b8:ea:
72:ca:2d:f0:b8:d9:8b:75:51:6e:02:af:b0:d0:6d:
06:b4:85:3f:ec:02:67:73:ef:6f:5b:2a:31:ef:d9:
17:59:f6:d7:e8:ae:ba:0b:ba:15:58:a3:79:77:1b:
ec:8b:4f:91:be:b5:f1:35:3b:3a:df:00:00:9c:4d:
ed:18:84:10:16:2e:09:d0:c1:7b:b2:cd:48:a2:53:
51:e2:83:cf:59:a0:7c:ba:fe:b7:03:50:37:0f:be:
e9:94:ea:89:40:25:6b:16:61:00:57:f6:d6:96:a2:
3c:2c:ba:9e:38:47:f3:89:a5:72:aa:67:b7:92:7b:
65:f5:21:4a:21:38:7c:b8:15:68:82:52:6c:96:0f:
2d:6c:3e:07:e3:db:45:ec:fc:6b:36:4c:c3:74:a6:
0a:37:76:6d:f7:a0:c8:00:1e:bb:bf:db:e8:e0:68:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:DC:3B:1E:E7:BB:D4:E9:8D:23:45:95:F1:35:8A:CD:46:24:72
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/1-RLcOx7nu9TpjSNFlfE1is1GJHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f9:3c:b6:25:29:bd:e2:cf:2f:2b:bd:ce:29:98:02:50:57:
3e:95:f9:dc:81:bf:82:34:05:02:be:30:e9:af:f2:01:e9:39:
39:e6:8a:46:7c:9d:f6:db:93:03:51:9e:13:bd:59:9a:d9:85:
3a:18:f3:8a:f1:77:38:da:f8:91:87:76:44:8b:8e:69:b0:2b:
73:75:31:35:ba:8a:df:ae:e1:1d:0c:5a:54:c4:54:d7:ed:ff:
e0:00:e7:16:a9:17:1b:8a:f2:04:64:9d:e2:ea:c7:3a:68:44:
23:89:b2:92:93:8c:e9:75:21:ac:e2:ed:a5:54:b9:b3:cf:8d:
4d:da:1f:dd:06:e2:ea:cd:51:8a:9d:62:f7:22:cf:e2:d7:30:
32:6d:e2:8b:63:2c:e0:5a:73:a5:cf:5f:78:44:7c:89:bf:91:
18:0b:38:33:e0:96:63:c0:4f:cc:9a:01:19:cc:0a:e6:ff:ea:
99:42:26:41:ca:b6:ba:99:cc:ac:ca:cb:f1:ba:0a:03:29:47:
a0:3d:42:67:b5:ad:d5:a7:0f:de:a9:17:2c:e5:80:d4:0c:91:
ce:48:48:f2:79:84:cd:97:cc:bc:24:7d:54:2c:a2:76:31:64:
11:ce:f3:d8:a8:2f:71:b2:39:d7:0a:b5:09:c3:35:e8:68:a5:
26:26:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org