Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/2LsUHOLhPF7YhBfaucKhsWviPEU.roa
File: 2LsUHOLhPF7YhBfaucKhsWviPEU.roa (raw, json)
Hash identifier: OtwzrTxskdO0E0CemtgGQaH70W/fLUUHEyZMc6JB7tQ=
Subject key identifier: D8:BB:14:1C:E2:E1:3C:5E:D8:84:17:DA:B9:C2:A1:B1:6B:E2:3C:45
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 097C3DCC
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/2LsUHOLhPF7YhBfaucKhsWviPEU.roa
Signing time: Sat 01 Jan 2022 13:05:06 +0000
ROA not before: Sat 01 Jan 2022 13:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20521
IP address blocks: 213.169.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159137228 (0x97c3dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 13:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8bb141ce2e13c5ed88417dab9c2a1b16be23c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:4f:4d:b0:09:b5:95:4b:fc:2c:e3:64:0a:
9b:80:fc:9c:0a:28:c1:43:48:49:1f:8b:82:e3:7d:
12:fb:80:a1:ec:dc:ba:f8:a8:5b:3b:11:d1:99:1b:
b9:ca:73:61:62:86:3f:e9:64:34:8e:4d:d1:fa:da:
cb:8b:0e:ec:d4:37:d4:9b:5d:38:48:c8:00:da:a6:
e4:8a:21:b5:09:2f:53:ae:c8:2a:ec:ef:9f:c0:93:
b7:b1:9b:2f:0d:0d:4b:f8:26:6d:04:64:94:ed:2c:
68:5c:58:7a:da:1e:94:3d:79:3d:ff:81:de:91:77:
59:a9:b1:ab:33:00:af:e7:39:c5:a8:c3:28:8a:0a:
1a:c4:01:f8:29:64:79:06:78:18:d4:c6:cb:d0:c4:
17:bb:56:36:b5:84:0b:8f:c4:c9:e1:d5:5c:4d:33:
5a:12:86:50:4a:e2:70:a1:f1:8a:b3:da:79:e1:59:
d8:47:dd:23:86:de:24:cd:2e:1f:72:41:7b:4f:01:
49:8e:a7:dd:ee:35:fc:5a:03:89:10:5a:5b:a5:7a:
e1:4a:6d:e9:f8:e9:67:43:4d:34:25:52:15:19:51:
0f:d7:84:c5:9b:b7:4a:de:a0:58:d4:9c:ee:41:4e:
6a:95:08:ec:39:40:3a:74:da:d0:a8:62:f1:06:72:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BB:14:1C:E2:E1:3C:5E:D8:84:17:DA:B9:C2:A1:B1:6B:E2:3C:45
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/2LsUHOLhPF7YhBfaucKhsWviPEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:9a:0e:a5:3a:71:65:17:ba:c7:11:89:66:44:bc:76:bf:ba:
35:2b:72:4a:0b:da:a2:5d:92:1e:13:b6:e1:7d:2b:e6:07:a5:
76:af:51:08:7b:b9:ad:79:cc:58:b8:d4:3a:e1:dc:09:e7:fd:
5b:d0:7c:4d:95:1d:18:4e:19:58:16:b1:8e:a0:dc:69:f4:26:
b6:d7:33:75:d6:90:cd:9f:8c:37:5b:9a:ce:e2:c3:34:6c:81:
50:e8:50:89:39:8a:98:a7:19:72:a7:32:c9:be:6a:d4:5b:8e:
18:9f:05:5a:dd:96:bd:6a:47:fc:65:a4:51:fc:1f:de:5f:be:
93:77:c1:48:da:72:83:1f:86:41:10:2b:56:5c:2e:fc:2f:3f:
6f:f4:6a:ea:1c:6d:15:96:0f:d6:3e:2e:fe:e6:92:4a:97:0d:
9d:ac:ea:94:f6:e7:00:a1:4a:89:b2:bd:91:52:e7:9b:5b:28:
77:3d:fd:76:fb:dc:82:b1:a1:1b:24:8b:bd:02:e7:6c:48:8a:
3d:5e:98:ff:e4:1c:dd:ec:fe:67:9b:20:a1:e4:f8:cc:7c:2d:
e5:d6:2e:bb:5f:5f:9c:9b:04:e1:4c:15:52:11:a8:78:a4:85:
e5:c2:3f:e8:78:6b:e7:f3:b6:41:a1:57:ff:bb:d4:3e:c4:68:
09:77:ed:e9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECXw9zDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YzQ0Mjk3ZTkyNzFjNmVkZjA2NDkxNWY2MTgwYWUxMjY5MGRkYThiMB4XDTIyMDEw
MTEzMDUwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDhiYjE0MWNlMmUx
M2M1ZWQ4ODQxN2RhYjljMmExYjE2YmUyM2M0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOTGT02wCbWVS/ws42QKm4D8nAoowUNISR+LguN9EvuAoezc
uvioWzsR0ZkbucpzYWKGP+lkNI5N0fray4sO7NQ31JtdOEjIANqm5IohtQkvU67I
Kuzvn8CTt7GbLw0NS/gmbQRklO0saFxYetoelD15Pf+B3pF3WamxqzMAr+c5xajD
KIoKGsQB+ClkeQZ4GNTGy9DEF7tWNrWEC4/EyeHVXE0zWhKGUEricKHxirPaeeFZ
2EfdI4beJM0uH3JBe08BSY6n3e41/FoDiRBaW6V64Upt6fjpZ0NNNCVSFRlRD9eE
xZu3St6gWNSc7kFOapUI7DlAOnTa0Khi8QZyeJkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTYuxQc4uE8XtiEF9q5wqGxa+I8RTAfBgNVHSMEGDAWgBT8RCl+knHG7fBk
kV9hgK4SaQ3aizAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19FUXBmcEp4eHUzd1pKRmZZWUN1RW1rTjJvcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvN2NiMTc5LWFkMmMtNDgyNC1hMWU1LWFlMDdmMzJlNDEwMi8x
LzJMc1VIT0xoUEY3WWhCZmF1Y0toc1d2aVBFVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
N2NiMTc5LWFkMmMtNDgyNC1hMWU1LWFlMDdmMzJlNDEwMi8xL19FUXBmcEp4eHUz
d1pKRmZZWUN1RW1rTjJvcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWplzANBgkqhkiG9w0BAQsFAAOC
AQEArJoOpTpxZRe6xxGJZkS8dr+6NStySgvaol2SHhO24X0r5geldq9RCHu5rXnM
WLjUOuHcCef9W9B8TZUdGE4ZWBaxjqDcafQmttczddaQzZ+MN1uazuLDNGyBUOhQ
iTmKmKcZcqcyyb5q1FuOGJ8FWt2WvWpH/GWkUfwf3l++k3fBSNpygx+GQRArVlwu
/C8/b/Rq6hxtFZYP1j4u/uaSSpcNnazqlPbnAKFKibK9kVLnm1sodz39dvvcgrGh
GySLvQLnbEiKPV6Y/+Qc3ez+Z5sgoeT4zHwt5dYuu19fnJsE4UwVUhGoeKSF5cI/
6Hhr5/O2QaFX/7vUPsRoCXft6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:53 2024 by rpki-client on console-ams.rpki-client.org