Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/HEEKAQd0A0AaNog-xxoBgF9Rv7k.roa
File: HEEKAQd0A0AaNog-xxoBgF9Rv7k.roa (raw, json)
Hash identifier: 241teHSt+O2fLOj9DYjf522LDIEQRUr31fwJLZqxkNc=
Subject key identifier: 1C:41:0A:01:07:74:03:40:1A:36:88:3E:C7:1A:01:80:5F:51:BF:B9
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 09825CF5
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/HEEKAQd0A0AaNog-xxoBgF9Rv7k.roa
Signing time: Sat 01 Jan 2022 13:05:08 +0000
ROA not before: Sat 01 Jan 2022 13:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203206
IP address blocks: 213.169.152.0/24 maxlen: 24
213.169.150.0/24 maxlen: 24
213.169.153.0/24 maxlen: 24
213.169.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159538421 (0x9825cf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 13:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c410a01077403401a36883ec71a01805f51bfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:ea:a1:88:3f:4f:07:83:72:2e:e6:68:f0:
cb:d2:36:1d:fb:a1:df:c2:13:fe:f8:bc:b5:04:68:
f9:d3:b1:7c:40:06:5d:aa:e2:2d:35:58:7a:0a:24:
b6:2b:6c:ef:46:d2:29:ee:11:b9:6c:79:52:b0:a7:
bd:2f:a8:28:db:12:14:ea:15:8d:7c:68:2c:d1:9e:
dc:b6:c6:ca:ba:cb:9c:ad:30:8c:12:ad:63:35:bf:
53:34:5c:3d:9f:6f:ed:31:4c:c7:e8:47:14:f4:e7:
94:61:7f:ee:a3:31:73:bf:b7:64:53:1d:b3:83:60:
27:b8:70:2f:21:5a:9f:78:f0:d7:03:50:d5:af:07:
48:d3:7c:cf:b5:3f:82:c7:c8:53:2e:cb:0e:5a:59:
99:82:5f:5f:5b:96:c6:99:93:0f:9f:5c:41:6e:63:
3d:f9:47:df:ec:2a:e3:50:92:f2:69:32:e5:c4:93:
2e:1f:46:9d:cd:63:81:28:13:a7:ed:db:00:fe:ae:
27:52:10:62:a6:28:7e:19:06:31:4f:b0:34:12:10:
4e:4a:b4:db:97:d3:51:79:4a:74:d4:25:53:43:f1:
d2:b3:cd:ed:7e:31:d7:57:55:b1:b5:51:12:73:cc:
79:40:2d:ac:22:2d:4d:b5:a1:15:ff:12:37:5a:11:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:41:0A:01:07:74:03:40:1A:36:88:3E:C7:1A:01:80:5F:51:BF:B9
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/HEEKAQd0A0AaNog-xxoBgF9Rv7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.150.0/24
213.169.152.0/23
213.169.155.0/24
Signature Algorithm: sha256WithRSAEncryption
90:81:3b:f9:af:f5:32:c6:46:b8:1e:3f:7a:b5:a6:74:cb:d2:
c5:98:2d:21:6c:90:18:7b:de:23:1e:50:e4:14:9a:0c:29:7e:
7b:76:37:53:88:71:2f:da:9d:bb:30:cd:c5:92:23:8d:5a:ff:
0e:dd:32:29:59:1f:72:b6:84:40:43:25:18:e7:28:62:0f:ee:
7f:97:fd:89:0e:79:d5:bc:5c:d5:00:86:f6:3b:6c:fa:95:65:
ac:23:4b:ba:77:a1:05:73:93:05:17:9d:c2:af:e3:d9:f1:91:
d0:bf:b8:35:5a:a4:0e:38:f8:c6:bb:0b:40:18:c0:32:94:08:
a0:dc:41:c5:da:1f:05:39:7c:da:2b:b0:d3:eb:9c:e5:57:11:
8d:b2:1c:3a:71:61:2d:89:63:ba:ef:cb:04:0e:ea:c3:36:51:
b4:46:71:13:28:af:7f:f1:c0:e7:15:d8:59:22:73:3d:94:87:
52:fd:9c:a9:07:17:56:d8:47:52:56:37:47:41:28:31:5b:d6:
cb:6d:1c:8e:f9:9d:0c:f6:10:7e:77:72:26:76:a6:f7:05:60:
6d:59:b9:dd:74:de:5d:7a:ef:b2:f5:58:63:01:f3:6b:6b:10:
98:49:44:86:44:ed:f4:6c:23:df:3b:f0:4f:42:14:c7:64:27:
e1:94:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org