Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/sdjYqbthIkFXwnJCy_W_FKunXXs.roa
File: sdjYqbthIkFXwnJCy_W_FKunXXs.roa (raw, json)
Hash identifier: Y/tfPZfHGrohj1rlp9T5wXwc+qNgLP5FHsZUwKvfp3w=
Subject key identifier: B1:D8:D8:A9:BB:61:22:41:57:C2:72:42:CB:F5:BF:14:AB:A7:5D:7B
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 120EE048
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/sdjYqbthIkFXwnJCy_W_FKunXXs.roa
Signing time: Mon 09 May 2022 10:19:56 +0000
ROA not before: Mon 09 May 2022 10:19:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49178
IP address blocks: 213.162.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302964808 (0x120ee048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: May 9 10:19:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1d8d8a9bb61224157c27242cbf5bf14aba75d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:96:74:91:4c:bf:da:82:b1:3f:cf:bc:5e:
57:0c:3a:f3:d7:8c:66:c9:42:07:49:4f:a5:83:52:
d0:1e:04:24:76:06:05:01:8a:58:05:6f:4f:2b:99:
49:2d:d0:fe:17:7d:d4:27:35:4f:02:27:ff:e0:f8:
e9:7d:35:a6:0d:f3:53:79:5d:1b:7f:1a:5b:4c:17:
84:fc:23:da:66:94:87:40:3d:81:07:a8:01:45:86:
16:60:9f:6a:4d:93:b3:5a:bb:bd:29:20:3f:7e:f7:
29:98:a8:70:65:81:02:36:ba:b8:c5:92:de:ea:fd:
af:e8:af:d2:24:41:97:23:50:bc:dd:8a:f3:ee:42:
06:93:f4:4f:20:f8:71:a3:1f:6a:c0:72:48:b7:3c:
07:52:02:cc:61:a4:55:ab:8b:3c:e8:50:de:e8:4b:
d0:d2:c9:93:bd:c6:3c:e0:14:da:ef:69:a3:42:b8:
2f:bb:ce:a3:63:b8:bc:55:85:6f:44:ff:76:45:43:
3c:08:56:2a:88:31:f9:54:47:da:64:79:b3:ab:e0:
03:33:96:dd:0f:80:29:72:75:f9:9c:d2:6e:ab:0a:
39:1b:68:66:99:33:7e:00:16:18:98:67:14:a5:f0:
21:dd:2d:29:08:ad:bc:97:c6:5d:c7:f4:25:a5:b1:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:D8:A9:BB:61:22:41:57:C2:72:42:CB:F5:BF:14:AB:A7:5D:7B
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/sdjYqbthIkFXwnJCy_W_FKunXXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.204.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a7:ae:52:e4:f7:f5:a8:01:8e:4d:ec:5c:b9:e9:dd:8c:8f:
5a:93:4d:fc:1e:3c:53:cd:30:01:ef:10:40:77:10:0d:d7:be:
7a:c8:98:20:31:21:55:be:34:a2:b6:42:43:01:74:33:cd:84:
12:5e:72:8b:b8:87:7b:fa:0b:8b:a5:a0:a5:98:65:99:94:45:
4e:17:86:5c:72:14:68:ad:f4:3b:39:32:89:dc:87:e0:4a:25:
e3:78:fe:96:41:d8:68:9e:f5:35:8e:7d:63:f2:60:39:2c:10:
f7:91:2e:f9:c5:37:fc:90:4b:de:a1:7f:74:ee:69:1a:e0:b5:
d9:3e:fc:d2:fc:18:84:d8:19:15:97:ed:5e:71:db:f2:04:70:
f8:bc:36:99:88:83:f0:7a:08:71:d4:44:aa:72:f6:5d:af:d6:
5c:dd:52:e2:2e:6c:72:a5:d4:71:82:81:49:56:e3:c1:c6:49:
4d:3d:ca:8f:cd:5c:73:1a:13:ab:6f:f2:3e:d4:8d:5e:f2:12:
cf:b3:e6:76:e6:bd:16:d5:6e:4f:96:eb:ba:46:1d:dd:4b:c9:
96:91:03:b4:b3:a6:99:61:c3:7f:77:13:ea:d7:d1:54:e6:a3:
b3:2c:cf:71:f3:ac:da:1e:78:c0:7a:c2:dc:6a:21:04:80:d7:
b8:cb:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:19 2024 by rpki-client on console-fra.rpki-client.org