Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wCeo5N1jYd1x4R7-bHiS1M-LxuE.roa
File: wCeo5N1jYd1x4R7-bHiS1M-LxuE.roa (raw, json)
Hash identifier: fMU55OMziB93V+TWih1u2gnl7L5pO7arNyzDCxKYSWY=
Subject key identifier: C0:27:A8:E4:DD:63:61:DD:71:E1:1E:FE:6C:78:92:D4:CF:8B:C6:E1
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 18109142
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wCeo5N1jYd1x4R7-bHiS1M-LxuE.roa
Signing time: Sat 01 Jan 2022 04:00:40 +0000
ROA not before: Sat 01 Jan 2022 04:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206180
IP address blocks: 213.16.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403738946 (0x18109142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c027a8e4dd6361dd71e11efe6c7892d4cf8bc6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:8e:71:16:d1:fb:c4:b3:aa:9d:e6:32:b1:
62:24:50:fc:26:ee:93:0d:29:bc:21:fa:78:97:1f:
a6:dc:77:31:51:37:fb:b7:e8:31:46:c1:b3:92:e9:
4a:e0:78:e5:86:08:df:5c:cb:50:a7:21:af:b8:3a:
2c:4e:30:6b:09:20:91:07:d5:64:14:28:1d:cd:73:
f1:15:ca:43:a0:6c:c9:84:15:44:32:44:aa:10:7a:
ab:4c:04:68:ea:d9:73:1f:4c:b0:e3:b3:02:6c:fc:
a5:d1:9d:23:f6:50:eb:45:36:f1:35:db:76:f9:e1:
43:ec:2d:64:c3:a6:6c:18:85:af:bf:ba:34:26:65:
d6:f6:cb:af:b4:70:f7:84:15:0b:84:76:35:3c:d3:
cc:94:48:e5:3f:a2:45:84:cc:16:77:de:13:87:0e:
ec:f6:8e:df:a8:b1:9d:67:b1:ab:70:7b:8e:6f:13:
73:c5:45:93:9e:c9:96:91:1c:0e:38:20:b6:48:83:
5e:be:b5:df:3a:12:e5:dd:aa:b5:19:3d:68:40:09:
d2:a7:36:99:a2:7f:61:78:1d:2d:a4:0f:c8:a7:18:
9c:3f:d0:84:74:5b:d5:33:43:19:42:93:4a:2a:75:
23:a6:4f:a6:0d:c5:64:af:14:5a:e0:2f:b9:a1:f3:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:A8:E4:DD:63:61:DD:71:E1:1E:FE:6C:78:92:D4:CF:8B:C6:E1
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/wCeo5N1jYd1x4R7-bHiS1M-LxuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
52:96:53:f9:54:e4:e2:71:d9:dd:aa:d3:5d:d2:ab:b7:9a:28:
b6:b9:b6:76:40:aa:af:1a:fc:ea:28:76:ab:6f:c4:21:04:eb:
4d:cd:73:73:79:e1:f6:77:55:8a:cb:c2:c6:1e:89:7c:0d:8a:
0e:3b:dd:30:b4:40:44:ca:42:50:be:b5:8c:23:94:1c:77:3b:
d1:00:b2:82:8f:2c:8a:2a:f3:88:88:82:e4:ff:2f:39:84:c4:
95:b9:8e:45:12:59:db:01:e0:54:04:61:59:b1:7a:f7:02:a0:
a4:38:f4:d2:07:e0:65:f3:22:48:48:78:c5:09:b1:cf:aa:ec:
98:7d:aa:9a:0d:ed:a0:7a:37:1c:09:30:13:c0:45:e3:5c:5c:
16:e8:5b:d6:ff:d7:7c:59:4c:21:f0:b0:53:ba:42:a1:0b:59:
10:55:c0:0d:02:d0:b1:84:84:0b:63:b5:a6:24:70:2d:93:c7:
29:92:93:12:e3:da:31:58:ca:3e:db:98:aa:e5:95:b6:c8:d6:
6d:4e:00:58:a3:61:3c:49:68:6d:5e:9e:54:d4:05:47:c2:50:
3b:3a:b2:a6:49:ae:1c:d7:61:b7:a5:17:e1:4a:0f:49:7b:36:
51:e4:d8:ca:53:a8:00:f5:13:f9:c3:07:6a:d4:b7:23:fb:0b:
75:34:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org