Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/Ideo0YMrcXj-9jIapYdJMXV1ZBU.roa
File: Ideo0YMrcXj-9jIapYdJMXV1ZBU.roa (raw, json)
Hash identifier: Q6jKbzWySAMe+pSxVcCdVcXM3+LPS0SPnH85lxg2V1g=
Subject key identifier: 21:D7:A8:D1:83:2B:71:78:FE:F6:32:1A:A5:87:49:31:75:75:64:15
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 40ED439E
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/Ideo0YMrcXj-9jIapYdJMXV1ZBU.roa
Signing time: Fri 25 Feb 2022 15:41:53 +0000
ROA not before: Fri 25 Feb 2022 15:41:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 212.142.32.0/19 maxlen: 19
212.83.64.0/22 maxlen: 22
212.83.68.0/22 maxlen: 22
213.46.160.0/19 maxlen: 19
213.46.60.0/22 maxlen: 22
212.142.0.0/18 maxlen: 18
212.142.0.0/19 maxlen: 19
213.46.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089291166 (0x40ed439e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Feb 25 15:41:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21d7a8d1832b7178fef6321aa587493175756415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:11:a5:22:94:18:75:9f:e7:a4:ba:35:8a:
4b:81:ff:7a:cd:c1:c3:3d:29:41:61:09:43:1f:fb:
aa:67:c1:f5:cc:bd:33:51:5a:a6:69:ec:7a:94:7e:
c9:70:86:f8:bf:c8:d0:25:69:55:51:95:8c:ed:49:
30:64:0a:ca:54:15:18:c4:53:d3:28:64:83:c8:ae:
e3:75:bb:27:2d:e9:6d:87:c2:c8:bb:76:36:62:d7:
08:ac:7e:63:0e:ef:c7:7b:41:62:71:df:79:ad:45:
cf:ba:51:8d:39:53:69:84:af:66:e6:b8:3f:50:32:
6f:f7:7a:c3:7f:c3:c2:da:64:8a:94:ab:ce:a2:d7:
d0:86:36:dc:85:57:a2:b8:c5:b5:ef:3c:37:f9:d3:
88:7a:57:6d:24:b6:70:32:8d:3b:bd:af:9c:21:db:
86:b4:48:67:60:37:0f:40:81:cd:03:da:6e:fc:5c:
9b:a8:39:24:4a:03:30:f8:91:84:24:7f:b8:a8:07:
eb:f5:4a:53:5b:61:41:6f:51:1e:87:2c:e0:e8:ee:
1c:a7:98:e7:61:cd:a5:67:d6:53:47:c1:d5:e6:4a:
32:de:21:41:c1:61:5a:f6:8d:9c:35:93:58:3a:fb:
75:84:10:ae:6f:27:92:e0:29:ad:0b:98:22:b6:b6:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D7:A8:D1:83:2B:71:78:FE:F6:32:1A:A5:87:49:31:75:75:64:15
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/Ideo0YMrcXj-9jIapYdJMXV1ZBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.83.64.0/21
212.142.0.0/18
213.46.60.0/22
213.46.160.0/19
213.46.224.0/19
Signature Algorithm: sha256WithRSAEncryption
66:ba:81:80:21:2f:f2:15:b3:90:91:79:ef:84:e7:15:7f:c1:
88:b5:4f:21:bf:ab:09:ec:f8:f9:f1:e7:a1:68:9b:e5:9b:52:
2f:65:cb:ff:04:78:3c:e3:fa:d5:c9:c1:8c:a6:2c:5d:08:b4:
71:cd:0f:c8:f7:39:99:75:aa:32:53:72:6a:db:4c:af:23:e8:
7a:cf:1e:57:81:15:3c:59:39:a2:bc:c7:1e:fa:02:53:c9:9d:
70:b3:59:03:59:61:f7:f8:6a:8a:1f:85:c4:dd:d5:28:b9:36:
04:e8:3b:57:7b:3b:cc:c1:7b:6c:bb:d8:a1:20:f9:d1:96:69:
3f:c4:b7:08:0c:5d:c1:1e:58:b3:03:0e:50:e7:d4:eb:40:4d:
83:18:d1:05:b1:24:2a:d5:54:2a:16:ca:a5:19:e0:78:2b:d8:
e5:1a:42:74:61:41:5e:3d:1b:0d:dc:66:a3:43:55:d5:19:40:
87:a2:94:3f:86:2f:c0:32:32:f2:69:0c:4a:e1:62:89:90:b5:
7b:60:93:94:73:b5:7d:42:ab:63:7a:ac:c2:20:9d:14:cc:0c:
0e:d4:bc:45:5a:ca:46:fb:58:23:b7:f7:ab:6e:f0:cf:07:1f:
71:ed:ed:ba:f6:a8:58:eb:92:d2:ce:94:b8:a9:00:14:41:20:
b4:b8:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org