Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/giXd6Yw8WFy0KHRrB83Dv-krgik.roa
File: giXd6Yw8WFy0KHRrB83Dv-krgik.roa (raw, json)
Hash identifier: Wd2jXwCNB4m/ifHsl6mi4ub/Cv2Q3zT6bWP8opJd6uk=
Subject key identifier: 82:25:DD:E9:8C:3C:58:5C:B4:28:74:6B:07:CD:C3:BF:E9:2B:82:29
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 12E541ED
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/giXd6Yw8WFy0KHRrB83Dv-krgik.roa
Signing time: Fri 14 Jan 2022 15:49:40 +0000
ROA not before: Fri 14 Jan 2022 15:49:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34444
IP address blocks: 213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317014509 (0x12e541ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jan 14 15:49:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8225dde98c3c585cb428746b07cdc3bfe92b8229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:20:e0:35:a0:60:01:59:6e:da:c5:26:bd:
b0:2d:54:e5:34:80:b1:e8:57:43:84:52:68:9a:68:
09:ed:5b:ca:4c:ba:73:72:b1:75:9e:2e:77:99:49:
4d:df:fb:88:a9:d6:c9:a5:5d:eb:20:b9:ef:29:c1:
3c:6c:65:33:44:ec:4b:91:24:4d:83:4f:28:72:92:
9a:2c:1a:9c:bc:e8:b8:8f:30:25:ad:4b:19:77:8f:
e7:79:c9:a0:4f:03:19:d0:7f:af:05:c5:31:c4:27:
3d:aa:ad:a1:28:7f:40:53:85:ff:11:28:00:5e:c0:
1d:0b:43:dc:28:30:2f:84:a2:be:f1:c1:e0:a7:07:
9a:d7:01:1a:64:7a:c3:f6:c5:b0:4d:99:09:c0:a8:
ed:e8:f9:f8:fe:27:58:60:f7:b7:ac:6a:f9:b6:3a:
64:6c:50:86:37:3b:b6:bd:23:c6:35:92:d1:66:89:
58:ee:f2:2e:26:56:9d:95:a3:a9:57:86:7e:46:27:
fd:78:de:26:9d:e0:84:15:79:d8:bf:20:a6:c0:ce:
0c:67:de:2e:ce:a7:a0:9e:23:b6:cc:a6:56:a1:4d:
c5:bc:ff:3a:73:92:69:ce:c9:77:65:97:bc:3d:79:
93:12:cf:bb:73:71:6a:bd:70:ca:c7:12:be:3d:bf:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:DD:E9:8C:3C:58:5C:B4:28:74:6B:07:CD:C3:BF:E9:2B:82:29
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/giXd6Yw8WFy0KHRrB83Dv-krgik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.180.225.0-213.180.226.255
Signature Algorithm: sha256WithRSAEncryption
aa:a4:e8:94:59:35:d8:e8:6a:93:1f:d9:09:b5:d8:d3:a2:83:
9c:d5:ea:a9:09:0d:ea:3f:dd:c4:8c:98:62:47:16:37:04:3d:
7b:41:f2:42:51:3f:65:27:f1:20:9f:bc:a8:58:10:f0:91:7a:
1c:28:82:4f:57:a4:cf:9d:a3:31:4a:9a:64:a4:51:49:d4:75:
55:95:19:0a:39:b2:bc:71:4e:6f:fb:3a:b8:1d:a7:7d:98:37:
5b:65:86:6c:1f:24:49:0f:d9:0a:8d:85:1f:07:b0:65:41:e6:
93:10:be:ba:7e:e9:2d:15:73:a3:66:e9:3f:38:81:95:1d:85:
0c:bd:1f:43:01:52:3f:39:5a:6d:73:f8:d6:9e:68:b0:fe:8d:
1b:f3:bb:89:f1:9e:2e:26:fe:be:2d:45:58:ba:7d:13:4b:76:
7f:02:74:50:89:4a:f2:19:c0:b1:31:1a:41:f6:c3:f5:3d:7d:
9d:7c:c2:a1:3f:84:d6:08:8e:31:89:ea:ec:b2:17:53:7b:de:
c4:5e:7a:01:67:b6:98:8f:5c:a5:1e:08:2d:08:66:a5:6b:45:
5e:7f:74:7f:9b:8a:84:1d:8c:82:f5:b7:b6:58:2e:9a:9c:a2:
c8:08:2f:f8:d8:51:fa:a9:1c:12:22:80:51:75:06:3a:5d:70:
44:14:0d:7d
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEEuVB7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
N2U5NGNjYjdiNjAxZGEwY2EwOTQ2OWY2MGY2NTM2NDBmZWQ4YzFjMB4XDTIyMDEx
NDE1NDk0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODIyNWRkZTk4YzNj
NTg1Y2I0Mjg3NDZiMDdjZGMzYmZlOTJiODIyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKwBIOA1oGABWW7axSa9sC1U5TSAsehXQ4RSaJpoCe1byky6
c3KxdZ4ud5lJTd/7iKnWyaVd6yC57ynBPGxlM0TsS5EkTYNPKHKSmiwanLzouI8w
Ja1LGXeP53nJoE8DGdB/rwXFMcQnPaqtoSh/QFOF/xEoAF7AHQtD3CgwL4SivvHB
4KcHmtcBGmR6w/bFsE2ZCcCo7ej5+P4nWGD3t6xq+bY6ZGxQhjc7tr0jxjWS0WaJ
WO7yLiZWnZWjqVeGfkYn/XjeJp3ghBV52L8gpsDODGfeLs6noJ4jtsymVqFNxbz/
OnOSac7Jd2WXvD15kxLPu3Nxar1wyscSvj2/X/cCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSCJd3pjDxYXLQodGsHzcO/6SuCKTAfBgNVHSMEGDAWgBRH6UzLe2AdoMoJ
Rp9g9lNkD+2MHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ItbE15M3RnSGFES0NVYWZZUFpUWkFfdGpCdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvOWUyOWRjLWNlYzktNDllMi1iY2U0LWJkOTBhM2YwNmUxNi8x
L2dpWGQ2WXc4V0Z5MEtIUnJCODNEdi1rcmdpay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
OWUyOWRjLWNlYzktNDllMi1iY2U0LWJkOTBhM2YwNmUxNi8xL1ItbE15M3RnSGFE
S0NVYWZZUFpUWkFfdGpCdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQA1bThAwQA1bTiMA0GCSqGSIb3
DQEBCwUAA4IBAQCqpOiUWTXY6GqTH9kJtdjTooOc1eqpCQ3qP93EjJhiRxY3BD17
QfJCUT9lJ/Egn7yoWBDwkXocKIJPV6TPnaMxSppkpFFJ1HVVlRkKObK8cU5v+zq4
Had9mDdbZYZsHyRJD9kKjYUfB7BlQeaTEL66fuktFXOjZuk/OIGVHYUMvR9DAVI/
OVptc/jWnmiw/o0b87uJ8Z4uJv6+LUVYun0TS3Z/AnRQiUryGcCxMRpB9sP1PX2d
fMKhP4TWCI4xiersshdTe97EXnoBZ7aYj1ylHggtCGala0Vef3R/m4qEHYyC9be2
WC6anKLICC/42FH6qRwSIoBRdQY6XXBEFA19
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:47 2024 by rpki-client on console-fra.rpki-client.org