Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/oTgUoqkgOhwPA6YOlunPCtHR2Jk.roa
File: oTgUoqkgOhwPA6YOlunPCtHR2Jk.roa (raw, json)
Hash identifier: w0X6VcEkKq2l0AtbJhaxhm/Gub5gZSIYQMmbmVL+p8E=
Subject key identifier: A1:38:14:A2:A9:20:3A:1C:0F:03:A6:0E:96:E9:CF:0A:D1:D1:D8:99
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 1A974439
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/oTgUoqkgOhwPA6YOlunPCtHR2Jk.roa
Signing time: Sat 01 Jan 2022 09:55:15 +0000
ROA not before: Sat 01 Jan 2022 09:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36947
IP address blocks: 213.140.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446121017 (0x1a974439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Jan 1 09:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a13814a2a9203a1c0f03a60e96e9cf0ad1d1d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:7b:d4:ab:a7:36:fc:cc:ea:44:9e:5c:62:
06:28:f2:41:35:d5:62:87:75:c1:2d:6f:da:aa:d4:
d1:ed:0c:4c:13:2f:dd:9e:c3:f5:3b:4f:13:07:18:
49:0b:3a:e0:e3:c0:8e:d1:59:03:9b:d5:a3:c6:98:
3f:74:30:85:aa:ce:df:b1:c4:27:7a:30:25:0f:a3:
11:7c:85:c9:8a:db:2b:78:74:e4:66:4a:4d:e2:84:
0b:6c:df:75:7f:ad:70:c0:fc:12:c7:64:a5:b8:7e:
17:3d:7c:86:16:23:51:6d:dd:eb:79:0f:26:37:64:
6f:22:77:51:22:43:2f:db:ee:95:77:62:30:eb:7c:
0f:1c:47:2e:a2:1b:2a:40:2e:b7:a0:23:cb:0d:13:
73:16:db:cc:8e:f2:be:e8:22:f1:89:93:8a:d7:69:
35:41:f3:7f:33:6b:f6:6f:be:40:db:a9:e9:b0:4e:
fe:39:05:59:ac:52:c7:82:58:cc:8d:bf:9e:ad:16:
31:68:9c:e5:8c:c7:65:13:92:d1:12:00:53:47:8d:
98:e7:c6:55:62:c0:09:68:64:47:cb:d2:89:b6:fe:
ea:22:86:12:f1:6b:6a:36:c1:16:04:f7:4a:26:4b:
94:b8:bf:81:47:86:1e:d6:3d:bb:ae:f2:f5:c0:b8:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:14:A2:A9:20:3A:1C:0F:03:A6:0E:96:E9:CF:0A:D1:D1:D8:99
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/oTgUoqkgOhwPA6YOlunPCtHR2Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.56.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:9e:f6:cb:8f:7a:ff:d9:98:29:03:b5:d1:aa:55:0e:ed:d1:
25:30:b5:a3:f9:a1:c0:c7:7b:d2:ea:e6:7a:7f:56:2f:55:1f:
dc:eb:80:1f:5d:ea:77:f5:ac:d6:58:c7:81:70:8a:37:bf:4a:
3e:9c:ee:33:77:e4:1b:bc:bd:cb:be:72:bb:2b:0b:49:4b:56:
94:25:34:df:33:be:59:cb:6a:8d:5d:00:f6:e7:1d:7f:60:eb:
66:79:28:19:d5:a0:42:c6:cc:c1:7b:25:16:57:92:be:9b:d8:
7e:9f:8f:a4:0d:53:c3:fc:13:63:4c:9d:4c:68:16:90:94:69:
6e:e6:e5:b7:d9:2d:8c:c6:94:b8:28:95:6b:0a:27:5c:08:6a:
ae:2a:32:e4:28:77:70:95:88:a1:d3:76:ef:b0:14:24:0d:02:
2b:2e:72:79:72:bd:f5:9e:0d:fa:b1:48:ed:16:69:56:88:32:
a6:71:c5:6c:fd:cf:ce:b4:42:f9:7c:eb:2e:73:75:a7:61:5a:
1a:92:81:e3:52:55:93:7b:37:a6:6b:43:c6:26:2f:0d:5e:53:
8d:cc:9a:a2:7a:11:04:c9:37:7d:3e:15:dc:58:9d:81:e0:8a:
fb:de:fd:ee:ac:e5:7b:1d:6b:b3:a6:0c:3a:d0:17:34:0d:75:
c2:35:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:05 2024 by rpki-client on console-fra.rpki-client.org