Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/4jE14Je2FYupkWL4LXJsVvDQXVE.roa
File: 4jE14Je2FYupkWL4LXJsVvDQXVE.roa (raw, json)
Hash identifier: 1YNwDOL2t6+huv5P4xvZXhDZs9oWPR8nOJS6lnv366o=
Subject key identifier: E2:31:35:E0:97:B6:15:8B:A9:91:62:F8:2D:72:6C:56:F0:D0:5D:51
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E35BEC4
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/4jE14Je2FYupkWL4LXJsVvDQXVE.roa
Signing time: Wed 20 Apr 2022 06:37:50 +0000
ROA not before: Wed 20 Apr 2022 06:37:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13165
IP address blocks: 213.128.192.0/20 maxlen: 20
193.43.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238403268 (0xe35bec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e23135e097b6158ba99162f82d726c56f0d05d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:77:86:d0:01:af:bc:7e:4d:e3:3c:61:85:
bf:7b:02:28:1b:91:9b:74:d1:9b:52:f2:06:91:ac:
63:84:0e:be:3d:c8:fc:05:22:8a:ee:15:ad:a9:7d:
82:e3:03:55:87:0f:92:0d:69:8d:c2:9e:ac:3f:ed:
ff:e6:6a:8f:62:c8:9e:47:c0:19:4e:84:b3:63:fb:
54:71:32:24:aa:28:84:f1:a4:6d:a0:e2:cb:ee:07:
d0:ec:56:ad:74:f7:9e:24:9a:d7:88:05:d2:3a:98:
9b:43:da:da:1a:4d:78:d7:fa:f9:09:94:24:01:11:
61:e5:70:f2:18:a1:63:a6:cc:60:18:c9:c4:7f:c3:
42:a7:c8:ec:50:4a:42:34:01:21:db:08:a8:3a:84:
bd:e0:1d:c6:de:94:12:f7:cb:fe:22:1a:f2:62:68:
92:31:2b:d1:89:62:08:ab:11:23:ca:3a:a0:39:68:
05:17:d6:2f:03:2b:61:dc:da:a2:52:fe:d0:2a:26:
f0:ac:f4:81:ba:a3:fb:c5:d3:77:54:47:08:ad:8d:
16:83:4a:ec:1a:82:cc:8a:a7:65:2b:32:8a:89:b5:
62:72:85:27:98:9f:6f:9a:cc:19:8f:c2:06:a6:76:
fb:00:07:c6:d9:62:f0:2f:ec:db:e5:ac:9f:c5:ac:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:31:35:E0:97:B6:15:8B:A9:91:62:F8:2D:72:6C:56:F0:D0:5D:51
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/4jE14Je2FYupkWL4LXJsVvDQXVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.182.0/24
213.128.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:38:e8:5c:a6:b6:8f:c7:d6:59:ed:76:75:89:a9:67:5f:25:
c1:5d:65:6b:13:e6:b1:28:d9:85:36:c5:25:a4:14:5c:d7:a5:
c1:e6:25:26:a5:fc:f5:96:9c:a4:8a:7a:69:c5:0b:bd:e7:06:
4a:51:57:6a:79:ca:b7:cb:86:4a:a5:41:ec:8b:48:34:f5:15:
46:a2:c1:89:dd:d4:d5:8f:1b:82:9e:05:e3:6d:b8:39:95:5d:
c0:f3:74:c3:24:f0:92:d2:f5:95:dd:ca:9e:9a:5c:ee:e8:a8:
db:c4:19:a8:82:4b:b0:15:3b:4e:33:d9:11:d6:f1:f2:2b:0f:
bb:9f:a8:81:0d:19:ac:5e:a8:3c:ef:dc:65:37:4f:98:5f:9b:
90:1c:e8:db:cc:97:f3:73:49:85:a2:c6:7d:f1:10:86:b6:ec:
92:28:88:7e:6f:08:c8:cb:64:a2:db:01:b1:1c:be:6f:48:0d:
e5:99:06:d4:02:61:f8:71:9f:0f:c9:ad:04:d4:ec:00:b1:df:
7d:15:7c:61:85:53:25:e9:0b:6b:31:b4:05:79:36:ed:6f:93:
2c:dc:20:41:ed:a4:94:bf:67:f5:ae:14:ef:1e:9d:72:83:a6:
7e:d8:38:7d:04:4c:29:b6:57:33:f1:61:3c:0e:a7:9c:9e:fe:
05:9b:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org