Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/xiApOs5VG_GFLsOW2OKlDrDvgPU.roa
File: xiApOs5VG_GFLsOW2OKlDrDvgPU.roa (raw, json)
Hash identifier: kzX/Y04SkHPLHBesrXzRRllm5Uj9dBMLaNbJpJwfVjY=
Subject key identifier: C6:20:29:3A:CE:55:1B:F1:85:2E:C3:96:D8:E2:A5:0E:B0:EF:80:F5
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 37F92306
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/xiApOs5VG_GFLsOW2OKlDrDvgPU.roa
Signing time: Thu 28 Apr 2022 12:18:50 +0000
ROA not before: Thu 28 Apr 2022 12:18:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206511
IP address blocks: 213.169.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939074310 (0x37f92306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 28 12:18:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c620293ace551bf1852ec396d8e2a50eb0ef80f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:d2:9f:1b:00:9e:64:b1:28:81:9e:8e:a8:
34:55:97:fc:d8:01:29:a2:c7:50:72:29:ac:39:a5:
2f:9e:a0:07:21:63:1e:7c:79:82:f6:c0:51:42:27:
f6:48:22:44:d2:e0:ef:6a:5f:81:0e:ec:15:5b:3a:
47:10:4d:cf:45:e3:39:8d:60:e0:b3:d3:4f:e0:97:
96:11:78:36:3e:fc:0f:73:c2:36:85:ef:04:90:19:
37:4d:de:b2:f9:16:14:3b:3d:29:5b:75:3f:50:41:
33:1b:bd:f0:f2:5f:17:bf:e2:82:8b:42:e6:b9:40:
4f:d2:00:6a:2c:37:f6:19:67:89:25:2b:4b:9a:2d:
64:de:9e:41:0d:6d:35:49:81:59:b5:1d:e0:1c:59:
02:b9:1a:41:b4:56:7a:c6:54:30:ae:ef:b0:b6:78:
a2:89:35:2e:71:4c:d7:e9:05:1b:dc:3e:b4:e3:68:
38:54:a0:b2:6b:14:eb:a6:89:ac:00:ce:99:ed:79:
a9:4b:e0:fe:cc:de:a5:73:6d:62:b4:77:76:74:0e:
ac:ff:65:48:12:a3:09:53:4a:6b:e2:72:f2:9e:e2:
83:eb:8a:b9:16:91:b7:02:38:08:f1:58:11:d6:e3:
e4:55:32:d1:ae:21:e0:b3:3e:77:fe:37:97:8c:b7:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:20:29:3A:CE:55:1B:F1:85:2E:C3:96:D8:E2:A5:0E:B0:EF:80:F5
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/xiApOs5VG_GFLsOW2OKlDrDvgPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.36.0/24
Signature Algorithm: sha256WithRSAEncryption
87:93:18:01:17:ad:3f:4c:c1:a2:23:3b:6e:45:8d:6b:f2:31:
35:a3:ff:a4:82:03:c4:da:1d:b2:25:8f:94:00:7b:63:a6:02:
22:13:0e:b8:15:9b:af:8f:fd:df:7b:e2:53:e1:80:27:0a:b1:
1f:76:37:eb:78:7e:39:53:17:5f:44:c0:dc:96:cd:3c:b1:72:
6b:38:4b:da:7f:35:08:63:1a:91:94:b9:08:10:58:65:a1:ba:
b0:0a:e0:82:03:cf:c9:e3:39:d6:7a:1e:11:e8:d3:f9:aa:56:
61:37:22:23:d6:48:20:1d:13:32:05:95:93:ea:b4:90:7a:37:
29:55:89:46:de:0d:1c:0e:e7:72:2f:ed:42:73:70:51:20:a3:
30:79:06:11:4d:71:f1:33:89:e6:57:7c:e1:26:8f:df:14:bc:
07:f4:65:7d:35:6c:5a:31:f5:fd:1b:d6:c0:7f:7e:7f:b5:a2:
74:5a:3e:40:b3:2b:c3:b1:f4:7b:14:3d:39:dd:8c:0d:fe:10:
d6:11:f2:c8:a9:cb:af:b6:b8:95:1a:4b:00:8c:8b:fa:f6:0e:
c3:e4:2b:74:8b:54:0c:62:88:d2:24:03:12:c6:68:ee:fc:c9:
8b:cb:49:38:b8:6d:78:04:fc:d8:fc:c0:75:ae:c5:89:2f:87:
da:97:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:21 2023 by rpki-client on console-fra.rpki-client.org