Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/vIX7KaloHodik5M5E4RVdu-KP1w.roa
File: vIX7KaloHodik5M5E4RVdu-KP1w.roa (raw, json)
Hash identifier: U6RTipMuARxL5lU8TV8XnT6VZnczb08L4EkzOaL1ULQ=
Subject key identifier: BC:85:FB:29:A9:68:1E:87:62:93:93:39:13:84:55:76:EF:8A:3F:5C
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 41F47783
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/vIX7KaloHodik5M5E4RVdu-KP1w.roa
Signing time: Sat 01 Jan 2022 16:05:07 +0000
ROA not before: Sat 01 Jan 2022 16:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201123
IP address blocks: 213.59.151.0/24 maxlen: 24
213.59.152.0/23 maxlen: 23
213.59.159.0/24 maxlen: 24
213.59.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106540419 (0x41f47783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc85fb29a9681e876293933913845576ef8a3f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:e6:4d:52:a6:66:7e:f5:7e:04:f9:e4:e2:
41:b5:31:82:9c:1a:0f:95:e0:5e:02:17:be:fd:cd:
69:d5:0f:0e:9b:bf:bb:e7:a0:48:0d:cb:16:87:27:
20:0e:46:1d:cf:e2:17:cd:6e:2f:e2:c4:58:38:fd:
a8:aa:8c:27:0f:bd:0c:c7:da:2c:20:60:a0:28:da:
3d:50:d1:42:00:04:c4:9b:ec:55:39:3b:33:64:e5:
2d:0b:c2:d2:5a:51:eb:bf:cf:a4:3e:f5:56:7f:a3:
d6:49:3f:cc:45:c5:32:72:25:88:e1:38:00:60:99:
7a:bf:4c:3b:38:1b:c8:5b:e6:28:81:7d:fd:2a:6d:
bb:e3:79:3f:74:f4:85:58:ae:74:9f:1e:bb:19:77:
22:64:65:06:b4:1f:dd:10:63:8e:7b:c3:3c:62:8e:
1f:d3:a7:18:3f:12:84:2b:b2:09:b7:f2:cb:e3:e9:
f0:88:b1:de:e1:32:0f:14:5c:51:3d:1d:24:70:d0:
c3:e7:75:03:55:53:61:b5:72:4a:0f:5f:d1:d9:4f:
ec:e9:ed:60:95:8d:95:95:fe:eb:59:f7:69:b2:45:
52:9c:54:da:4f:fe:94:d7:57:5c:83:99:35:a0:10:
1f:5a:57:d9:b0:01:57:c8:94:0a:94:ad:d6:0b:0e:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:85:FB:29:A9:68:1E:87:62:93:93:39:13:84:55:76:EF:8A:3F:5C
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/vIX7KaloHodik5M5E4RVdu-KP1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.128.0/22
213.59.151.0-213.59.153.255
213.59.159.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b5:c7:d8:0e:96:a3:98:45:97:32:94:8a:1b:f5:9b:93:dc:
84:67:bd:58:ba:90:05:a4:11:c4:3f:91:3c:df:a2:5c:5d:99:
14:d1:59:74:15:27:12:3a:af:b5:b0:eb:aa:16:58:c4:0d:54:
d5:27:92:39:7b:35:1f:59:65:3d:7e:3a:62:29:bb:d1:a4:26:
63:e3:85:44:13:e5:ec:76:e2:0e:95:b5:d2:2f:ad:d0:95:61:
ca:71:e2:15:4d:a1:29:c1:4f:6e:02:37:31:73:03:5b:d6:c5:
2a:5f:b3:70:62:94:c6:77:0f:84:32:2d:b2:ef:ba:9a:2e:84:
7e:2e:a2:b7:ba:60:ac:8c:66:76:ef:0f:c2:03:5c:76:a0:97:
6d:bb:aa:53:2a:a3:d4:50:93:2e:2a:05:cf:86:b2:f7:47:4f:
88:65:5b:27:47:56:2a:f3:7b:ee:55:0d:62:bd:43:81:cd:af:
c4:25:e9:d0:c8:e2:d1:6a:77:55:18:06:67:5d:3e:4a:dd:85:
a6:45:38:a6:37:0a:b3:3f:7f:b5:1a:eb:9f:31:b3:82:ad:7b:
50:c1:c3:cd:99:39:49:59:ba:9f:01:aa:c2:4b:9f:eb:d5:a3:
de:cc:09:51:13:35:82:2f:84:aa:56:05:61:2b:51:74:63:c9:
da:71:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org