Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-n1G5uIjpH6MQec_saFXVkrBoLE.roa
File: 1-n1G5uIjpH6MQec_saFXVkrBoLE.roa (raw, json)
Hash identifier: nbA93L8T5yZDT7qxa9yphCho2Va7++8uYDjwVbCOjsA=
Subject key identifier: FA:7D:46:E6:E2:23:A4:7E:8C:41:E7:3F:B1:A1:57:56:4A:C1:A0:B1
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 0181D8E213731B6EBDBA6448C3D1239E5051
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-n1G5uIjpH6MQec_saFXVkrBoLE.roa
Signing time: Thu 07 Jul 2022 13:38:23 +0000
ROA not before: Thu 07 Jul 2022 13:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204021
IP address blocks: 213.189.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:e2:13:73:1b:6e:bd:ba:64:48:c3:d1:23:9e:50:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jul 7 13:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa7d46e6e223a47e8c41e73fb1a157564ac1a0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:a0:8c:cf:7a:cb:5c:11:fb:d5:bf:3c:e1:
fa:94:2c:40:e4:5b:97:e3:f8:6a:48:7c:ba:cf:36:
c3:7a:16:b2:7a:d2:4a:af:6b:9c:35:73:f9:24:69:
0f:ae:7b:04:ec:e1:2b:03:5f:c0:24:1c:b0:f5:b0:
b4:d8:e1:03:32:07:e9:c4:f7:e6:39:ce:98:4f:c5:
9e:3f:36:15:8c:03:d6:18:66:c2:b4:16:6b:bd:aa:
e1:d5:e8:9d:c7:de:f8:b8:e6:ea:12:20:a9:a6:82:
d9:1f:c7:b4:ab:b4:e0:4b:3a:81:70:77:da:f6:a9:
1c:0f:54:96:cb:c9:c1:7b:18:c2:b5:4b:e9:16:3b:
e0:a3:e8:f0:7d:81:6a:7f:63:08:fc:cd:8a:3f:d3:
34:44:cd:cc:df:9b:ce:6d:c2:24:8e:e4:0a:52:f9:
d9:73:91:c7:23:38:75:5b:9d:5c:67:4a:61:a7:7e:
ad:1d:d6:be:5e:7b:ce:96:99:ef:73:cf:ec:d9:a7:
1e:25:94:94:2b:cb:82:e3:32:10:99:5a:02:4e:67:
ec:32:4a:ac:97:71:de:88:d3:20:14:6d:e7:93:33:
0f:74:f7:16:23:8c:c6:02:1a:fd:9e:22:c3:8e:ce:
26:f7:02:a6:b2:6d:4c:1e:69:d2:ff:84:5f:2d:00:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:46:E6:E2:23:A4:7E:8C:41:E7:3F:B1:A1:57:56:4A:C1:A0:B1
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-n1G5uIjpH6MQec_saFXVkrBoLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:aa:fc:56:c7:06:af:4d:05:df:63:29:91:42:d4:44:9e:9e:
89:d0:68:65:f7:71:0b:fb:0b:38:1e:5a:79:02:26:61:c8:f0:
95:12:d8:2a:75:9c:af:e9:15:42:35:41:73:49:4d:f3:52:86:
eb:65:28:a4:49:55:d1:d8:7e:0b:3a:4e:54:95:98:e3:93:c0:
63:b0:e8:20:d8:50:75:8d:c8:2b:f9:5a:66:11:52:fd:c1:5b:
5a:80:30:46:b9:80:b9:8f:13:02:a0:ef:3e:5b:dc:16:5d:39:
e8:fb:3c:6e:43:8a:99:62:a9:ff:1c:38:68:74:6b:02:d9:50:
f4:01:2b:55:e6:5d:9e:c9:08:bb:c4:c8:ac:5d:ad:4c:98:63:
c4:35:b5:f4:0a:4c:86:b6:32:05:f5:9c:fa:ea:79:27:e6:40:
8e:d9:24:f8:6c:ae:ae:15:e1:b0:9c:1a:8a:9a:d7:5c:eb:94:
66:9e:e1:f1:cf:8a:59:8f:62:d2:67:f6:89:5f:d6:4f:98:94:
51:f2:09:43:9c:47:46:24:45:e6:f4:51:67:bc:ea:6f:02:46:
14:35:c9:06:4f:ce:8b:94:9e:b4:00:66:6c:d5:a1:7a:cc:2a:
34:81:56:fe:1a:3a:ed:41:16:cb:fb:2f:4f:e5:02:8a:89:23:
55:25:fa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org