Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/paXGzyABSblHdrQMbf1hqk55EMs.roa
File: paXGzyABSblHdrQMbf1hqk55EMs.roa (raw, json)
Hash identifier: FcZ2xxgnwBgvbKbaEWunl8PKEKGatSDGlNTb5mr1aK0=
Subject key identifier: A5:A5:C6:CF:20:01:49:B9:47:76:B4:0C:6D:FD:61:AA:4E:79:10:CB
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CB1B06C
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/paXGzyABSblHdrQMbf1hqk55EMs.roa
Signing time: Sat 01 Jan 2022 04:59:43 +0000
ROA not before: Sat 01 Jan 2022 04:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201592
IP address blocks: 213.189.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749842540 (0x2cb1b06c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5a5c6cf200149b94776b40c6dfd61aa4e7910cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:f2:ce:ef:e0:2f:6a:be:1a:cc:30:19:84:
29:3d:17:64:39:bc:f7:16:bb:70:ee:2b:cc:ac:1a:
2c:4a:ee:61:50:97:ba:1e:6b:2b:61:f2:67:a9:c6:
f2:f8:e9:f4:be:1f:aa:db:4a:28:47:81:1d:32:ee:
c8:f4:0d:45:23:30:89:d9:a8:2d:f9:28:35:c6:b5:
2a:f3:83:2b:98:81:cb:6a:27:43:7a:63:53:8c:d6:
c0:d5:ee:7c:7a:7c:ce:9e:4c:71:1d:2e:76:9d:dd:
72:2b:f4:05:b7:7d:49:de:04:ab:a3:00:fa:2b:36:
60:06:a0:98:69:04:1a:17:01:8f:28:e4:df:73:80:
c2:a4:28:83:46:6a:cc:14:8e:95:cd:3e:c7:9d:dd:
e0:f0:92:60:23:8c:aa:7b:d0:fa:19:73:fc:15:9d:
89:4a:16:75:dd:7d:95:9c:80:41:42:9a:95:ee:fd:
3b:33:0d:c2:15:dc:c8:20:ec:cd:11:a0:8a:d5:42:
d4:d8:47:c4:c7:a1:7f:b3:8f:15:2a:ff:b6:a3:84:
e8:d8:42:93:0d:23:87:0a:cf:f1:bb:da:11:3a:39:
1a:00:4e:d8:0e:47:d5:1d:3a:47:e0:cd:f1:05:7e:
05:3d:d0:dd:34:2c:00:e9:9f:ed:49:55:09:12:66:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A5:C6:CF:20:01:49:B9:47:76:B4:0C:6D:FD:61:AA:4E:79:10:CB
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/paXGzyABSblHdrQMbf1hqk55EMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:27:e7:7a:65:55:b8:b1:d7:0a:85:ce:10:2f:b9:94:08:1a:
1e:36:24:6e:1d:71:63:5c:97:52:15:f9:0b:24:fa:01:10:95:
ad:29:79:f2:0e:d8:f5:b8:71:6b:61:77:14:e4:cf:77:38:21:
21:3c:5a:2e:85:54:cc:6d:d3:86:1d:1f:6c:ad:a8:3f:38:32:
61:c0:3d:3e:d2:fe:d1:ab:23:19:5d:0a:6f:fa:09:8f:da:02:
e3:d9:0a:70:81:4a:e4:32:fd:07:e5:66:28:d6:83:03:9e:60:
a9:6e:a8:ec:fe:dd:a3:07:43:83:c5:21:26:13:0f:64:7b:04:
ca:5a:60:dd:41:24:eb:6f:ee:b4:f7:1f:43:06:c9:da:d1:f0:
31:f9:16:e6:39:7a:f4:6f:e2:76:3e:2d:d1:ac:f1:7f:22:e9:
a8:d9:04:95:e2:40:51:f2:d2:e1:33:f4:6e:15:f7:5e:d0:a8:
4b:38:d8:d6:c1:3f:ea:39:c9:98:c6:7a:83:7d:d5:43:b2:f0:
45:cf:c8:41:03:ff:e0:11:c5:4a:aa:0f:32:ce:c4:76:df:17:
6e:8a:d0:b3:76:01:41:44:9d:21:49:f2:2c:47:fd:94:10:2e:
43:10:60:ab:4a:8e:71:ca:ad:13:6e:97:bc:bb:5c:34:af:95:
23:5b:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org