Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/t4pIYvCfbLMR_Cau44Er8TtC1TU.roa
File: t4pIYvCfbLMR_Cau44Er8TtC1TU.roa (raw, json)
Hash identifier: 9i9Gjbl4gmtSuEjGiLDqGmAhz0cbTG23QMKUu5Mq0B0=
Subject key identifier: B7:8A:48:62:F0:9F:6C:B3:11:FC:26:AE:E3:81:2B:F1:3B:42:D5:35
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CAF7DAE
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/t4pIYvCfbLMR_Cau44Er8TtC1TU.roa
Signing time: Sat 01 Jan 2022 04:59:42 +0000
ROA not before: Sat 01 Jan 2022 04:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199453
IP address blocks: 213.189.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749698478 (0x2caf7dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b78a4862f09f6cb311fc26aee3812bf13b42d535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:e8:75:a9:a1:93:9f:e2:01:67:69:a6:b5:
63:65:04:05:13:07:74:af:dd:d8:ff:47:63:c2:34:
7f:98:a6:35:61:4d:76:61:48:a6:e4:8c:9e:ae:47:
18:0a:9e:a6:45:2f:b6:2c:51:75:5f:14:d7:e3:a7:
96:1a:16:f4:19:59:f5:4a:a2:5a:3b:c6:80:0c:fc:
74:d2:04:96:10:51:0d:70:d5:1a:d5:52:93:65:78:
a6:44:21:b1:68:ca:b6:1b:79:01:72:4c:34:52:a9:
59:41:0a:02:95:b8:a0:a1:24:e5:22:60:e8:19:9c:
44:d8:78:f2:9f:01:e2:3a:11:70:0f:b9:f9:1d:39:
a5:bd:b9:d2:d0:da:0f:d5:18:a6:f8:e5:e1:4f:96:
86:c2:b9:3c:4c:f2:03:3a:30:fc:e5:f3:bf:37:97:
75:04:7e:3a:2e:94:5d:32:d0:f1:58:08:7c:8c:fa:
a2:d9:00:01:3e:16:b5:08:d1:71:39:a0:9a:58:fa:
c8:49:47:a4:bd:6b:ce:55:85:21:00:09:e2:4b:18:
54:b6:a6:40:a5:e5:0c:d0:61:ff:08:14:20:4e:a8:
34:bb:9e:51:b5:1e:f3:a0:c5:bf:8f:c8:31:23:bb:
81:e3:de:8c:3a:20:eb:0f:cd:29:24:dd:2c:59:d4:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8A:48:62:F0:9F:6C:B3:11:FC:26:AE:E3:81:2B:F1:3B:42:D5:35
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/t4pIYvCfbLMR_Cau44Er8TtC1TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.39.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:63:64:91:29:52:b1:4a:9d:a6:19:ff:f0:75:53:86:b6:5c:
20:13:60:c6:b3:b8:c8:d1:5c:5f:be:d7:c3:73:8a:33:1f:05:
1d:78:e5:23:3c:c4:be:4a:bf:8d:ea:77:e2:8f:73:12:75:4a:
87:bf:5d:a5:99:59:7c:85:5b:6a:2d:35:53:33:d9:06:f6:40:
89:fc:2c:04:55:91:64:19:9e:54:ef:fe:cc:e5:24:e2:7b:3e:
a5:bc:a0:88:18:b9:23:bd:e0:aa:4b:b6:31:61:b9:b7:68:09:
12:a7:24:5c:14:5a:7f:8a:46:b5:20:cc:b5:00:7f:02:d9:09:
9d:78:28:3d:25:5d:b4:77:88:cb:f7:6d:a0:ca:3f:79:dd:cb:
12:2f:54:ed:d8:49:7e:2b:69:df:f2:f6:fb:42:3e:4e:61:17:
87:66:2c:f4:20:5e:dc:5f:35:43:36:c5:5e:cb:64:b2:3a:78:
07:dc:f3:a8:a8:2e:db:4a:bd:a4:f5:15:17:21:41:83:ba:9a:
0e:db:8a:1a:dc:bb:77:b0:c6:5e:4a:1d:69:fa:e5:ac:24:e5:
30:1c:d1:91:75:70:86:84:5e:1f:89:8e:b0:d6:19:1f:5b:8c:
ee:46:c2:b6:e5:5b:71:72:86:d7:5a:c5:f0:c9:78:30:e7:98:
16:0c:e0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org