Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/vgQb4tNZorsMwHk-7zZm6KHzPac.roa
File: vgQb4tNZorsMwHk-7zZm6KHzPac.roa (raw, json)
Hash identifier: Yhjr5AVLx4WFe8oB5JTMOn2dBrcWVeFxRlTWgv9BR6A=
Subject key identifier: BE:04:1B:E2:D3:59:A2:BB:0C:C0:79:3E:EF:36:66:E8:A1:F3:3D:A7
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: 7D31
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/vgQb4tNZorsMwHk-7zZm6KHzPac.roa
Signing time: Tue 25 Jan 2022 18:23:34 +0000
ROA not before: Tue 25 Jan 2022 18:23:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 213.217.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32049 (0x7d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: Jan 25 18:23:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be041be2d359a2bb0cc0793eef3666e8a1f33da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:4b:1b:4c:2d:a9:76:1b:24:a1:16:bc:b1:
aa:c8:14:95:4b:86:74:3e:97:c1:da:8f:44:2f:aa:
82:27:86:07:aa:d3:10:d7:34:a8:0b:50:90:9f:7d:
33:34:af:ac:58:7c:1a:71:4c:7c:b1:4d:67:87:97:
1d:d0:c3:08:ab:7c:9b:22:4a:ac:eb:13:ae:8f:b0:
66:fa:bc:a9:c9:73:e1:bc:20:de:10:87:cf:da:3b:
95:37:87:e7:e0:a9:64:2b:10:07:b8:b7:a2:04:d7:
d0:e3:e5:ea:e0:fb:50:63:2c:bc:11:11:32:b5:43:
7d:2f:53:85:02:36:de:cb:5d:e9:a3:20:36:3b:69:
45:cd:54:d0:8f:1d:fd:77:e3:7e:4c:b5:83:cf:12:
33:6a:1c:e0:b5:2c:34:d2:ce:f0:91:68:c8:dd:b5:
5a:d4:b1:0b:ea:c0:bb:a3:73:ec:c1:c0:1c:ee:f8:
b3:51:a4:1a:0b:ae:6a:99:2d:2e:0e:97:c5:5a:54:
17:02:9d:0e:0f:1d:b0:17:c9:98:c6:6d:14:ca:43:
89:ea:67:01:c6:08:f1:a1:ed:55:40:99:72:9f:27:
60:4d:5c:f5:50:b3:07:5e:c8:37:0a:90:4d:3a:c0:
a9:93:03:01:cd:90:3d:22:88:4c:99:ac:01:e7:9a:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:1B:E2:D3:59:A2:BB:0C:C0:79:3E:EF:36:66:E8:A1:F3:3D:A7
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/vgQb4tNZorsMwHk-7zZm6KHzPac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
76:69:99:8e:e1:50:d4:9a:21:d6:4f:1c:4a:8b:85:09:a0:26:
98:05:1a:a1:bb:ac:d1:54:fd:1a:69:94:d6:85:53:d3:4f:6f:
39:48:5a:21:cf:eb:50:80:3f:64:92:fe:39:fc:16:34:cb:8b:
c0:01:93:38:15:4d:c8:78:72:ca:eb:52:a8:af:05:d4:c5:e0:
7f:3b:9e:db:dc:8c:97:81:69:cf:4c:71:52:2a:be:1a:ab:72:
3b:32:ef:a9:1f:96:6c:4c:bd:0c:82:31:09:d9:7e:49:95:08:
a3:82:6f:fc:d7:f4:4c:62:b5:06:71:69:31:46:7d:29:52:47:
c4:d0:04:df:49:59:0f:64:44:ec:6b:66:13:d0:23:fb:21:ec:
45:e2:7f:f4:3c:a4:32:09:af:b4:b6:45:6a:94:67:3e:c7:f9:
79:80:4d:3d:5b:c6:bb:e1:4a:1b:7d:96:18:52:9f:c0:6e:27:
9d:bf:ec:92:92:4f:c9:52:d1:c2:3f:ea:04:bb:ee:e5:86:8c:
6a:46:34:2f:e0:e6:b6:ba:18:68:b1:d2:49:a0:eb:d9:7f:7c:
88:03:22:8b:f8:4a:39:79:88:ff:95:29:df:36:04:b1:0a:cd:
81:9e:42:58:9a:4e:df:6e:2b:7f:6a:af:0a:6e:64:8e:84:d9:
ad:db:42:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:04 2023 by rpki-client on console-fra.rpki-client.org