Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/RmmzKiQH8Ecx2j6ADhMRDuY6UxU.roa
File: RmmzKiQH8Ecx2j6ADhMRDuY6UxU.roa (raw, json)
Hash identifier: JaHIJFIplvHFs5kTxrP71373cnMWoxNwuCQWD3SBcvI=
Subject key identifier: 46:69:B3:2A:24:07:F0:47:31:DA:3E:80:0E:13:11:0E:E6:3A:53:15
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0F998F99
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/RmmzKiQH8Ecx2j6ADhMRDuY6UxU.roa
Signing time: Sat 01 Jan 2022 00:51:03 +0000
ROA not before: Sat 01 Jan 2022 00:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13068
IP address blocks: 213.164.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261722009 (0xf998f99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 00:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4669b32a2407f04731da3e800e13110ee63a5315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:ef:9b:c2:e7:9e:75:b9:63:ec:a2:03:f3:
0d:02:39:6e:2e:ba:6e:a6:ca:0c:b4:c0:6c:b1:82:
eb:bd:6d:68:ab:f2:e1:4a:81:26:a1:e4:30:25:3d:
ea:a5:e7:eb:37:05:91:00:88:e3:a9:65:f0:d6:ba:
6c:a5:3a:0d:be:4f:b3:bf:f0:6a:c9:ea:02:67:db:
f4:39:f3:31:95:37:2d:88:6d:65:6a:57:f3:2d:27:
b3:77:41:0e:86:a1:92:6d:35:ca:49:fe:37:3c:6c:
85:3f:83:d3:ad:f6:3f:66:d6:c3:21:83:b7:22:07:
da:bd:ab:b4:16:bc:8a:de:46:5e:53:34:fb:67:d9:
4b:36:d1:62:55:e9:69:fc:44:bd:5e:f6:4e:3d:3f:
28:0f:31:aa:52:43:ae:d2:c7:93:7f:24:ff:9c:c4:
8b:21:a7:68:3e:d6:28:86:d5:e7:4a:69:19:50:89:
f3:3e:4b:da:d2:af:0f:d7:33:27:97:0c:e8:dc:44:
18:ca:6c:88:48:cf:c4:06:3b:f1:6c:af:00:35:a5:
fc:23:20:e7:50:17:0a:8e:ec:ee:b3:e8:ad:f4:7d:
c0:3d:49:e9:fd:19:74:08:0d:b4:06:e7:32:47:e0:
90:9e:0f:3f:a9:e1:ac:df:f6:9d:63:a2:73:7b:a3:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:B3:2A:24:07:F0:47:31:DA:3E:80:0E:13:11:0E:E6:3A:53:15
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/RmmzKiQH8Ecx2j6ADhMRDuY6UxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.164.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:65:3b:4f:16:f4:8b:fe:ae:f0:a2:a3:3f:22:15:c3:1b:dd:
05:a7:02:29:78:95:15:1d:3d:d6:dc:0b:3e:92:03:e6:69:ea:
51:7f:07:9c:e7:2f:ba:dd:7f:51:20:ff:4d:d2:1a:8f:91:d4:
31:80:55:51:6d:4c:b6:3a:a0:98:e0:2d:8b:5c:2e:17:f0:46:
44:28:14:b9:89:22:33:46:df:ff:e5:9b:f7:dc:8e:46:a8:91:
77:ff:f0:bd:19:74:d7:67:55:e6:c5:ae:96:99:a5:80:5b:7d:
07:d0:55:e4:cd:4e:a7:85:e9:8c:ad:2c:f8:1d:1d:a7:e0:46:
ac:de:ae:83:45:3f:57:e2:59:e4:ac:8d:b1:09:47:90:e5:18:
1f:c9:34:8e:77:85:8d:24:58:40:86:56:c4:1f:4a:37:f3:ca:
11:9b:b7:eb:33:29:81:9d:77:34:cb:65:d2:d1:9a:ca:77:d2:
d6:97:50:6a:4f:55:03:a8:30:db:b4:83:d8:0d:bc:68:3a:fa:
7f:b2:e2:6d:8f:e0:55:d4:78:3c:3e:af:14:95:19:62:a7:21:
6a:ee:8a:2f:9a:fa:93:d6:ee:c6:30:8a:b3:05:29:41:29:97:
26:9e:2e:04:b4:ca:34:0a:2d:65:f4:dd:f5:d6:70:7f:3a:dd:
0f:b2:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org