Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/Kz8XKXar7YIwPd4zzGGTcF0Big0.roa
File: Kz8XKXar7YIwPd4zzGGTcF0Big0.roa (raw, json)
Hash identifier: bwvio0zCWarA9q1vcqW4Vb5x/kFq7omJ//9E1UtwHgA=
Subject key identifier: 2B:3F:17:29:76:AB:ED:82:30:3D:DE:33:CC:61:93:70:5D:01:8A:0D
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 01843CE2D849372BC992CF8C8C90B051871D
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/Kz8XKXar7YIwPd4zzGGTcF0Big0.roa
Signing time: Thu 03 Nov 2022 09:46:50 +0000
ROA not before: Thu 03 Nov 2022 09:46:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204645
IP address blocks: 213.232.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:e2:d8:49:37:2b:c9:92:cf:8c:8c:90:b0:51:87:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Nov 3 09:46:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b3f172976abed82303dde33cc6193705d018a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:2e:02:92:fe:04:56:3d:61:fd:90:95:a6:
d5:f7:46:cd:35:71:28:c8:5d:52:32:73:98:ac:67:
1b:a0:bd:af:1e:eb:7a:66:4f:f4:7a:1a:db:f1:aa:
ca:95:e6:77:07:e3:cb:e6:43:a6:85:4f:1b:46:9e:
b6:77:6d:c9:fe:c7:8d:f6:ba:da:6a:dc:d9:f5:64:
84:ee:47:e3:8e:ba:0c:ce:7d:2f:78:91:44:14:a3:
3c:39:6c:f0:1a:6a:af:ee:74:17:bf:a5:0d:fe:98:
dd:29:7e:05:e1:88:f1:90:f8:ef:f3:27:a5:a2:8f:
42:50:26:ba:78:2a:e4:46:0a:c8:eb:0f:cf:39:e7:
52:66:df:48:1f:10:99:ed:0a:88:48:22:56:6d:d8:
86:be:a1:11:67:ae:cf:d9:ac:2b:30:fc:f3:0e:00:
41:7f:18:61:b0:3d:3a:b9:48:b8:e4:9d:26:e5:fc:
7f:37:07:91:a6:7c:af:83:2f:f6:c1:2e:32:0c:df:
2c:57:86:e8:b4:ae:47:c5:52:0c:1e:26:85:13:b9:
e4:d5:7b:cc:60:f7:46:80:30:04:92:40:1d:fb:ef:
cd:31:34:1e:2f:d9:4f:3a:66:f0:5a:0d:f9:24:bf:
ed:ee:d7:3b:0b:e4:92:87:ef:28:a9:64:4d:f6:05:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3F:17:29:76:AB:ED:82:30:3D:DE:33:CC:61:93:70:5D:01:8A:0D
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/Kz8XKXar7YIwPd4zzGGTcF0Big0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.108.0/22
Signature Algorithm: sha256WithRSAEncryption
60:d4:2c:a2:2e:23:b5:36:68:1f:10:13:fc:f7:84:ff:28:2f:
d9:af:d3:90:0c:c6:2a:01:eb:7d:5c:00:20:a1:f3:d6:fd:9b:
78:35:91:9e:df:2f:25:e7:b0:35:19:cb:cc:d8:d4:48:3a:f5:
34:0b:3d:f8:15:02:30:0e:47:0d:fe:e3:2b:1c:2b:4d:21:04:
ea:ce:f6:89:43:61:0b:dc:ae:8a:69:07:87:57:b3:fb:32:d7:
19:0c:f3:cf:e8:bb:3a:f8:56:f7:c8:8d:41:8a:cf:09:52:00:
9f:07:9b:2a:39:b1:2f:b7:a0:13:65:96:6e:2c:c3:f7:3e:a9:
d0:2c:15:2a:0d:14:3e:fd:31:ba:b1:d4:aa:d3:9d:5f:fd:a0:
eb:6f:2a:de:56:b7:9d:4a:9f:89:e0:f2:7d:c5:7c:d5:e5:68:
ac:08:17:60:29:85:22:ec:cc:cf:fc:84:67:ba:a5:21:8a:86:
7b:da:29:6f:4c:06:0c:59:6c:a6:9a:97:11:e4:f7:07:d4:bd:
0c:77:e4:51:69:7f:07:72:c8:3e:b6:05:e6:81:f6:f4:a0:82:
43:3d:54:49:f2:cb:23:91:7d:bf:88:33:79:56:d8:d1:ac:9c:
12:ea:c3:b1:10:f3:f0:42:f3:b5:50:29:f0:0d:e0:34:2a:7f:
3f:25:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:46 2024 by rpki-client on console-fra.rpki-client.org