Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/86vayzx-CLdROXbSurYCgLJUnRo.roa
File: 86vayzx-CLdROXbSurYCgLJUnRo.roa (raw, json)
Hash identifier: DHN+ggb6TIONX2Ty7m6JnBDHRbfhjYnl75tUobqal4Q=
Subject key identifier: F3:AB:DA:CB:3C:7E:08:B7:51:39:76:D2:BA:B6:02:80:B2:54:9D:1A
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13EBB905
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/86vayzx-CLdROXbSurYCgLJUnRo.roa
Signing time: Sat 01 Jan 2022 11:55:23 +0000
ROA not before: Sat 01 Jan 2022 11:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 213.238.165.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.160.0/24 maxlen: 24
213.238.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334215429 (0x13ebb905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3abdacb3c7e08b7513976d2bab60280b2549d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:9f:52:ab:cf:ab:a8:d9:cd:2b:0a:0e:9a:
43:74:00:22:99:23:c8:f5:11:32:f8:77:de:f5:59:
10:b0:47:22:58:38:e2:f1:a8:d7:88:ee:e5:57:1c:
a9:3a:19:d2:4d:09:38:fe:08:ac:79:30:85:42:54:
a8:34:b6:11:bf:69:27:e9:a6:17:ae:e7:25:9d:9c:
eb:45:08:69:86:b8:14:c2:05:a7:ef:81:c0:49:18:
eb:b8:8d:6e:04:28:f1:84:4c:fd:11:17:ee:70:e1:
d6:a6:3a:a0:b4:d9:e6:ae:5e:df:a0:4a:77:64:af:
00:6d:ad:fb:47:e2:f4:6b:5e:f7:44:21:ea:5c:ba:
1d:a5:af:d5:b0:a9:e6:e9:39:33:16:a8:b6:9d:dc:
74:5e:4d:61:5f:15:c8:c2:09:5e:c5:02:96:77:8d:
d2:32:25:88:50:73:e4:1f:a7:2a:a4:72:38:7f:75:
89:e3:9d:e0:0d:ac:f1:6b:77:2d:a5:eb:8b:da:5b:
41:91:f4:84:e8:3c:49:4c:01:b4:e8:b8:fe:7b:69:
b0:c0:16:24:8f:90:a8:27:13:69:d1:da:9f:e2:1d:
f8:f9:fa:99:2d:28:e8:6e:b5:d1:ca:da:ae:b0:9c:
00:33:29:e1:7a:08:ff:7b:4e:93:4c:58:7e:d4:8f:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:DA:CB:3C:7E:08:B7:51:39:76:D2:BA:B6:02:80:B2:54:9D:1A
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/86vayzx-CLdROXbSurYCgLJUnRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
213.238.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8b:83:39:24:32:a2:d3:06:9e:e8:88:35:ae:27:32:aa:86:
02:2d:79:8a:e8:84:28:4e:89:bf:17:9a:60:42:b8:19:14:d8:
62:a4:8b:ae:18:a7:40:f3:50:ba:5d:db:42:9e:8c:e1:77:14:
b7:ad:2e:17:fb:ff:ca:ba:26:c3:0e:d5:f6:92:00:c4:2f:e6:
4d:55:52:a3:98:51:95:fb:29:09:7e:26:32:0c:b1:52:84:7d:
74:cb:da:0a:fd:18:c9:86:7f:30:30:96:84:25:85:1f:5e:6e:
f5:57:53:61:f7:88:28:de:07:9a:e2:69:a9:54:52:e1:62:62:
f4:78:b4:04:40:48:6d:80:f7:13:22:0d:e9:d0:d1:f5:c4:24:
b5:3d:e7:86:67:af:a3:ce:cd:fc:51:be:5a:76:13:c6:01:fc:
1d:a5:b8:69:64:8c:1d:6e:e4:d8:08:ee:61:ff:d5:74:05:32:
29:f6:76:2e:3d:0c:4a:4d:d4:5e:19:d9:f3:25:3f:61:41:a9:
6f:47:5d:51:37:ed:80:b4:4a:5c:9f:1d:bd:b9:f7:9e:d9:c4:
ed:78:c1:29:8c:ff:a8:7a:9f:de:b8:05:cb:85:c8:dd:9a:4f:
98:1b:80:63:cd:81:c5:29:14:26:e8:ab:88:ae:3c:f5:30:d4:
d8:44:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org