Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8RiSujw7xJovOxxWy-TT8g2nWJY.roa
File: 8RiSujw7xJovOxxWy-TT8g2nWJY.roa (raw, json)
Hash identifier: DJ4VDeJ4Qn8uqGQQCGI9uTzwdinCz63vIP3yhuf/vXA=
Subject key identifier: F1:18:92:BA:3C:3B:C4:9A:2F:3B:1C:56:CB:E4:D3:F2:0D:A7:58:96
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13EE5E5D
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8RiSujw7xJovOxxWy-TT8g2nWJY.roa
Signing time: Sat 01 Jan 2022 11:55:24 +0000
ROA not before: Sat 01 Jan 2022 11:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25145
IP address blocks: 213.238.160.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.165.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334388829 (0x13ee5e5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f11892ba3c3bc49a2f3b1c56cbe4d3f20da75896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:84:52:97:52:22:e3:4f:09:a2:9c:2a:c2:
e6:5f:fb:b8:0f:06:46:a7:a6:4d:4d:1b:10:d6:90:
ad:e2:1c:0a:0b:ad:16:b5:66:21:5b:8f:c5:2c:4c:
f2:25:95:dc:81:89:11:f0:ff:fd:9e:a5:39:0a:e3:
34:26:57:08:df:76:34:82:64:c2:bd:07:e4:0d:de:
d6:6b:83:f5:3c:a7:55:8e:14:27:7e:4e:98:f2:91:
a6:a1:59:e4:5c:df:bd:a5:2c:da:ce:e4:25:04:ea:
ce:7c:a5:43:78:9d:88:8a:dc:82:4c:26:62:81:89:
82:26:62:81:03:0f:d4:34:c5:a1:c1:0e:5a:6d:12:
21:f7:a2:d1:c8:a3:a2:3b:d7:65:4f:c2:f3:d5:6f:
f9:b9:44:4a:a5:39:aa:0b:5d:ab:19:63:93:7e:bd:
4f:0d:b3:35:bc:02:63:f1:c8:c1:28:f8:2f:bb:b5:
2b:da:11:af:ef:e9:2e:ad:d1:91:37:bc:4d:c3:9e:
37:28:13:3f:41:4d:cb:1c:1a:36:b9:0f:5a:b5:a8:
ee:4d:79:9d:5d:43:ee:83:b4:9e:3e:40:7e:94:eb:
20:00:6b:a9:e2:37:48:65:68:08:0d:2a:6b:74:4f:
30:48:de:dc:0c:d9:a4:2c:ba:64:44:f3:25:1a:3d:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:92:BA:3C:3B:C4:9A:2F:3B:1C:56:CB:E4:D3:F2:0D:A7:58:96
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/8RiSujw7xJovOxxWy-TT8g2nWJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
213.238.168.0/24
Signature Algorithm: sha256WithRSAEncryption
63:70:9c:c3:85:4c:c7:16:6a:5c:5b:7e:11:51:b3:f0:60:8e:
f6:d4:95:ce:07:06:35:83:f9:94:da:09:28:39:b4:15:20:94:
40:b3:f8:60:ff:56:8d:f0:63:82:ee:77:9a:b3:bf:ee:ab:c0:
4a:38:43:af:ee:de:34:fc:b4:2d:0a:c1:cc:21:09:e9:10:6d:
58:6e:83:60:20:70:00:d6:2e:58:74:96:cc:c2:9c:bb:e3:01:
05:34:41:e3:d7:e6:35:1b:56:3b:9d:e2:20:08:a9:f5:3d:d8:
3a:27:4f:00:bf:2a:73:73:69:e8:cd:a7:69:84:95:05:1a:ec:
d2:a8:34:48:24:44:d4:11:13:b6:a7:09:d1:ce:f9:42:e3:e4:
ce:5b:71:fb:21:c5:1b:42:32:09:48:bf:44:c3:b6:2c:79:d2:
9e:9b:df:ec:7b:f4:9d:69:06:39:76:cd:0f:db:28:80:0e:f3:
89:a4:02:ed:9e:1a:db:8a:ac:5e:8d:95:ba:43:9e:59:65:2e:
b9:b5:ea:a6:02:33:2b:5a:07:21:19:be:9e:99:f7:38:08:57:
74:7c:97:69:5e:d5:84:4c:a7:ea:2d:16:f9:3e:74:c7:4a:65:
84:a0:59:1e:4e:8c:02:4a:5b:53:4f:73:36:70:f5:b3:3a:4a:
7a:09:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org