Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/BAHHHAke2ouP1lc2dvxfieyjH4M.roa
File: BAHHHAke2ouP1lc2dvxfieyjH4M.roa (raw, json)
Hash identifier: u6FaF2kulYVR+QG+L6sUXxIcT0LDUPp2siRdxgujQkE=
Subject key identifier: 04:01:C7:1C:09:1E:DA:8B:8F:D6:57:36:76:FC:5F:89:EC:A3:1F:83
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 0184132AF13D6C800CBE2B94A180059B08EA
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/BAHHHAke2ouP1lc2dvxfieyjH4M.roa
Signing time: Wed 26 Oct 2022 07:21:32 +0000
ROA not before: Wed 26 Oct 2022 07:21:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209956
IP address blocks: 213.238.189.0/24 maxlen: 24
213.238.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:2a:f1:3d:6c:80:0c:be:2b:94:a1:80:05:9b:08:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Oct 26 07:21:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0401c71c091eda8b8fd6573676fc5f89eca31f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:1a:9e:be:d6:c5:cb:42:43:2e:81:ab:9e:
28:5c:b2:b6:10:59:a1:5c:a4:64:a3:6a:a9:5d:05:
b8:18:61:4f:4d:e3:e6:87:a0:df:75:4b:7f:e2:fa:
d4:b8:9b:07:25:c2:db:dd:97:82:09:40:00:b0:97:
82:a6:3f:2c:f3:5d:60:34:5e:3c:63:09:98:ca:bc:
7c:7f:a0:eb:cc:f8:f7:0c:2e:a8:be:2a:18:1b:ef:
ec:b7:5a:2a:28:03:94:68:4e:64:f3:2d:42:2f:fc:
22:a8:aa:3c:c0:8b:b7:6b:90:cb:58:42:17:40:b1:
31:63:b6:20:84:a5:f5:22:9c:c7:35:24:7e:b0:d8:
21:d7:8e:1d:b1:0e:05:db:da:62:cf:86:0b:97:6b:
db:80:7a:68:83:90:55:5a:6f:b5:e4:8e:40:e2:1f:
95:f0:1f:38:cf:d4:56:66:3a:45:a2:33:b0:24:97:
92:97:1b:c7:a6:8f:3f:11:ce:b2:ae:1c:b4:c3:3d:
22:bd:01:df:c7:b8:fd:b1:3e:bf:b4:8d:e8:5f:51:
15:6a:2a:37:ae:47:f5:72:ad:86:9e:5d:6e:b6:61:
19:33:87:a4:6b:68:dd:28:bb:c6:17:12:32:a5:59:
1e:ff:84:01:3d:5e:2b:4c:70:51:ad:c5:9d:a0:19:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:C7:1C:09:1E:DA:8B:8F:D6:57:36:76:FC:5F:89:EC:A3:1F:83
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/BAHHHAke2ouP1lc2dvxfieyjH4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.187.0/24
213.238.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:52:94:26:b5:94:a7:c1:35:f2:c5:82:d8:2f:78:d1:b7:c4:
07:07:a3:06:80:d8:f4:50:7f:f0:40:bc:d6:eb:6c:45:2f:b3:
d2:4e:ee:6c:6d:9b:84:1e:de:71:ca:fb:5e:b0:15:97:9f:7e:
1c:45:70:7d:23:f7:bf:7b:9f:6c:37:39:a3:91:74:a9:a1:33:
b4:5d:9e:5d:8f:3d:ce:a1:b0:79:5a:e2:05:29:52:2d:05:8a:
8a:af:69:97:73:81:b4:2d:ef:59:ae:bd:0e:5a:d7:cd:6d:8e:
ec:2e:51:52:eb:01:46:8b:17:48:0e:0c:48:73:5f:1c:25:56:
67:7a:2f:6d:62:85:40:de:69:d3:09:4a:8a:77:e6:54:ed:c6:
dc:fe:62:f9:ca:fe:15:35:a1:de:ee:b9:a6:42:ee:58:c5:b2:
08:55:6e:42:64:e3:e2:5c:8c:6c:81:04:c4:97:cd:e7:5b:49:
60:0a:65:6c:c3:f5:d6:85:88:8c:3f:53:6a:74:07:c8:37:63:
03:be:db:11:82:cc:6d:5f:85:42:cf:18:3a:21:8a:0e:36:7a:
3c:80:8c:96:48:eb:5f:78:92:e5:b9:de:7c:88:7b:87:e4:fa:
8f:ea:c8:d5:52:aa:1c:8c:8b:ab:bb:de:72:e6:40:1d:17:e2:
4b:08:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org