Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/FSwM3-TdWoJTFkwZmu7HaD_niAs.roa
File: FSwM3-TdWoJTFkwZmu7HaD_niAs.roa (raw, json)
Hash identifier: XRlOYwT4AWmsbj4TSjGV7z5OnqEyauwTDu5oNOqyz+s=
Subject key identifier: 15:2C:0C:DF:E4:DD:5A:82:53:16:4C:19:9A:EE:C7:68:3F:E7:88:0B
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13F786E8
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/FSwM3-TdWoJTFkwZmu7HaD_niAs.roa
Signing time: Sat 01 Jan 2022 11:55:30 +0000
ROA not before: Sat 01 Jan 2022 11:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 213.238.167.0/24 maxlen: 24
213.238.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334989032 (0x13f786e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=152c0cdfe4dd5a8253164c199aeec7683fe7880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:8d:36:7f:b4:ed:1e:03:ce:da:08:31:b9:
75:c2:2c:fb:b9:f2:4c:14:9f:f9:d5:b4:e8:a9:66:
a5:10:a1:0e:82:7d:d9:de:32:eb:16:dd:31:1f:15:
34:39:e4:34:b7:aa:2b:0e:22:22:a3:e5:36:31:0e:
9e:42:08:24:7b:4b:0f:1e:f8:dd:d8:86:ab:cc:05:
c5:09:d3:eb:86:c5:14:b0:1c:30:59:5e:b2:f3:a4:
04:04:fc:93:8e:6f:dd:52:47:74:cc:19:17:48:c9:
f1:ff:d1:a3:93:e4:fb:de:d9:e8:4b:09:aa:fe:d5:
40:2a:74:a6:51:52:ef:84:b1:2c:4c:84:f1:93:68:
d7:24:7a:c6:e9:ed:3a:47:ea:33:f5:f7:7e:91:e4:
e8:e6:d9:f4:43:a6:37:bf:8f:b7:f3:4d:45:f0:9f:
a2:f0:02:bc:05:8c:7a:9f:f8:c7:ef:be:16:5e:22:
6e:7e:7e:30:d1:ef:1e:27:73:eb:4f:ac:ce:ec:54:
fc:83:2c:07:1c:d7:8c:ed:01:5a:f9:f9:35:47:e6:
8b:4d:aa:66:4d:74:1a:d2:f6:ed:df:66:f9:f2:56:
42:c2:1a:06:ac:89:84:85:46:d0:a4:c0:26:d8:66:
4b:e2:ac:0d:ca:4b:e2:e2:27:23:7f:0e:3c:63:a8:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:0C:DF:E4:DD:5A:82:53:16:4C:19:9A:EE:C7:68:3F:E7:88:0B
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/FSwM3-TdWoJTFkwZmu7HaD_niAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.167.0/24
213.238.182.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fb:6a:1a:a4:d3:88:09:1c:3e:d1:8e:35:88:e8:ca:ae:81:
6a:ac:16:2a:d5:c3:cd:d8:48:8c:48:8f:62:35:c4:fe:f5:bd:
0b:01:b5:c9:e6:13:30:56:09:89:78:77:12:b8:82:3e:74:00:
b4:32:10:83:db:3f:75:da:e8:c0:51:57:e1:dc:bf:ba:ea:26:
8d:c8:ee:a2:8c:43:e3:6d:57:2e:82:c2:d6:7a:fd:96:20:a2:
07:4f:e9:be:8e:23:64:82:77:1c:c6:36:cb:11:0b:99:4a:07:
ce:aa:6c:11:f6:8f:7a:d7:eb:e9:ca:ee:9b:f6:21:dc:45:f5:
64:f7:b8:29:3f:85:5b:cd:92:7b:06:70:c9:82:ee:27:ea:46:
a1:ee:f0:90:db:05:8c:10:1f:41:bc:99:a6:00:dd:b8:70:2b:
f4:73:41:e8:e8:a4:04:a8:3b:a4:54:84:eb:11:e5:4c:6a:90:
44:0b:3f:6d:ef:d1:14:ca:68:9a:ac:c8:9e:6c:82:e2:87:3d:
5b:2e:52:93:63:b1:91:09:6e:71:b2:c0:0d:cc:48:3e:78:73:
3d:9f:57:45:d5:67:0f:b6:11:80:49:a9:7a:ae:b6:b6:58:d8:
ac:c6:5d:44:74:b2:8d:29:30:dc:b9:6e:b9:70:6e:f0:4a:c2:
d8:92:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org