Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/KFhb4crsLkTCQaabod3_spz9bbg.roa
File: KFhb4crsLkTCQaabod3_spz9bbg.roa (raw, json)
Hash identifier: iZ890xMYQn822J0LyTnUuhDNx+mzsP3cm9S2sQcq+RI=
Subject key identifier: 28:58:5B:E1:CA:EC:2E:44:C2:41:A6:9B:A1:DD:FF:B2:9C:FD:6D:B8
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13F0131D
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/KFhb4crsLkTCQaabod3_spz9bbg.roa
Signing time: Sat 01 Jan 2022 11:55:25 +0000
ROA not before: Sat 01 Jan 2022 11:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42910
IP address blocks: 213.238.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334500637 (0x13f0131d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28585be1caec2e44c241a69ba1ddffb29cfd6db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:b2:5b:be:d4:c6:44:92:a2:24:2f:6f:fb:
90:df:7a:05:6e:91:09:e4:94:eb:25:f4:c4:b5:36:
95:1e:8d:3f:79:eb:12:61:e8:98:e6:7e:ce:dd:e5:
99:bf:62:3e:22:6a:d3:8b:5a:b2:7a:11:29:4d:e6:
fc:e6:f3:6a:60:c5:90:d2:ff:c1:1c:6e:89:5c:de:
eb:f7:25:6f:d8:ee:af:c0:12:7a:c3:41:2e:26:f6:
1a:ad:ad:4a:3d:09:20:3a:5d:ee:0c:ee:b4:6e:c8:
20:96:85:0c:65:f2:85:7e:c9:38:95:da:c1:2e:30:
b2:d7:6f:1d:bd:3c:dc:fe:5b:e5:60:4e:0d:a9:3b:
6f:2e:d1:b0:1d:1c:bd:e4:1b:78:1a:40:ef:1e:bd:
45:e8:b0:8f:ee:32:2a:b5:11:1f:1a:ad:0d:16:ef:
57:0c:a4:06:64:e7:d7:63:58:45:39:4f:c1:28:d7:
9b:65:34:de:66:5f:af:43:da:92:c7:55:51:92:07:
31:59:00:87:db:90:6b:69:c9:1b:be:93:5b:00:27:
ad:7a:d0:4e:c3:7e:e3:28:09:81:6b:f5:a6:fb:e8:
5d:01:74:8d:c9:57:7f:8f:c6:f6:d6:25:df:e8:be:
6c:f1:9e:28:d1:b2:92:73:a7:40:5e:bc:38:ac:a0:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:58:5B:E1:CA:EC:2E:44:C2:41:A6:9B:A1:DD:FF:B2:9C:FD:6D:B8
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/KFhb4crsLkTCQaabod3_spz9bbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:56:be:b6:57:7e:f9:84:0e:5c:2b:52:93:29:7c:0b:43:95:
e7:35:74:03:2d:92:19:c9:15:7d:0e:a4:7e:1d:1c:fb:e0:28:
d6:76:12:69:1f:24:5f:58:e0:10:78:9f:e9:0b:db:e2:32:f4:
bc:55:99:e6:71:66:27:81:d7:fd:04:26:ed:77:3c:07:3c:dc:
67:84:5f:60:1e:22:26:93:c7:d6:e9:e4:a2:72:fd:fd:1d:b1:
7f:79:d8:d5:0b:c0:a4:a7:b0:de:f4:32:90:89:5b:a1:98:98:
8b:7d:36:f6:52:f2:bf:42:89:27:b7:fd:9c:67:23:25:f9:b6:
33:83:f4:a6:7d:32:74:d1:33:b9:6f:7f:62:d3:b5:6e:65:fc:
5d:c7:98:5e:cc:ee:69:3e:81:f0:5d:db:c3:de:60:47:ac:98:
cf:c7:d7:aa:a6:70:ea:0e:d1:05:30:45:ec:d2:03:e5:d4:8d:
e9:46:f9:8c:30:da:69:76:6c:91:ca:e5:b3:87:fb:78:8d:90:
1e:9a:af:34:ef:17:36:fd:6a:61:4a:21:92:be:e2:e6:f0:59:
68:7d:e8:3f:52:82:01:28:18:a2:1f:5e:42:c7:c3:a6:d1:d0:
5f:cb:fe:23:26:d2:ff:8e:b2:4e:05:dd:00:5a:8f:9d:9c:4c:
6e:b1:a5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org