Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/LWC45I3_xh3IYtchXCOaYRULWOY.roa
File: LWC45I3_xh3IYtchXCOaYRULWOY.roa (raw, json)
Hash identifier: hCLc5ZYZxNKSel2ztK+BQJKDl2xWXgCrvkV+g5oCVwY=
Subject key identifier: 2D:60:B8:E4:8D:FF:C6:1D:C8:62:D7:21:5C:23:9A:61:15:0B:58:E6
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 143CD2A1
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/LWC45I3_xh3IYtchXCOaYRULWOY.roa
Signing time: Tue 25 Jan 2022 06:02:13 +0000
ROA not before: Tue 25 Jan 2022 06:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209474
IP address blocks: 213.238.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339530401 (0x143cd2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 25 06:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d60b8e48dffc61dc862d7215c239a61150b58e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:c0:41:89:fe:bf:0c:c6:d9:c7:3a:c3:9a:
42:6b:db:94:27:28:54:09:24:6f:37:0f:05:20:aa:
ad:01:33:9a:59:5e:81:21:78:f7:01:57:52:a8:27:
c5:4a:78:1f:2e:bf:8a:55:68:af:03:0f:03:76:da:
9b:af:b5:70:18:7a:ce:61:77:10:45:c2:91:2a:79:
cf:a8:6e:c0:0d:9d:de:0a:be:b7:76:c3:fe:e5:cd:
86:a4:67:7a:f3:81:75:85:0e:be:4a:16:c8:38:5a:
46:22:9f:36:f4:bc:60:69:b6:02:07:37:6c:ee:6f:
c2:6f:b3:dd:b8:51:ac:2c:e4:1a:ff:91:fc:aa:43:
4c:61:a9:bb:63:28:8e:d5:e1:5a:4b:da:2b:c3:83:
9d:4b:92:e3:fd:b4:d3:43:b8:64:53:02:0d:6f:32:
22:07:0b:fe:aa:38:35:57:4e:ec:06:9b:cf:4b:22:
62:51:ff:59:c8:2d:c0:60:81:84:65:c0:a2:a0:60:
f9:06:73:7d:2e:d3:1c:29:a5:c2:db:cb:c0:b8:78:
b8:7b:86:04:ad:96:a1:df:29:db:8c:9d:08:56:da:
d8:5f:1a:99:43:7a:a4:b7:2d:49:0e:72:68:fb:de:
12:fd:b0:13:e0:0f:6c:1a:eb:bc:86:14:d9:63:a4:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:60:B8:E4:8D:FF:C6:1D:C8:62:D7:21:5C:23:9A:61:15:0B:58:E6
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/LWC45I3_xh3IYtchXCOaYRULWOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e9:57:68:9d:bd:b7:d0:a4:d8:05:8d:88:5e:ea:ae:45:af:
4d:de:60:23:a6:12:5e:17:a6:ef:26:8b:b4:9b:ee:30:c1:ab:
8e:50:2d:e8:18:37:17:87:b4:b9:28:55:e0:6d:bc:12:f3:4c:
68:b2:6a:00:7d:a7:74:c9:cb:5e:80:2b:62:95:40:25:90:a9:
67:a6:a9:16:3d:94:a7:6c:c2:99:f5:bf:a3:42:9f:7b:2b:56:
46:ef:f0:24:d4:39:f8:d4:b4:ac:4e:0b:66:dd:f2:41:c2:df:
a5:d2:f1:25:36:48:8d:d8:05:fd:4d:10:f7:0b:c5:39:fc:77:
77:a4:66:f5:56:68:d6:b8:21:c4:34:fa:4f:d6:32:f5:fa:af:
2e:0d:57:52:68:19:ac:02:10:c8:31:3d:1d:a2:9a:7a:cd:aa:
a5:ce:70:c8:32:de:7c:86:be:27:27:c4:b1:8d:25:96:ed:b6:
72:ed:9a:b7:2f:b0:b0:e8:f8:a7:1c:67:b4:7d:fa:ea:e4:7d:
00:d2:68:a3:19:5d:95:64:e0:a2:07:27:d8:6a:0a:30:05:da:
49:82:46:08:63:9b:e2:c9:55:50:84:c6:68:01:4b:a4:23:63:
9e:54:dc:d2:aa:d5:d4:ef:57:dc:50:ed:29:93:01:1b:19:0f:
6d:07:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org