Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/b45_2V3kEI6GZ2XI1z48CWeC4vk.roa
File: b45_2V3kEI6GZ2XI1z48CWeC4vk.roa (raw, json)
Hash identifier: cGcF0b2M0nRIhhQlm8PxGCI5wsBkF6Pp+IrlGOjIVok=
Subject key identifier: 6F:8E:7F:D9:5D:E4:10:8E:86:67:65:C8:D7:3E:3C:09:67:82:E2:F9
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13F4C2E4
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/b45_2V3kEI6GZ2XI1z48CWeC4vk.roa
Signing time: Sat 01 Jan 2022 11:55:28 +0000
ROA not before: Sat 01 Jan 2022 11:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51540
IP address blocks: 213.238.170.0/24 maxlen: 24
213.238.173.0/24 maxlen: 24
213.238.174.0/24 maxlen: 24
213.238.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334807780 (0x13f4c2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f8e7fd95de4108e866765c8d73e3c096782e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:df:42:57:61:90:35:b9:ca:db:d9:fb:8e:
3e:bd:e4:4e:a8:05:ee:65:82:51:ab:a9:7d:9b:a0:
03:69:f6:37:d3:6e:f4:e6:5a:cd:c9:57:11:17:5f:
fb:2a:e6:70:cc:5e:f2:8c:c8:9e:79:e7:4f:b1:e1:
62:eb:1f:13:3d:f8:7b:18:9d:3c:6b:2c:9c:fe:a0:
bc:ae:0b:9a:84:2b:a0:90:77:84:5e:a6:f7:1a:b2:
e7:b4:0b:aa:73:43:f3:7c:9f:55:48:82:5c:88:19:
f3:f7:a2:70:5b:48:61:4e:93:f6:34:2a:dd:5b:fb:
26:08:a6:53:4f:21:90:80:86:cb:5a:ec:12:6b:d5:
b0:03:a5:17:a7:0c:fa:9d:d3:f1:12:9f:c4:fa:2c:
98:2b:df:81:26:12:90:e2:f9:c7:64:37:fe:a1:c5:
4e:85:9e:da:23:1d:d1:43:94:73:c6:c2:7c:23:ab:
3e:62:2d:24:f8:ef:c1:6f:4c:73:fb:9e:76:5a:6c:
2f:c3:dc:64:0a:7f:fd:b3:8d:c1:5f:ec:bc:66:b9:
0e:68:d5:26:42:13:c9:f8:06:6a:77:30:fd:0f:12:
d0:20:66:94:53:36:f3:14:82:8a:4b:af:db:19:ae:
5f:db:c9:ec:f2:24:97:2b:dc:46:27:bd:83:e5:95:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8E:7F:D9:5D:E4:10:8E:86:67:65:C8:D7:3E:3C:09:67:82:E2:F9
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/b45_2V3kEI6GZ2XI1z48CWeC4vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.170.0/24
213.238.173.0-213.238.174.255
213.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
16:cf:e6:41:40:5b:e0:17:19:1c:7f:2d:33:a9:8d:2f:fd:2d:
18:71:ee:4a:2f:80:77:58:ae:a7:29:0f:96:79:4f:36:b4:e2:
1f:a9:98:2e:82:ce:13:f4:66:3b:a6:86:ae:7d:20:39:49:54:
2e:2f:e6:f4:2b:1e:5e:77:cf:da:57:1a:1d:af:48:59:df:22:
fb:08:ce:ca:f1:ea:85:9e:9e:43:7a:67:39:2b:19:18:13:fd:
5f:2c:a1:e5:39:51:39:42:26:5c:a5:34:19:c3:bd:8d:c8:08:
41:3e:15:39:97:1b:b1:51:53:43:10:fc:79:fd:57:f8:dc:df:
5e:c8:99:c1:c7:ce:dd:98:d1:3e:8e:a9:a4:17:74:e0:fd:09:
ef:60:16:ab:4f:11:e7:8f:77:19:e5:6b:71:17:ae:e1:ea:30:
9c:a9:1a:e8:46:05:3c:e3:af:13:ec:d7:71:a3:13:b2:3c:33:
b7:88:d7:bc:ed:1e:23:5e:48:53:e5:44:3e:c0:fa:f7:50:f3:
2d:95:fc:aa:0a:2a:9a:93:81:19:af:4b:57:62:d3:73:e4:94:
db:ab:1f:0d:62:8b:8c:13:03:7f:93:ab:1b:57:87:0c:04:41:
79:89:8e:99:67:6d:46:98:c6:67:3c:82:a4:a7:40:43:77:14:
a4:08:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org