Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cOwkds3B0XqLuNr3A1hm_MX8LiY.roa
File: cOwkds3B0XqLuNr3A1hm_MX8LiY.roa (raw, json)
Hash identifier: ewerwktFH8XF8ZrYKiM4wwbLchE3LYG2/VKKQ2Mg/+w=
Subject key identifier: 70:EC:24:76:CD:C1:D1:7A:8B:B8:DA:F7:03:58:66:FC:C5:FC:2E:26
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018418C27056AF1270DE98824913CFD465A8
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cOwkds3B0XqLuNr3A1hm_MX8LiY.roa
Signing time: Thu 27 Oct 2022 09:25:06 +0000
ROA not before: Thu 27 Oct 2022 09:25:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211318
IP address blocks: 213.238.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:c2:70:56:af:12:70:de:98:82:49:13:cf:d4:65:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Oct 27 09:25:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70ec2476cdc1d17a8bb8daf7035866fcc5fc2e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:f8:2b:68:4c:c7:c2:1e:73:f6:0d:c9:62:
da:12:46:4f:a5:1b:1f:c0:e2:58:d5:5b:57:8a:f1:
42:71:c5:99:08:f1:89:0a:ba:e3:61:82:6c:39:fb:
68:04:cd:89:e5:19:3d:7a:5d:90:95:0e:93:67:09:
24:6b:a6:ce:a2:09:45:41:7b:7c:a3:ce:45:72:2b:
63:b0:ca:cd:dd:22:58:9a:f3:47:fd:ac:d4:8c:dd:
be:a3:27:4b:b3:13:69:ec:56:b0:43:12:ed:54:78:
8e:1f:e7:86:23:3f:33:94:cc:a5:4d:43:95:77:77:
b6:94:fd:35:c2:20:6a:ff:3c:75:fa:d9:1d:b4:7e:
5d:f7:cc:a1:ec:d6:cd:a4:29:17:ea:a6:67:25:13:
6e:5d:f8:db:ca:dc:32:39:83:b4:7a:e8:87:55:ec:
b0:ec:4c:e6:00:c6:65:5b:bf:e2:e7:f8:e5:82:4a:
37:e9:4f:ae:32:5a:97:35:31:d3:2d:b2:b4:04:6b:
6a:dd:e3:02:0a:56:c4:52:06:e8:a4:a4:08:cc:99:
b0:50:62:f6:c1:ed:78:cc:22:0f:b1:19:7d:d0:37:
b1:9b:c6:d3:8a:bd:11:35:d2:19:b9:3f:be:36:92:
cb:20:55:63:e3:76:3b:20:1c:dd:73:3a:5f:0f:e2:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:24:76:CD:C1:D1:7A:8B:B8:DA:F7:03:58:66:FC:C5:FC:2E:26
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cOwkds3B0XqLuNr3A1hm_MX8LiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.171.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9b:88:a1:89:fe:50:a1:13:52:c2:d2:e4:ed:c3:91:c3:4d:
1c:89:36:1e:0e:6d:41:c4:2d:7f:09:be:6f:b1:af:40:98:6b:
c9:0e:69:67:db:dd:1c:41:84:3a:a3:89:0e:87:93:5f:85:23:
a2:cc:7f:e5:65:4c:df:d9:b5:ab:86:94:cf:17:db:4c:eb:6e:
83:05:4e:9e:4c:9e:9a:a5:86:cb:8e:cb:92:f7:e9:3d:10:44:
74:ea:c8:1e:7e:b6:4b:2d:7c:53:66:71:70:90:75:4e:15:36:
a8:3c:a4:f5:b9:87:c2:af:64:1a:c5:97:12:ba:fe:1e:10:f1:
37:13:0e:ca:7c:fe:2a:32:b9:32:64:40:73:5f:3a:44:5f:f4:
cd:2c:5d:ee:5d:ee:11:4f:55:f7:b4:3e:42:e3:4a:24:65:b5:
96:c3:e6:ae:e6:49:41:c3:81:70:b8:c5:c5:2e:2e:df:9e:52:
94:9d:bb:97:16:b3:55:70:f3:9f:44:7e:77:8a:fe:bc:7f:59:
d7:39:e2:1c:37:62:3c:90:0b:12:d7:b8:af:b2:e1:c9:cd:37:
cb:33:95:49:88:1c:e7:32:85:30:26:35:0f:51:2f:fd:0a:de:
c6:de:ae:2d:12:4a:51:27:ef:e6:64:65:bb:92:a9:21:64:61:
73:ce:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:53 2023 by rpki-client on console-ams.rpki-client.org