Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/chrIrQzDvUKznRwy9HandoGXwus.roa
File: chrIrQzDvUKznRwy9HandoGXwus.roa (raw, json)
Hash identifier: LTlvhxQFch3RBTLoLzIlW6F3i/zGBcD/DaR9HP8o+jU=
Subject key identifier: 72:1A:C8:AD:0C:C3:BD:42:B3:9D:1C:32:F4:76:A7:76:81:97:C2:EB
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13F28831
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/chrIrQzDvUKznRwy9HandoGXwus.roa
Signing time: Sat 01 Jan 2022 11:55:27 +0000
ROA not before: Sat 01 Jan 2022 11:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43391
IP address blocks: 213.238.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334661681 (0x13f28831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=721ac8ad0cc3bd42b39d1c32f476a7768197c2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d9:5d:c3:fc:29:ae:81:39:8e:35:ec:2b:89:
bc:cb:6a:df:16:f7:65:8b:46:ad:2e:1c:bc:dd:f2:
e2:7e:d0:54:84:fb:98:b2:c1:39:68:26:3b:1f:68:
86:36:6e:43:c6:f5:4a:b2:56:1a:e9:01:e9:f4:bf:
8c:61:ad:de:76:0a:34:38:c0:1e:da:60:a8:39:dd:
9a:2c:ec:4c:8c:96:5b:46:f2:55:39:23:95:66:3b:
31:9a:83:63:9d:c5:c7:86:fc:d9:44:b6:66:61:29:
f3:a4:b4:b7:04:63:36:32:de:68:24:42:31:54:74:
f6:a5:a0:75:2f:35:8d:da:10:4f:d0:b8:41:8f:f2:
22:c4:64:51:1c:70:05:60:62:70:2d:75:46:98:ff:
03:04:80:17:ea:01:db:d1:04:85:91:e2:f5:73:ad:
4a:14:f8:91:8a:e7:17:50:6b:b7:19:1b:04:07:6a:
ba:46:90:98:27:cb:af:52:25:aa:c6:2f:2f:da:21:
b9:2f:6f:12:38:23:6d:d3:12:8a:af:11:f7:28:5c:
04:8b:62:f3:d0:23:db:93:83:d4:72:c5:c1:86:b1:
02:c2:e1:9e:6f:79:35:98:39:20:02:d5:23:6a:79:
04:52:1c:98:79:70:de:3c:75:52:0f:d2:27:c7:2e:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:C8:AD:0C:C3:BD:42:B3:9D:1C:32:F4:76:A7:76:81:97:C2:EB
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/chrIrQzDvUKznRwy9HandoGXwus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.169.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9f:11:b8:62:ef:d4:be:e9:a5:6f:a3:92:a2:4f:00:ff:47:
90:f7:7f:8f:4e:af:42:97:88:f5:c7:de:cd:fb:01:e9:2f:36:
fe:01:df:bf:ec:6c:3d:ba:0f:f9:73:ee:e2:57:67:25:4e:64:
07:a8:15:40:03:5a:eb:43:42:7e:58:26:eb:fd:eb:bb:19:13:
49:0b:07:76:1d:e2:84:bf:81:14:29:e8:f3:d7:0f:68:bd:5f:
a6:f4:20:0d:7b:65:fa:a4:0d:c1:a4:0f:b2:68:ab:07:0a:5d:
2c:af:40:17:65:99:05:6e:df:e7:51:50:f2:36:0f:fa:21:c2:
34:49:9a:9a:7d:f2:80:b2:15:2d:26:99:b5:38:25:22:99:3c:
9e:2a:11:52:83:ce:ef:a8:71:b8:ac:b7:e9:35:74:ec:9e:1c:
9e:75:2a:f6:59:09:e2:1d:ec:84:b8:1a:41:0f:83:1d:e3:7c:
89:f5:e9:d9:8e:53:bd:20:81:3b:13:77:63:81:54:8d:81:7f:
1a:10:3e:c3:0d:cc:99:b8:44:ad:39:d1:31:ee:3e:02:e9:c8:
67:06:a1:59:fc:e4:80:ae:3f:aa:1d:e8:77:9e:53:39:e8:d3:
cf:6a:e3:d5:06:6a:e8:e2:4b:06:f3:8b:66:97:77:3d:04:18:
e8:78:b8:29
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEE/KIMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NGNiZGE3OGIxZDFiNjEzZGY1NjVmZjk5NzAwYjZhZWU5NDBkZTNmMB4XDTIyMDEw
MTExNTUyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzIxYWM4YWQwY2Mz
YmQ0MmIzOWQxYzMyZjQ3NmE3NzY4MTk3YzJlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOnZXcP8Ka6BOY417CuJvMtq3xb3ZYtGrS4cvN3y4n7QVIT7
mLLBOWgmOx9ohjZuQ8b1SrJWGukB6fS/jGGt3nYKNDjAHtpgqDndmizsTIyWW0by
VTkjlWY7MZqDY53Fx4b82US2ZmEp86S0twRjNjLeaCRCMVR09qWgdS81jdoQT9C4
QY/yIsRkURxwBWBicC11Rpj/AwSAF+oB29EEhZHi9XOtShT4kYrnF1BrtxkbBAdq
ukaQmCfLr1IlqsYvL9ohuS9vEjgjbdMSiq8R9yhcBIti89Aj25OD1HLFwYaxAsLh
nm95NZg5IALVI2p5BFIcmHlw3jx1Ug/SJ8cuzjECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRyGsitDMO9QrOdHDL0dqd2gZfC6zAfBgNVHSMEGDAWgBRUy9p4sdG2E99W
X/mXALau6UDePzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZNdmFlTEhSdGhQZlZsXzVsd0MycnVsQTNqOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8x
L2NocklyUXpEdlVLem5Sd3k5SGFuZG9HWHd1cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8xL1ZNdmFlTEhSdGhQ
ZlZsXzVsd0MycnVsQTNqOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXuqTANBgkqhkiG9w0BAQsFAAOC
AQEAEZ8RuGLv1L7ppW+jkqJPAP9HkPd/j06vQpeI9cfezfsB6S82/gHfv+xsPboP
+XPu4ldnJU5kB6gVQANa60NCflgm6/3ruxkTSQsHdh3ihL+BFCno89cPaL1fpvQg
DXtl+qQNwaQPsmirBwpdLK9AF2WZBW7f51FQ8jYP+iHCNEmamn3ygLIVLSaZtTgl
Ipk8nioRUoPO76hxuKy36TV07J4cnnUq9lkJ4h3shLgaQQ+DHeN8ifXp2Y5TvSCB
OxN3Y4FUjYF/GhA+ww3MmbhErTnRMe4+AunIZwahWfzkgK4/qh3od55TOejTz2rj
1QZq6OJLBvOLZpd3PQQY6Hi4KQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org