Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cjJgrVK_7oQylZqMseCB4ApEbUo.roa
File: cjJgrVK_7oQylZqMseCB4ApEbUo.roa (raw, json)
Hash identifier: 22SUnx35zH95KHr+E5vq4Hyeqrv9Pcv2+55esuEakeA=
Subject key identifier: 72:32:60:AD:52:BF:EE:84:32:95:9A:8C:B1:E0:81:E0:0A:44:6D:4A
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13F35B76
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cjJgrVK_7oQylZqMseCB4ApEbUo.roa
Signing time: Sat 01 Jan 2022 11:55:27 +0000
ROA not before: Sat 01 Jan 2022 11:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48292
IP address blocks: 213.238.165.0/24 maxlen: 24
213.238.161.0/24 maxlen: 24
213.238.162.0/24 maxlen: 24
213.238.163.0/24 maxlen: 24
213.238.164.0/24 maxlen: 24
213.238.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334715766 (0x13f35b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=723260ad52bfee8432959a8cb1e081e00a446d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:e0:b6:c0:58:f3:00:62:5a:40:ab:bd:f0:
a9:35:91:f7:86:e2:e4:45:00:70:01:5a:56:75:5f:
de:66:74:49:30:9e:6a:69:ba:1c:7c:63:43:14:4b:
d3:bf:7f:fb:84:65:24:8f:b9:43:6c:5e:2e:5c:e0:
c9:8e:0c:1c:c8:b6:86:ce:e0:fd:3c:78:b6:b1:82:
d6:2a:34:7b:e4:5f:79:52:77:86:2a:5f:7a:ab:bc:
da:eb:d1:1b:48:37:f5:6a:a5:3f:9a:9e:a1:be:0b:
7c:24:e3:7f:cd:13:55:8f:3d:a1:d0:bc:e2:ff:98:
f0:46:fc:9f:32:59:43:89:03:66:15:2b:c3:25:75:
1b:8a:3b:03:02:fb:20:9f:1b:1d:df:82:4a:4b:49:
a4:0a:ee:74:c7:0a:cc:fe:f7:f0:12:54:2e:b0:c4:
1f:83:8c:cc:b6:5b:c5:3e:13:cf:a2:b1:d4:8d:c8:
20:13:0c:92:a6:75:f9:44:a2:3b:87:a2:47:bf:66:
8d:18:6f:c2:bb:5f:b0:13:4b:d9:91:cc:b3:6a:ae:
ff:8a:65:c5:8a:92:54:d4:b2:65:e4:d6:ae:35:87:
0a:c7:8e:3c:52:45:99:a4:f3:a6:cd:26:4e:77:92:
d6:a0:4e:b5:4b:20:d2:53:68:a9:68:29:71:38:cd:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:32:60:AD:52:BF:EE:84:32:95:9A:8C:B1:E0:81:E0:0A:44:6D:4A
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cjJgrVK_7oQylZqMseCB4ApEbUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0-213.238.165.255
Signature Algorithm: sha256WithRSAEncryption
0d:dc:39:1c:4b:18:3b:0d:66:7e:d1:9a:a9:de:2d:cd:cc:b8:
b8:ab:f1:08:a1:04:bd:a0:65:3d:59:62:28:76:5b:dc:82:c2:
20:dc:2f:a0:6c:b6:51:81:b1:50:dd:a9:26:5d:6b:4b:6c:af:
cd:f9:b3:3a:9a:d8:5e:ac:01:67:93:e1:a8:73:ca:6c:57:52:
a5:4a:51:e4:97:03:ef:24:dd:6b:d7:87:ef:78:ec:41:ce:bf:
c9:ea:76:8e:2e:02:91:df:0d:61:4c:c9:59:b8:09:9e:1b:e2:
5b:be:25:9c:f6:1c:c8:95:94:bb:d1:7e:3d:3e:5c:58:c2:5f:
66:c8:0a:6b:f3:42:0f:0f:17:67:63:08:1d:8e:d2:cf:dc:d0:
12:60:52:0f:e5:06:66:9c:ba:fb:96:cc:3d:95:98:6a:4b:e2:
65:7b:d3:7a:46:bc:7e:19:5c:0c:f7:ec:34:45:1f:6c:c5:e0:
b1:b3:b3:df:90:cd:87:c6:9d:53:a7:4e:d7:01:ed:65:4f:20:
04:43:e5:85:11:f7:58:e5:d7:d7:4c:d3:7d:f5:28:b2:54:20:
aa:90:d0:c4:69:ae:de:05:09:74:ad:1e:df:22:83:5a:5d:4d:
e5:d1:95:bf:66:69:ef:10:40:54:8c:b1:b8:df:46:63:b0:91:
f9:a7:67:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org