Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cmUGJybee8Gt0_WZkCkLTqYfgcs.roa
File: cmUGJybee8Gt0_WZkCkLTqYfgcs.roa (raw, json)
Hash identifier: wWhF+mgyDp32zrDzTkJDGNVcFPL02GZC5szUz3X7JcQ=
Subject key identifier: 72:65:06:27:26:DE:7B:C1:AD:D3:F5:99:90:29:0B:4E:A6:1F:81:CB
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 0182A2D9BE24F4C6DF9F74BB11E5C8EAB643
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cmUGJybee8Gt0_WZkCkLTqYfgcs.roa
Signing time: Mon 15 Aug 2022 18:52:35 +0000
ROA not before: Mon 15 Aug 2022 18:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.238.166.0/24 maxlen: 24
213.238.173.0/24 maxlen: 24
213.238.174.0/24 maxlen: 24
213.238.177.0/24 maxlen: 24
213.238.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a2:d9:be:24:f4:c6:df:9f:74:bb:11:e5:c8:ea:b6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Aug 15 18:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7265062726de7bc1add3f59990290b4ea61f81cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:83:65:f1:a2:30:d7:9f:f5:04:5e:92:e9:
56:5e:90:11:e3:8d:2b:e3:60:68:f0:0f:4d:89:43:
03:0a:0b:5a:4b:31:63:b8:d6:36:98:36:80:18:4d:
bc:db:37:31:76:8a:1f:ce:33:f7:c9:a2:48:61:be:
13:83:25:4c:b0:5c:66:14:ca:f5:9f:d6:61:8e:b4:
5a:d4:f2:9a:0a:ec:c6:96:9b:23:8a:0b:19:49:7b:
da:bd:f1:68:f2:45:ae:57:33:cb:2b:ed:78:93:04:
1f:87:52:64:90:4f:21:81:b6:73:7e:b4:91:54:2c:
f9:d1:51:ad:d0:19:17:14:40:69:35:3f:40:a4:7f:
dd:2e:de:9b:8c:fc:c0:c8:76:97:d9:66:84:f0:dd:
b0:b8:27:d3:f5:00:b3:47:e4:8d:bb:ed:1e:1d:b0:
55:79:d1:54:49:65:2c:7e:12:d1:e4:46:fb:c8:3e:
a9:e4:15:e5:0c:97:0e:4a:5b:83:fb:91:03:fb:88:
ac:af:6c:18:b1:05:62:52:3c:11:75:66:41:86:18:
38:ee:85:88:64:42:67:8b:69:32:3f:a0:b6:ba:73:
70:4e:af:82:fe:f7:ba:6a:6c:b3:45:58:77:ba:16:
9c:b3:99:a9:14:82:76:5f:36:3c:85:a4:bc:68:c7:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:06:27:26:DE:7B:C1:AD:D3:F5:99:90:29:0B:4E:A6:1F:81:CB
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/cmUGJybee8Gt0_WZkCkLTqYfgcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
213.238.173.0-213.238.174.255
213.238.177.0/24
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
63:74:48:12:84:ff:b9:e6:b6:76:59:2d:3c:67:35:ae:93:a1:
8e:05:7e:c4:57:66:a5:ad:74:c3:c2:3c:81:b9:e2:37:ce:c8:
c7:b4:8a:30:de:24:92:72:ff:c8:a2:c7:da:a1:ce:bb:26:30:
08:4d:5a:48:fc:8c:2c:cd:38:dc:5a:8b:05:83:81:cc:74:3c:
5c:d2:1e:39:ac:5d:d0:10:55:54:6a:b0:2d:e9:bd:90:ad:33:
01:bf:8c:19:96:17:67:53:cc:35:74:a2:45:7a:9a:d0:c5:f7:
55:a2:61:96:1f:f9:92:43:38:87:c2:08:52:55:2b:fb:7f:67:
12:27:2b:32:43:28:c0:92:cd:79:b6:37:c8:44:2b:9b:b3:a4:
86:c6:74:ce:f4:da:81:89:b2:32:62:1d:84:8b:b2:bf:98:79:
bb:3f:de:51:fe:59:f0:1c:c1:c7:b5:77:12:c6:38:6e:2c:52:
e0:f8:f7:76:dc:99:3c:c9:79:e1:2a:cc:d2:42:b2:ba:ba:42:
74:db:3b:38:9f:2a:43:f0:79:9f:91:cf:13:95:d8:87:3c:d9:
76:ef:54:09:e6:e6:d6:b8:b7:31:e3:47:33:ab:51:1c:86:ba:
51:ac:3c:ce:67:fe:02:5e:49:96:03:a2:4a:bb:fc:9d:c1:f2:
40:17:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org