Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ekreGQr2NB6gpdu0xuSoRcWBVRc.roa
File: ekreGQr2NB6gpdu0xuSoRcWBVRc.roa (raw, json)
Hash identifier: m/Q6yfAQIiLKh0yTk77DKhFwr2P7NFef/Y3QodSvLFg=
Subject key identifier: 7A:4A:DE:19:0A:F6:34:1E:A0:A5:DB:B4:C6:E4:A8:45:C5:81:55:17
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13F1F6E0
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ekreGQr2NB6gpdu0xuSoRcWBVRc.roa
Signing time: Sat 01 Jan 2022 11:55:26 +0000
ROA not before: Sat 01 Jan 2022 11:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.238.173.0/24 maxlen: 24
213.238.174.0/24 maxlen: 24
213.238.177.0/24 maxlen: 24
213.238.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334624480 (0x13f1f6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a4ade190af6341ea0a5dbb4c6e4a845c5815517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:10:ae:97:b4:27:8d:86:fe:fa:60:5d:59:
1d:ec:d9:93:a7:be:5f:fc:54:1a:2a:67:76:76:26:
7c:76:4f:4b:0d:08:3b:11:39:9b:8f:8a:43:14:c7:
97:18:c2:33:d8:87:79:6a:4b:e3:27:02:3f:39:99:
63:a2:e7:a3:90:a2:91:2a:0c:f5:b7:15:56:2b:93:
c9:18:e0:0b:5d:7b:7e:15:41:a7:13:46:91:15:0c:
10:8c:c8:9c:a5:dd:83:c7:c5:70:ad:bc:41:ad:29:
8a:17:cf:cd:a1:79:0b:bd:a9:5f:40:5d:b6:21:b9:
4a:8b:0a:d9:b7:f4:0a:9e:0c:51:bd:ca:ab:45:8f:
d0:f2:10:c7:c6:d1:5a:a6:2e:92:a1:6f:9a:b1:7e:
c6:50:30:df:88:b8:c7:b7:91:90:f0:ed:a0:d3:39:
fb:3a:78:d0:b7:45:98:3f:24:db:54:4b:43:ac:64:
e1:55:93:90:97:16:6a:5f:f7:8e:a1:bf:fa:69:d2:
e5:da:df:9f:5e:3c:cb:0b:c4:a5:a2:36:14:d0:3b:
44:c1:f6:de:0c:f9:57:10:62:83:f8:89:ba:c4:7d:
db:b9:9f:0c:ad:04:c6:74:8d:d1:ac:b9:5b:6d:39:
b2:71:eb:8a:94:6c:52:a4:1b:4a:92:fe:0a:53:e1:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4A:DE:19:0A:F6:34:1E:A0:A5:DB:B4:C6:E4:A8:45:C5:81:55:17
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/ekreGQr2NB6gpdu0xuSoRcWBVRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.173.0-213.238.174.255
213.238.177.0/24
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2c:99:e4:e2:83:65:39:af:db:f7:3c:50:bf:af:30:61:58:
4d:e4:00:07:94:4c:91:48:04:f0:5e:e7:d1:89:2d:e8:39:ec:
a7:c5:52:4c:c5:5b:5d:34:18:63:a3:95:72:3f:d3:d3:03:a5:
a4:65:08:1d:5b:50:c7:64:f8:e5:01:6a:ab:d5:73:84:08:d5:
dc:1d:6e:86:27:67:fd:0b:d0:a1:32:1c:74:17:0b:41:0a:b0:
19:87:e8:9f:0d:ea:d0:65:9a:78:a9:39:87:1a:bd:88:93:c7:
73:f4:4f:19:15:ac:fc:f8:3a:89:75:b5:f6:4a:b9:3d:c1:36:
78:a2:ce:70:e6:b6:4b:84:97:37:72:d2:67:a4:8d:67:71:a8:
36:3f:21:72:47:c4:54:b4:b2:d9:41:d1:d3:e2:96:9d:6a:69:
90:4f:36:38:7f:2b:5f:ca:a7:e6:b0:9f:ac:af:db:a9:a8:ad:
5c:80:56:6e:78:e7:d9:2d:4c:d6:3f:c6:99:1c:5e:09:b2:f9:
53:c1:2c:c8:f9:1e:0e:82:bd:6a:16:b4:96:8d:39:cf:30:cd:
f5:86:d4:0a:24:b0:17:7a:d8:e9:fc:dd:03:89:29:51:5b:17:
e6:a0:fa:45:c3:f2:f5:66:58:b6:64:7e:95:a5:b1:c2:1e:a3:
84:cd:cd:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEE/H24DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NGNiZGE3OGIxZDFiNjEzZGY1NjVmZjk5NzAwYjZhZWU5NDBkZTNmMB4XDTIyMDEw
MTExNTUyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2E0YWRlMTkwYWY2
MzQxZWEwYTVkYmI0YzZlNGE4NDVjNTgxNTUxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANMFEK6XtCeNhv76YF1ZHezZk6e+X/xUGipndnYmfHZPSw0I
OxE5m4+KQxTHlxjCM9iHeWpL4ycCPzmZY6Lno5CikSoM9bcVViuTyRjgC117fhVB
pxNGkRUMEIzInKXdg8fFcK28Qa0pihfPzaF5C72pX0BdtiG5SosK2bf0Cp4MUb3K
q0WP0PIQx8bRWqYukqFvmrF+xlAw34i4x7eRkPDtoNM5+zp40LdFmD8k21RLQ6xk
4VWTkJcWal/3jqG/+mnS5drfn148ywvEpaI2FNA7RMH23gz5VxBig/iJusR927mf
DK0ExnSN0ay5W205snHripRsUqQbSpL+ClPhJU8CAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBR6St4ZCvY0HqCl27TG5KhFxYFVFzAfBgNVHSMEGDAWgBRUy9p4sdG2E99W
X/mXALau6UDePzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZNdmFlTEhSdGhQZlZsXzVsd0MycnVsQTNqOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8x
L2VrcmVHUXIyTkI2Z3BkdTB4dVNvUmNXQlZSYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8xL1ZNdmFlTEhSdGhQ
ZlZsXzVsd0MycnVsQTNqOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQA1e6tAwQA1e6uAwQA1e6xAwQA
1e64MA0GCSqGSIb3DQEBCwUAA4IBAQBfLJnk4oNlOa/b9zxQv68wYVhN5AAHlEyR
SATwXufRiS3oOeynxVJMxVtdNBhjo5VyP9PTA6WkZQgdW1DHZPjlAWqr1XOECNXc
HW6GJ2f9C9ChMhx0FwtBCrAZh+ifDerQZZp4qTmHGr2Ik8dz9E8ZFaz8+DqJdbX2
Srk9wTZ4os5w5rZLhJc3ctJnpI1ncag2PyFyR8RUtLLZQdHT4padammQTzY4fytf
yqfmsJ+sr9upqK1cgFZueOfZLUzWP8aZHF4JsvlTwSzI+R4Ogr1qFrSWjTnPMM31
htQKJLAXetjp/N0DiSlRWxfmoPpFw/L1Zli2ZH6VpbHCHqOEzc0Y
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:53 2023 by rpki-client on console-ams.rpki-client.org