Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/fkVhfFblrq-h2vEnkKQCr4-LxiI.roa
File: fkVhfFblrq-h2vEnkKQCr4-LxiI.roa (raw, json)
Hash identifier: gwtZbmoVHa/FcFyuMTyFATt6tRcmPRpWqvOGQ4SpC5I=
Subject key identifier: 7E:45:61:7C:56:E5:AE:AF:A1:DA:F1:27:90:A4:02:AF:8F:8B:C6:22
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13F5B6B0
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/fkVhfFblrq-h2vEnkKQCr4-LxiI.roa
Signing time: Sat 01 Jan 2022 11:55:28 +0000
ROA not before: Sat 01 Jan 2022 11:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51559
IP address blocks: 213.238.179.0/24 maxlen: 24
213.238.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334870192 (0x13f5b6b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e45617c56e5aeafa1daf12790a402af8f8bc622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:02:8a:f0:16:d4:95:b6:db:ee:b6:15:83:
e4:6f:a3:9a:36:5d:e0:04:82:26:e9:71:69:fd:f7:
52:07:0f:90:5e:0e:5e:28:32:7a:5f:d1:37:d2:0c:
a2:44:dd:3c:23:e5:84:13:15:40:1b:4c:62:cd:b3:
e2:d4:d1:48:9a:00:b4:b8:25:a2:f5:40:48:48:ab:
14:81:b9:86:c4:c9:dd:6b:ea:15:bb:30:53:e3:de:
9a:9f:ca:3e:9a:5f:11:97:96:ed:e2:a9:53:21:90:
89:e0:37:8c:a4:d8:c3:d0:83:be:b1:09:54:6c:39:
9a:1e:14:63:10:89:20:92:f9:f3:bd:51:4b:46:ac:
0e:84:18:8a:5e:2e:70:7b:3a:d7:75:f4:c8:a5:3d:
e7:7e:ca:f1:0b:8d:59:0a:0c:a3:a9:4c:5c:af:1a:
3b:27:67:36:57:af:f7:43:4a:26:88:ad:97:d1:c7:
17:73:25:43:bd:7a:7d:97:bb:b8:69:4c:25:05:e9:
e6:29:8e:7e:39:3c:8c:a6:13:c2:92:a2:c9:ba:e0:
3c:cb:cd:ab:01:1c:8c:cd:ad:7a:62:59:9b:e0:1f:
fb:92:cf:4e:90:51:1d:69:4f:86:5c:0c:ba:77:35:
1d:5b:24:4a:99:93:cf:94:3a:6a:1f:be:0e:bc:76:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:45:61:7C:56:E5:AE:AF:A1:DA:F1:27:90:A4:02:AF:8F:8B:C6:22
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/fkVhfFblrq-h2vEnkKQCr4-LxiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.179.0/24
213.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
99:55:ae:a7:83:0d:fb:00:14:73:8a:50:7e:82:29:6e:12:39:
9d:0b:ec:21:5e:fe:8e:1e:90:ef:8b:4f:02:64:41:88:ef:f3:
65:85:3e:f0:d8:64:df:87:79:03:53:29:89:44:de:b4:db:91:
3c:88:aa:63:ac:fa:58:97:00:a1:c3:45:74:8b:fa:b8:a8:11:
5c:a0:90:66:67:fb:25:ed:0c:3b:6e:96:7d:ee:93:53:91:8a:
b0:7f:e4:97:6c:e3:98:98:c2:89:4d:6e:a5:19:d3:c6:03:c4:
94:09:5f:15:1d:53:36:de:7a:30:6a:3c:41:26:1d:d4:d7:19:
7d:7a:52:4e:70:29:16:45:f6:11:62:04:38:ef:ee:dd:fb:6d:
71:f3:22:78:f4:e7:df:c0:82:17:18:84:16:00:34:e1:b8:00:
c1:ff:ef:6b:34:84:32:f9:c3:66:00:cb:0c:7a:1e:33:27:6d:
a7:3d:ce:3c:07:28:cf:1e:bd:cd:06:44:60:18:66:2c:e3:3f:
43:26:04:6c:4f:0b:41:f3:a9:6b:a5:cc:68:9e:6b:b8:fc:6c:
c9:9a:43:dc:48:31:51:45:f9:86:95:51:af:7e:7b:d9:7d:a6:
f2:26:30:cb:ec:36:9f:f5:17:e1:75:cb:bc:38:9c:c5:c5:ea:
1b:b8:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org