Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hf4YYaDwQRdhB1gnDgjnz5y7bKc.roa
File: hf4YYaDwQRdhB1gnDgjnz5y7bKc.roa (raw, json)
Hash identifier: yfgqkG5JxKFiSW43oHV0htjGCfsi41gHuIAaz3RRPKk=
Subject key identifier: 85:FE:18:61:A0:F0:41:17:61:07:58:27:0E:08:E7:CF:9C:BB:6C:A7
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13FA8541
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hf4YYaDwQRdhB1gnDgjnz5y7bKc.roa
Signing time: Sat 01 Jan 2022 11:55:33 +0000
ROA not before: Sat 01 Jan 2022 11:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211871
IP address blocks: 213.238.179.0/24 maxlen: 24
213.238.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335185217 (0x13fa8541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85fe1861a0f04117610758270e08e7cf9cbb6ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:36:3e:70:f6:a7:32:4c:1f:15:b4:2a:3d:
b7:1b:f3:bb:73:f2:b4:93:7e:da:e5:8d:b2:4b:6d:
40:62:ae:d6:e8:2e:b6:2a:ea:f5:19:92:28:96:eb:
50:85:1c:05:22:f2:48:31:f6:7c:89:77:ef:4e:bf:
2e:77:59:f0:4d:ce:d8:50:29:1b:e5:df:f7:ea:01:
c6:0a:6c:26:ed:2d:f7:42:8a:35:a9:2d:56:3c:23:
c7:c0:0b:81:4e:a0:37:50:8e:18:d7:a9:d9:c7:cd:
f4:a9:06:df:45:87:c8:db:d7:66:28:ff:b6:ef:f6:
d1:36:66:98:52:2c:cf:0d:f2:af:c0:34:28:6f:5a:
b8:37:34:42:a6:ad:52:31:f8:47:f5:44:88:c3:c5:
c4:8b:50:de:b0:39:bd:1c:0e:9a:32:04:bd:07:59:
c0:44:91:f0:7b:c4:6b:71:29:7e:6b:5b:45:ef:17:
ae:68:17:d5:5c:45:c6:d4:4b:77:ea:43:e7:7c:b1:
44:8f:46:2d:17:7f:59:cc:af:49:b9:23:19:f3:93:
c1:37:3d:20:a6:fa:6a:02:9f:47:6d:e8:1a:69:ab:
b4:b3:e4:86:fd:15:71:ae:50:21:67:75:65:c8:8a:
a1:52:84:cd:f6:06:a7:69:3c:fd:3c:56:be:67:ae:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FE:18:61:A0:F0:41:17:61:07:58:27:0E:08:E7:CF:9C:BB:6C:A7
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/hf4YYaDwQRdhB1gnDgjnz5y7bKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.179.0/24
213.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
91:52:b5:22:ed:59:ad:61:78:0a:68:3f:15:10:c8:da:d0:5f:
cf:02:65:3b:3a:d3:9a:fe:ae:d6:15:bc:f4:01:3c:89:bd:57:
33:b2:48:78:34:e5:cc:75:6f:cd:88:85:86:33:18:ed:f2:ab:
dd:ad:78:27:85:62:50:6c:c3:7b:2b:11:6f:7a:c0:15:f7:35:
3d:43:e8:bf:5d:c5:c0:68:a0:62:ce:f3:f3:3c:17:aa:ba:31:
54:e2:00:ac:a5:57:7b:10:ef:7f:e8:f5:e1:a2:7d:2c:54:cf:
79:38:4d:27:8a:a9:5c:6c:a1:a1:00:9e:7b:06:b3:a6:4f:18:
a3:0a:48:e0:ce:80:f8:08:e8:b2:3f:4d:2f:35:eb:1b:9f:7c:
00:a2:6a:b9:22:96:9d:9e:86:9b:1f:0d:04:2a:af:be:de:8f:
c8:91:de:69:19:19:10:7c:dd:70:07:cc:11:3c:83:b1:5f:d6:
63:23:74:a6:e8:c2:ab:b3:df:f7:7c:2c:09:9a:5d:82:bf:9e:
35:52:12:0a:7e:6f:d4:1b:96:59:2e:49:35:36:54:c9:a8:a0:
0d:73:fb:9b:b3:ba:eb:26:cc:80:c9:85:6c:4f:31:32:81:73:
07:7a:8e:e3:d4:15:39:b0:43:7b:ce:ae:25:60:7d:3e:21:36:
24:1e:ea:19
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEE/qFQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NGNiZGE3OGIxZDFiNjEzZGY1NjVmZjk5NzAwYjZhZWU5NDBkZTNmMB4XDTIyMDEw
MTExNTUzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODVmZTE4NjFhMGYw
NDExNzYxMDc1ODI3MGUwOGU3Y2Y5Y2JiNmNhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKt8Nj5w9qcyTB8VtCo9txvzu3PytJN+2uWNskttQGKu1ugu
tirq9RmSKJbrUIUcBSLySDH2fIl3706/LndZ8E3O2FApG+Xf9+oBxgpsJu0t90KK
NaktVjwjx8ALgU6gN1COGNep2cfN9KkG30WHyNvXZij/tu/20TZmmFIszw3yr8A0
KG9auDc0QqatUjH4R/VEiMPFxItQ3rA5vRwOmjIEvQdZwESR8HvEa3EpfmtbRe8X
rmgX1VxFxtRLd+pD53yxRI9GLRd/WcyvSbkjGfOTwTc9IKb6agKfR23oGmmrtLPk
hv0Vca5QIWd1ZciKoVKEzfYGp2k8/TxWvmeu668CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSF/hhhoPBBF2EHWCcOCOfPnLtspzAfBgNVHSMEGDAWgBRUy9p4sdG2E99W
X/mXALau6UDePzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZNdmFlTEhSdGhQZlZsXzVsd0MycnVsQTNqOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8x
L2hmNFlZYUR3UVJkaEIxZ25EZ2puejV5N2JLYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8xL1ZNdmFlTEhSdGhQ
ZlZsXzVsd0MycnVsQTNqOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEANXuswMEANXutTANBgkqhkiG9w0B
AQsFAAOCAQEAkVK1Iu1ZrWF4Cmg/FRDI2tBfzwJlOzrTmv6u1hW89AE8ib1XM7JI
eDTlzHVvzYiFhjMY7fKr3a14J4ViUGzDeysRb3rAFfc1PUPov13FwGigYs7z8zwX
qroxVOIArKVXexDvf+j14aJ9LFTPeThNJ4qpXGyhoQCeewazpk8YowpI4M6A+Ajo
sj9NLzXrG598AKJquSKWnZ6Gmx8NBCqvvt6PyJHeaRkZEHzdcAfMETyDsV/WYyN0
pujCq7Pf93wsCZpdgr+eNVISCn5v1BuWWS5JNTZUyaigDXP7m7O66ybMgMmFbE8x
MoFzB3qO49QVObBDe86uJWB9PiE2JB7qGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org