Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kdBqeGuLhJSqbdXDceESUH3L-OY.roa
File: kdBqeGuLhJSqbdXDceESUH3L-OY.roa (raw, json)
Hash identifier: 2BuxlX8MluKTzbTP9MrRz5d2Jvdtcwc78rWv+YtqwdI=
Subject key identifier: 91:D0:6A:78:6B:8B:84:94:AA:6D:D5:C3:71:E1:12:50:7D:CB:F8:E6
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13F89E95
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kdBqeGuLhJSqbdXDceESUH3L-OY.roa
Signing time: Sat 01 Jan 2022 11:55:30 +0000
ROA not before: Sat 01 Jan 2022 11:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 213.238.171.0/24 maxlen: 24
213.238.174.0/24 maxlen: 24
213.238.177.0/24 maxlen: 24
213.238.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335060629 (0x13f89e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91d06a786b8b8494aa6dd5c371e112507dcbf8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:f2:d5:f1:8b:2a:1e:3c:07:fd:8e:57:ed:
21:57:98:31:0a:b5:03:c4:e4:a0:09:ae:89:95:bc:
b6:5e:31:be:4b:27:ec:de:61:82:9b:e7:e6:40:c5:
2f:c4:e2:78:f4:92:fb:73:56:9d:63:ca:0e:41:78:
29:70:45:59:c0:6e:00:35:17:f3:f7:ba:0a:93:f1:
a1:10:17:b6:a7:17:2b:fb:02:fd:17:1b:45:72:36:
15:db:46:90:85:89:38:50:da:e4:6d:25:ab:18:90:
7e:93:54:49:03:29:e7:21:e3:00:d7:e1:75:91:6f:
09:17:fe:87:19:e8:58:0d:d1:1b:69:33:e4:56:0f:
87:6b:d7:1b:85:be:57:a9:b3:6c:b2:ca:f5:f8:71:
d5:82:19:59:20:9f:8a:bd:01:c4:10:56:e8:9a:f9:
26:8d:e8:4c:4d:42:2b:59:d7:ac:3f:13:ae:d5:2b:
e9:95:78:dd:da:b0:fd:8d:4e:b7:47:a1:8a:6b:08:
15:14:02:08:ea:63:fb:43:d9:0a:54:50:91:7c:ba:
fe:f5:a6:70:df:2e:0d:ad:31:00:1b:9a:a7:03:b3:
e0:a0:65:48:3a:75:69:47:cf:37:d6:32:56:21:c4:
64:15:da:95:f0:11:86:d8:fd:eb:b9:0b:53:9c:00:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:6A:78:6B:8B:84:94:AA:6D:D5:C3:71:E1:12:50:7D:CB:F8:E6
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kdBqeGuLhJSqbdXDceESUH3L-OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.171.0/24
213.238.173.0-213.238.174.255
213.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:de:2d:97:37:cd:4f:1e:8e:55:3f:a9:7f:a4:34:bb:4e:fc:
55:b5:92:1a:47:2c:a6:fa:14:ff:ab:d8:54:0c:b9:b3:b6:5d:
55:84:12:a2:bf:da:da:b6:97:43:8e:e5:0f:8a:6b:63:c0:65:
e7:9f:67:cb:38:70:5f:00:f9:14:62:8a:00:7b:ef:52:0f:e3:
19:6b:d9:e1:e9:74:60:66:f1:ba:b8:e1:4b:c4:ea:33:cb:c6:
39:62:e2:4b:83:e5:cd:07:18:67:13:e7:16:7a:34:b1:87:4f:
c8:cd:6e:92:59:5f:e2:9b:4c:5b:b9:6e:cb:6a:b7:df:93:9c:
5e:1b:71:92:09:86:63:9e:20:83:a6:f0:2c:9f:1a:83:5b:49:
58:86:bc:2e:94:0c:ba:a5:52:01:8a:eb:85:cb:b5:0b:95:93:
0c:af:f5:ae:2f:2d:f6:56:7d:f2:5f:e0:32:21:5e:d3:5a:a2:
91:09:6f:41:50:5b:6c:34:df:9b:48:1a:e4:f1:de:02:64:63:
e9:90:15:c6:a1:3c:5b:90:f9:7a:ab:6d:c0:45:d2:75:31:49:
f6:94:9c:c2:d4:46:1f:8f:f5:60:8a:5c:0b:20:64:16:2a:d9:
3e:51:37:c8:06:53:3a:59:9d:49:bf:ff:32:74:14:b5:1f:49:
af:7f:dc:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEE/ielTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NGNiZGE3OGIxZDFiNjEzZGY1NjVmZjk5NzAwYjZhZWU5NDBkZTNmMB4XDTIyMDEw
MTExNTUzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTFkMDZhNzg2Yjhi
ODQ5NGFhNmRkNWMzNzFlMTEyNTA3ZGNiZjhlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANbu8tXxiyoePAf9jlftIVeYMQq1A8TkoAmuiZW8tl4xvksn
7N5hgpvn5kDFL8TiePSS+3NWnWPKDkF4KXBFWcBuADUX8/e6CpPxoRAXtqcXK/sC
/RcbRXI2FdtGkIWJOFDa5G0lqxiQfpNUSQMp5yHjANfhdZFvCRf+hxnoWA3RG2kz
5FYPh2vXG4W+V6mzbLLK9fhx1YIZWSCfir0BxBBW6Jr5Jo3oTE1CK1nXrD8TrtUr
6ZV43dqw/Y1Ot0ehimsIFRQCCOpj+0PZClRQkXy6/vWmcN8uDa0xABuapwOz4KBl
SDp1aUfPN9YyViHEZBXalfARhtj967kLU5wAjD8CAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBSR0Gp4a4uElKpt1cNx4RJQfcv45jAfBgNVHSMEGDAWgBRUy9p4sdG2E99W
X/mXALau6UDePzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZNdmFlTEhSdGhQZlZsXzVsd0MycnVsQTNqOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8x
L2tkQnFlR3VMaEpTcWJkWERjZUVTVUgzTC1PWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8xL1ZNdmFlTEhSdGhQ
ZlZsXzVsd0MycnVsQTNqOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEANXuqzAMAwQA1e6tAwQA1e6uAwQA
1e6xMA0GCSqGSIb3DQEBCwUAA4IBAQAe3i2XN81PHo5VP6l/pDS7TvxVtZIaRyym
+hT/q9hUDLmztl1VhBKiv9ratpdDjuUPimtjwGXnn2fLOHBfAPkUYooAe+9SD+MZ
a9nh6XRgZvG6uOFLxOozy8Y5YuJLg+XNBxhnE+cWejSxh0/IzW6SWV/im0xbuW7L
arffk5xeG3GSCYZjniCDpvAsnxqDW0lYhrwulAy6pVIBiuuFy7ULlZMMr/WuLy32
Vn3yX+AyIV7TWqKRCW9BUFtsNN+bSBrk8d4CZGPpkBXGoTxbkPl6q23ARdJ1MUn2
lJzC1EYfj/VgilwLIGQWKtk+UTfIBlM6WZ1Jv/8ydBS1H0mvf9wy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org