Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/l-z4NAkZ5akuka-8YFnYNoGsJ4M.roa
File: l-z4NAkZ5akuka-8YFnYNoGsJ4M.roa (raw, json)
Hash identifier: +pdqmxBtl8Lk3/jNOrCo9ZyTLmH2pCHRYdEy0nB+Gfg=
Subject key identifier: 97:EC:F8:34:09:19:E5:A9:2E:91:AF:BC:60:59:D8:36:81:AC:27:83
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018451ADB8FAEC4770DE6E72063FC5C05D42
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/l-z4NAkZ5akuka-8YFnYNoGsJ4M.roa
Signing time: Mon 07 Nov 2022 10:40:50 +0000
ROA not before: Mon 07 Nov 2022 10:40:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211871
IP address blocks: 213.238.179.0/24 maxlen: 24
213.238.181.0/24 maxlen: 24
213.238.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:ad:b8:fa:ec:47:70:de:6e:72:06:3f:c5:c0:5d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Nov 7 10:40:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97ecf8340919e5a92e91afbc6059d83681ac2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:ae:56:b4:04:98:3a:58:fe:85:77:26:cc:
f5:80:dc:1e:9e:e4:60:fe:8c:1a:b0:be:05:7a:09:
1d:19:d2:bf:c7:1c:87:4e:49:e6:ed:a8:08:dc:cb:
5a:e6:30:81:f5:ed:ae:c5:ec:7d:aa:0d:4c:46:5a:
42:7c:82:4c:27:51:ec:85:60:dd:9d:ab:0f:17:71:
9e:c9:59:e0:19:30:36:bb:b4:80:35:92:50:f2:f4:
18:6a:38:b6:ae:67:be:0a:79:06:96:7d:c8:2e:f6:
b9:f4:a8:6a:63:9c:b0:c2:0d:f2:bc:5b:33:9a:ba:
d6:b4:9c:3b:ce:2b:16:fc:66:da:d9:f6:a0:e0:2d:
11:f1:10:4e:0c:f1:1a:97:ef:e6:d2:d0:c3:80:6e:
24:48:b3:95:8d:72:f4:6b:8c:70:aa:b1:1a:2c:90:
e4:1c:ef:6d:c2:a0:5e:d0:c7:54:44:34:d5:c9:18:
3f:90:69:8b:2e:e2:a1:8f:ff:ee:e8:36:88:e1:03:
c5:43:d6:d9:02:c5:4e:b6:bc:86:05:a9:6e:52:9c:
d0:76:b4:48:9a:9a:96:2d:83:8f:8b:f9:07:6a:04:
db:a6:30:63:7b:45:e1:fe:76:34:a6:88:5a:3a:64:
69:be:a0:99:be:06:7d:c4:53:cb:e5:c2:de:e6:87:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:F8:34:09:19:E5:A9:2E:91:AF:BC:60:59:D8:36:81:AC:27:83
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/l-z4NAkZ5akuka-8YFnYNoGsJ4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.179.0/24
213.238.181.0/24
213.238.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c9:43:a5:dd:92:05:1b:6a:55:f1:e4:98:f6:23:3c:61:dd:
35:c6:16:b0:0a:35:fd:5f:46:82:39:b1:c2:3c:f9:0d:c6:96:
9f:76:8a:ba:4a:39:93:b4:52:01:6f:51:32:f7:2d:a2:7f:bf:
be:b4:c3:60:5f:d7:98:fd:24:17:67:59:e4:c5:9c:51:0f:cb:
79:b5:c2:3e:ec:dd:9e:a1:f2:8c:7f:55:c8:d5:9d:e1:ae:f2:
0f:a8:11:65:ec:a5:24:38:d4:55:08:42:67:e8:87:f3:00:73:
8b:6b:e1:75:ac:cd:86:2f:58:46:46:bd:5b:90:59:7e:03:f1:
cb:e8:85:c4:42:f7:4a:70:6e:27:6c:13:62:28:ea:45:5b:f4:
a1:84:45:9a:81:e7:50:97:dd:6b:76:8e:8f:68:c3:9f:5b:26:
fa:6f:e6:06:87:04:df:b0:e8:04:20:97:3b:d5:44:be:f6:39:
48:4d:94:2f:96:ba:ac:54:7e:44:42:bd:83:ab:85:b9:8e:70:
0b:ef:ce:bf:50:ea:a3:da:76:7f:17:e2:1f:d7:6c:91:06:6d:
1d:87:11:e5:13:78:0a:05:5e:d4:8a:bb:44:56:5e:99:f4:ff:
46:78:51:ab:65:e6:7c:49:bf:99:84:d2:7b:72:67:f0:65:eb:
25:a6:94:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org