Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/l4RfPKRPhi9SbDTyxModE3z30Aw.roa
File: l4RfPKRPhi9SbDTyxModE3z30Aw.roa (raw, json)
Hash identifier: DqW+XEmkVaV73BFjwOK46PG2UwcaG/v3ufKWLWYdDK0=
Subject key identifier: 97:84:5F:3C:A4:4F:86:2F:52:6C:34:F2:C4:CA:1D:13:7C:F7:D0:0C
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018418C26FB0CA8F8AE3D6467330F11C0C16
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/l4RfPKRPhi9SbDTyxModE3z30Aw.roa
Signing time: Thu 27 Oct 2022 09:25:06 +0000
ROA not before: Thu 27 Oct 2022 09:25:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 213.238.174.0/24 maxlen: 24
213.238.177.0/24 maxlen: 24
213.238.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:c2:6f:b0:ca:8f:8a:e3:d6:46:73:30:f1:1c:0c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Oct 27 09:25:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97845f3ca44f862f526c34f2c4ca1d137cf7d00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:59:58:6e:c8:34:88:1d:57:db:55:3f:f1:
52:dc:08:58:0a:58:b5:69:b7:60:16:90:21:ed:c3:
1b:91:70:0e:04:93:1c:55:bf:65:76:e1:3a:02:38:
b9:e7:59:4b:66:d5:8c:b7:53:f3:cd:2d:9c:3d:57:
b3:c3:b0:d3:1a:90:46:f8:af:ea:7a:d7:86:04:5b:
42:55:66:99:b1:f3:16:60:ae:44:93:c8:c0:c4:87:
2e:36:80:8f:b6:e0:13:7c:4c:3a:eb:02:1d:26:16:
2d:8c:36:1a:c0:ce:7f:d9:17:d3:46:81:9f:ab:c1:
c3:c8:c0:e7:b6:ea:f0:3a:95:17:24:4c:fd:34:7d:
5b:fe:78:d6:56:52:da:6e:e2:60:f9:e9:cf:00:98:
b5:42:3d:5d:af:e7:5f:bf:8c:38:ff:94:4e:e7:54:
fd:4d:f5:76:3d:98:e6:d2:3b:81:f5:50:6c:02:06:
1f:3b:41:12:82:5d:5e:f0:4e:56:b4:54:af:43:d8:
6c:c5:5e:6a:3c:62:5d:f7:91:a1:ad:c3:8a:f3:08:
fa:9e:c7:88:79:a2:91:96:44:fc:98:90:da:0c:04:
43:55:69:85:57:28:d2:16:97:1a:36:65:c3:32:14:
19:c7:8b:cc:7b:5f:33:05:12:d0:66:84:34:c9:8f:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:5F:3C:A4:4F:86:2F:52:6C:34:F2:C4:CA:1D:13:7C:F7:D0:0C
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/l4RfPKRPhi9SbDTyxModE3z30Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.173.0-213.238.174.255
213.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
01:35:68:d4:46:66:64:6b:ea:c5:e9:5a:2b:b1:5f:e2:ed:6e:
de:b1:4f:7e:35:b9:55:c7:f6:15:a7:7d:8e:06:f8:cc:15:ff:
e4:6a:f1:d8:8e:5b:b4:a9:a5:1f:8f:3d:43:8b:f6:fc:4d:a4:
78:5c:21:2c:39:65:b2:f7:61:b5:9e:92:74:24:be:90:b7:41:
c5:22:ac:53:ae:8b:17:5e:c4:49:e9:39:bf:51:7f:80:8c:ad:
3f:26:35:01:43:29:b1:c9:19:7f:fe:2c:63:a6:0b:f2:5c:0f:
02:b4:b9:9e:91:e9:58:b2:ca:45:3b:ea:48:a6:30:9e:fe:88:
b7:ec:09:22:ba:b0:e8:fe:f5:a2:58:0d:05:5c:6a:22:90:c1:
c3:4f:dd:83:0b:6a:4c:64:89:58:d1:13:bf:a9:e0:73:33:24:
df:a9:12:dd:91:7d:57:a9:69:d5:6f:de:27:ab:8b:9b:a7:27:
63:e2:5a:8d:56:3b:22:21:c7:15:70:b6:da:5a:6b:dd:7d:3e:
68:9a:92:6d:0c:4d:62:21:a9:15:25:3a:79:cc:7c:4e:f0:32:
25:a0:59:98:00:4c:bf:4c:bc:47:e2:14:8b:ef:4f:f2:7f:78:
52:e2:3d:27:df:bc:13:e0:02:d7:b7:ed:84:a0:e4:cf:c1:c5:
51:b9:a5:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org