Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/S_3H3_Eu5Q5rxvdCDn10V2ysXMw.roa
File: S_3H3_Eu5Q5rxvdCDn10V2ysXMw.roa (raw, json)
Hash identifier: ubTGasVSkBfNU0/EIIg0St4+5NeuqhOIUISKVbP6uKc=
Subject key identifier: 4B:FD:C7:DF:F1:2E:E5:0E:6B:C6:F7:42:0E:7D:74:57:6C:AC:5C:CC
Certificate issuer: /CN=eb38b7de5619d5421b15d2debd56d4cded94247c
Certificate serial: C355B7
Authority key identifier: EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zi33lYZ1UIbFdLevVbUze2UJHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/S_3H3_Eu5Q5rxvdCDn10V2ysXMw.roa
Signing time: Sat 01 Jan 2022 10:00:30 +0000
ROA not before: Sat 01 Jan 2022 10:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 213.109.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12801463 (0xc355b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb38b7de5619d5421b15d2debd56d4cded94247c
Validity
Not Before: Jan 1 10:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bfdc7dff12ee50e6bc6f7420e7d74576cac5ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:8a:56:11:7f:f0:1e:4a:27:9b:72:81:e0:
b6:00:95:db:88:7f:97:5a:47:44:bc:fa:53:38:86:
7b:a1:96:08:ae:50:a5:43:67:15:72:f5:07:37:ef:
43:57:5f:88:2e:37:09:a0:d2:98:2e:95:b5:e5:8e:
57:07:85:60:e8:33:f0:6a:05:e0:7b:56:26:b5:6e:
10:54:d6:d0:8a:78:85:55:d8:99:07:d7:4a:ae:3a:
5b:af:39:a2:d6:23:3c:b8:b3:60:ee:3c:e6:93:e8:
3e:4e:2a:b8:a8:db:ea:b9:95:67:63:24:64:6c:dd:
9a:8a:0f:82:15:2e:bb:ac:df:0b:f4:08:a2:ff:79:
92:e6:7f:6d:d9:78:bb:b5:f2:5b:55:5b:90:74:d2:
d2:0b:43:62:56:10:d3:d0:99:82:a4:8c:e1:1e:30:
2a:07:2e:f6:66:2c:98:b3:26:7c:a7:01:d4:6b:10:
8a:7b:a9:7b:db:0d:08:4c:04:ad:70:54:e3:a4:7a:
42:f1:8c:fb:37:6b:2c:ae:49:2d:85:95:b9:bb:3e:
02:e4:32:25:36:60:a9:e2:f3:84:b6:c0:7a:c6:21:
5c:51:da:24:f0:21:de:3d:b1:d0:e8:34:92:bd:95:
3c:8f:ed:72:17:43:3c:05:8c:84:b4:65:39:83:9d:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:C7:DF:F1:2E:E5:0E:6B:C6:F7:42:0E:7D:74:57:6C:AC:5C:CC
X509v3 Authority Key Identifier:
keyid:EB:38:B7:DE:56:19:D5:42:1B:15:D2:DE:BD:56:D4:CD:ED:94:24:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zi33lYZ1UIbFdLevVbUze2UJHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/S_3H3_Eu5Q5rxvdCDn10V2ysXMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/379f49-e51c-47a3-87be-8778cebcae6e/1/6zi33lYZ1UIbFdLevVbUze2UJHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:83:44:bf:d0:e1:44:a6:ec:cc:c7:1d:05:57:a4:a9:4b:62:
fd:50:7d:75:a2:37:c1:af:54:ce:d8:e3:2d:a4:56:f4:86:15:
d2:36:71:28:d8:66:0e:a3:b4:86:c8:8d:c0:d8:00:8f:d4:8f:
ef:0d:f5:ee:f7:7f:8d:b4:bd:af:d0:01:58:e4:a1:e2:c4:c9:
e2:af:08:3b:c1:93:8e:b5:95:b7:87:b1:56:58:66:d3:d5:a3:
02:42:ba:4c:12:7b:fc:a4:99:b0:9a:c9:47:4f:5d:49:03:f7:
5c:6f:3e:c0:de:ef:8d:d7:9d:79:73:8e:8e:d2:0b:21:5c:2b:
1a:79:25:1e:1c:01:f1:16:4b:56:37:48:2e:6d:a3:10:fc:49:
a8:56:c8:3b:b7:99:53:3d:29:2a:e0:b4:1d:66:5f:af:aa:5b:
6b:f6:da:17:d7:6a:d3:ba:a7:fa:5b:f4:65:29:0d:d8:88:39:
a2:32:a5:93:0a:c5:61:cc:74:2d:25:6d:44:d2:f6:93:52:ae:
d7:05:19:fc:7f:5f:52:2a:8b:b9:e6:88:88:3e:31:93:a7:cb:
b2:1a:57:28:ca:12:4e:5f:2c:8a:04:cb:b6:09:fc:a1:51:a0:
2a:50:14:d4:1d:98:50:ab:e8:74:dc:8e:05:cf:21:7a:3d:eb:
2f:cd:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:05 2023 by rpki-client on console-ams.rpki-client.org