Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/BN_2oxo5o7se7gGkZ0oqtNJ5QHk.roa
File: BN_2oxo5o7se7gGkZ0oqtNJ5QHk.roa (raw, json)
Hash identifier: ECpLfwFwdQ9xmOO5d9hPLx6e/8VXKxhyokC6EFMb5JE=
Subject key identifier: 04:DF:F6:A3:1A:39:A3:BB:1E:EE:01:A4:67:4A:2A:B4:D2:79:40:79
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01850B39242F44ED1586FC8F28F7FA23CD1D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/BN_2oxo5o7se7gGkZ0oqtNJ5QHk.roa
Signing time: Tue 13 Dec 2022 11:22:52 +0000
ROA not before: Tue 13 Dec 2022 11:22:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 213.209.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:39:24:2f:44:ed:15:86:fc:8f:28:f7:fa:23:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Dec 13 11:22:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04dff6a31a39a3bb1eee01a4674a2ab4d2794079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:fd:d8:db:f9:ae:c6:d2:ab:78:91:60:3e:
6f:4d:c4:b6:b5:bf:f7:d1:51:2e:74:96:43:83:5f:
91:dd:f1:44:eb:c5:eb:21:bf:fa:db:9c:56:e0:03:
4f:de:a2:f1:02:aa:ae:30:60:dd:2a:3e:01:3c:bd:
5d:1c:73:e5:54:4f:46:ed:6c:c6:1f:ab:c5:e0:9d:
02:cd:aa:df:26:40:61:39:64:a0:f6:b7:7c:e3:b6:
a7:86:04:5d:58:c5:1d:23:60:3d:19:b9:07:82:fb:
47:6e:2a:ea:fe:b2:6b:3d:34:52:01:03:b7:be:20:
32:09:45:c9:8e:41:b0:0b:31:04:9e:7c:12:e9:93:
a6:6e:7c:e4:6e:ef:8e:50:94:97:da:ac:c2:42:1d:
10:f4:84:1c:d0:0f:0f:ba:35:bf:0a:18:d5:fa:9f:
99:48:cc:59:87:e5:2b:41:20:d5:37:81:93:57:89:
3b:a1:ad:f1:2d:9a:97:1d:bd:41:ba:2e:2a:2b:22:
7b:bb:37:fe:ff:5c:47:f5:36:30:f5:1c:cf:30:40:
cc:2a:2b:fa:7d:7a:4d:36:8b:28:a5:9e:eb:44:6c:
3f:a6:24:54:23:4a:90:5d:e2:1d:a9:81:af:5c:26:
b9:ff:af:8b:d7:7a:5d:fe:ed:9b:7b:ac:29:02:df:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DF:F6:A3:1A:39:A3:BB:1E:EE:01:A4:67:4A:2A:B4:D2:79:40:79
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/BN_2oxo5o7se7gGkZ0oqtNJ5QHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:57:ff:64:dc:85:51:bb:d8:05:5f:f9:fb:95:8a:78:13:2e:
1c:03:92:33:72:5c:6b:f0:eb:ef:5b:f4:11:29:f8:b2:5e:44:
70:1f:6b:ae:b8:91:36:7a:da:70:50:cf:73:11:43:db:fc:77:
6f:dd:7d:54:62:9e:33:d2:fc:56:eb:77:65:7f:4f:64:71:ca:
b5:c2:c6:8f:a1:e9:36:79:f3:ea:77:92:7b:41:98:58:25:fe:
ec:cb:db:4e:eb:2e:e2:5e:40:6b:d4:0f:74:b4:da:76:e3:9c:
71:f8:30:d1:d1:3f:86:b8:59:f9:78:1d:4b:b0:16:8e:0e:99:
2f:88:9c:13:d6:dc:d2:66:99:fb:b3:7c:bc:c4:62:67:d0:15:
99:ff:62:e6:ce:c0:94:f9:12:2c:26:9b:63:0e:6d:33:7e:51:
d3:d8:50:1c:a5:1b:82:3d:4c:7d:f4:7b:22:3b:21:8f:47:66:
c2:29:47:47:d1:a2:cc:9f:c5:be:93:09:f3:2d:08:07:14:64:
28:cc:2a:73:02:53:9d:c8:83:ce:16:b7:46:a6:d8:f3:3b:30:
95:8f:d9:02:df:cd:3b:93:6c:9b:fb:41:3c:48:e5:ef:12:a0:
f2:fd:17:a4:c4:bd:87:eb:3b:e3:82:08:70:b1:e2:65:3a:fa:
9b:5c:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org