Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R_fomBCabwartJHSvcLrV69G8Qk.roa
File: R_fomBCabwartJHSvcLrV69G8Qk.roa (raw, json)
Hash identifier: Ojd4NhmwI4ODUbEM63/UMshRO5ENjyxF9l97TaPG4U4=
Subject key identifier: 47:F7:E8:98:10:9A:6F:06:AB:B4:91:D2:BD:C2:EB:57:AF:46:F1:09
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09120342
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R_fomBCabwartJHSvcLrV69G8Qk.roa
Signing time: Thu 12 May 2022 07:36:04 +0000
ROA not before: Thu 12 May 2022 07:36:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 213.209.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152175426 (0x9120342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 12 07:36:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47f7e898109a6f06abb491d2bdc2eb57af46f109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:4c:f1:26:ec:45:75:74:a2:d2:96:7e:65:
70:c3:5c:08:41:14:87:f7:04:cd:fd:0b:bb:96:29:
24:54:5f:e4:12:b1:1e:e3:bd:f7:68:28:a8:e0:03:
06:fd:77:09:38:ed:63:3f:4f:8a:63:e4:1e:87:17:
f5:8d:af:2e:bf:df:c3:ec:ec:40:1b:14:56:ab:2f:
af:16:54:3e:c5:f0:10:f2:c2:91:c6:5a:4f:69:2b:
98:9b:98:ae:81:75:6c:b0:8b:29:50:31:88:20:c4:
69:d4:f7:39:1c:db:ca:db:04:f6:75:09:33:32:fe:
68:e3:25:9e:f2:f9:da:4e:ec:ab:ea:2a:0d:8e:53:
17:57:e1:11:d6:59:4a:c3:9d:44:78:bb:68:29:a2:
da:78:82:8d:95:50:9e:82:b3:bc:53:a9:5a:3c:5d:
a7:1f:6e:76:ca:bf:e6:a4:e9:11:75:66:d9:c9:ca:
67:b9:48:9e:46:db:1c:b6:ed:62:95:cb:e7:97:a1:
94:03:7f:0f:59:cc:83:e7:4c:f7:59:18:b4:11:86:
7a:83:cd:86:1a:f6:15:0c:e9:69:88:18:23:a2:5c:
e9:f3:43:df:d3:a2:2e:50:0d:4d:bf:fe:68:f9:e3:
fb:a7:da:de:74:8d:60:0f:bd:e2:6b:ce:e4:37:63:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:E8:98:10:9A:6F:06:AB:B4:91:D2:BD:C2:EB:57:AF:46:F1:09
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R_fomBCabwartJHSvcLrV69G8Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.151.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7e:89:f6:64:2a:77:ae:5f:b3:01:12:e1:08:db:bb:59:17:
25:ea:12:ea:7a:b5:47:10:7d:9f:53:e4:c9:b1:ff:96:78:b3:
87:13:49:8b:ea:4b:ab:2e:25:2c:d1:24:dc:d3:fc:e7:b0:36:
64:89:74:03:9a:29:ea:89:62:ff:96:58:7d:06:ff:30:9e:d3:
41:7b:27:8e:77:ba:95:66:11:c9:3e:54:5f:a4:91:41:3c:40:
93:35:ac:02:5d:69:09:47:c8:35:98:d5:d2:88:af:cc:d4:b4:
c4:fe:fb:2a:43:e1:07:a2:a0:10:b2:77:a7:2f:a2:c9:55:4f:
a4:e5:1b:d1:99:73:bb:08:24:43:c9:26:6a:4e:05:05:ad:eb:
96:3b:d9:b7:8a:15:55:31:54:71:bf:13:ce:40:8e:b6:35:8f:
0c:ad:fd:26:ee:32:15:a1:fe:51:be:dc:0d:af:5a:95:66:ba:
55:65:9e:1a:d3:46:1b:82:aa:3a:aa:31:1a:f2:37:d8:e7:36:
47:17:fe:0a:de:be:11:c4:6e:39:5c:96:4a:6a:f8:7b:2f:85:
18:60:9f:89:ef:63:c5:3f:1c:2b:70:10:9c:ee:ba:0c:8f:93:
da:b0:d7:f9:5b:51:66:41:6b:78:68:b0:47:72:2e:bf:a2:7f:
24:57:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:03 2024 by rpki-client on console-fra.rpki-client.org