Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_0WfJoYLeLVOrA4S3RU1RrKRico.roa
File: _0WfJoYLeLVOrA4S3RU1RrKRico.roa (raw, json)
Hash identifier: 6i3KlySTKzt66eHsG+gJviuIvsgRCfLf1OJog38+enU=
Subject key identifier: FF:45:9F:26:86:0B:78:B5:4E:AC:0E:12:DD:15:35:46:B2:91:89:CA
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0875AD00
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_0WfJoYLeLVOrA4S3RU1RrKRico.roa
Signing time: Wed 06 Apr 2022 15:32:35 +0000
ROA not before: Wed 06 Apr 2022 15:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 213.209.136.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141929728 (0x875ad00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 6 15:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff459f26860b78b54eac0e12dd153546b29189ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:5b:1d:fd:d6:c9:ac:62:ef:80:14:68:b8:
c4:68:44:fd:7f:f2:13:5e:59:b4:57:89:3c:b7:67:
5e:31:09:f9:93:34:c0:bf:8d:cc:0d:53:88:d4:96:
27:b5:13:90:77:0a:0a:3b:bd:b6:98:b7:c5:d6:04:
f6:1a:cb:d2:5e:9e:67:00:27:4f:75:85:bc:9b:87:
b2:00:43:15:9e:60:a3:b6:53:ae:ca:0b:95:5b:fe:
f2:a3:08:33:5e:ed:6e:7c:3b:34:7d:d8:6d:20:4e:
fd:60:59:84:15:c0:ed:e8:4a:64:3c:c0:ad:6b:3c:
65:5a:76:46:c0:fc:3f:7d:6b:b8:41:cb:66:0e:14:
a6:f5:5e:73:cd:e1:22:85:47:89:a1:58:79:bc:af:
04:50:8c:bc:cc:48:18:2d:80:52:35:5c:4d:b8:5a:
56:83:eb:bd:f9:ce:14:93:11:21:e1:c9:8b:7a:c5:
31:1a:52:a7:0d:a3:6e:f4:53:0b:85:b2:bd:0f:73:
88:26:43:fc:8b:45:d7:3c:c7:63:a8:04:e5:55:87:
4c:39:9f:90:fb:23:2d:06:80:ef:05:07:1b:a4:46:
3a:04:2d:4c:e4:f4:3a:ed:61:cd:d5:9e:dc:87:73:
78:88:f3:74:be:3e:39:ca:f1:2a:bb:7f:3a:35:12:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:9F:26:86:0B:78:B5:4E:AC:0E:12:DD:15:35:46:B2:91:89:CA
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_0WfJoYLeLVOrA4S3RU1RrKRico.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.13.0/24
213.209.136.0/24
213.209.150.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2a:44:72:b7:67:7c:25:92:9c:73:fd:cb:05:6a:5d:af:99:
95:1e:a0:93:8a:a9:05:84:f0:cc:01:5e:dd:52:82:e5:c8:f7:
c9:08:2e:4e:80:db:c1:c7:4b:f0:9a:25:5c:e9:ed:e2:5c:08:
d7:42:b8:80:da:0e:17:2f:44:27:a0:f1:f2:cd:0b:89:49:02:
7f:8e:20:18:11:6a:d4:68:2b:ef:a1:98:b9:6d:86:14:c7:4b:
20:51:9f:0d:ea:04:fc:06:9d:40:e5:a5:39:e6:c7:22:af:31:
4e:b0:07:73:c0:bb:dd:df:9e:bf:03:37:2b:26:a1:08:3f:f8:
1c:46:3b:f7:2e:2c:f0:b6:46:79:ea:0d:10:61:58:87:87:b1:
d7:d5:c8:14:b8:a6:a0:ae:d3:79:31:62:b8:af:5b:da:59:30:
8d:e8:55:63:80:d1:11:f5:5e:2a:74:b5:f5:2b:a8:f3:4b:ef:
fd:c6:cd:9f:de:9c:85:54:d3:d1:a9:06:a2:7a:65:db:ea:c7:
a9:07:9a:7d:3d:5f:c0:0a:ec:70:cf:bd:d1:65:40:fc:6b:29:
53:4c:2b:7f:f5:26:6a:dc:59:e8:fc:83:61:25:e1:c7:be:14:
7f:6e:cc:3d:3e:94:3a:f6:25:fd:97:8f:21:8c:7a:6c:6b:98:
eb:ae:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org