Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iM53SFyNIfjVZStS98zhg9cN3Es.roa
File: iM53SFyNIfjVZStS98zhg9cN3Es.roa (raw, json)
Hash identifier: OSm9DfgSAOrrs9SCF1jda59vJPGGGlRGjZSBzhouFnU=
Subject key identifier: 88:CE:77:48:5C:8D:21:F8:D5:65:2B:52:F7:CC:E1:83:D7:0D:DC:4B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09EEC2C0
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iM53SFyNIfjVZStS98zhg9cN3Es.roa
Signing time: Thu 30 Jun 2022 17:44:02 +0000
ROA not before: Thu 30 Jun 2022 17:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 213.209.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166642368 (0x9eec2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 30 17:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88ce77485c8d21f8d5652b52f7cce183d70ddc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:05:0b:11:03:14:e7:32:12:c3:4e:bb:a3:
c7:01:09:19:7a:ba:8e:b9:77:ae:69:bc:c4:ec:24:
09:76:62:dd:56:b1:9d:62:fc:c2:d2:eb:f7:55:1b:
09:52:03:5a:e9:c5:94:8c:8b:82:fb:e0:cf:77:12:
16:55:66:15:89:2f:56:33:6e:a0:98:0f:7d:70:50:
1e:81:c4:df:c1:a9:60:6c:cd:98:0e:f5:fc:b7:bf:
3e:3d:4c:2f:72:08:a2:38:b8:04:24:65:5c:27:cb:
9d:ee:e4:f5:3f:de:5b:e3:56:0c:5b:4f:31:c9:a8:
8f:38:57:cc:ea:be:4c:70:ac:8c:f6:23:76:4f:20:
69:d8:50:10:bc:91:e0:12:48:a1:e3:ef:20:3b:44:
2c:54:a2:41:86:b0:9e:e2:2e:aa:04:23:61:76:ce:
36:7e:c0:c7:ad:f2:5d:df:a1:09:b4:86:ca:7b:0f:
ca:d2:8a:f6:0d:57:08:3b:a9:e5:fc:46:99:60:c0:
2c:0d:7a:92:fe:5b:d0:39:f5:ad:bf:7f:69:6b:19:
cc:b2:48:e7:5b:10:19:7f:9a:8e:5b:58:21:ee:5a:
d9:9d:70:7b:29:e8:c0:3c:7f:fd:08:3e:2e:e7:7a:
b6:55:c0:e4:0e:62:f6:17:d4:be:8b:c5:eb:76:29:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:77:48:5C:8D:21:F8:D5:65:2B:52:F7:CC:E1:83:D7:0D:DC:4B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iM53SFyNIfjVZStS98zhg9cN3Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a4:55:13:7a:b3:78:f0:04:9d:01:f7:03:c3:36:02:5b:4c:
3b:43:d5:fd:01:e2:cd:76:b0:1c:b0:e4:2d:84:fb:fe:2e:9b:
90:3c:48:d0:38:c7:07:a4:85:b8:58:28:37:dc:57:f7:f5:ca:
98:c5:cf:3f:09:52:0c:91:72:34:d7:15:0c:2e:ad:8c:b9:1c:
53:ac:4a:fb:5b:91:bb:10:53:34:f5:3e:46:06:d7:87:dc:b6:
90:3c:a1:7a:e7:2f:0d:ee:c0:5a:66:20:12:91:f3:3b:cc:fc:
c5:7a:ea:f2:06:d6:11:b1:28:41:80:92:18:3d:9c:3f:97:1d:
39:ba:68:96:19:8a:15:82:67:10:c0:88:7b:d3:b9:94:d4:bc:
4d:d0:33:db:42:51:29:98:8e:51:8f:ac:d3:28:f4:b1:01:9b:
a4:e7:c2:02:b7:48:6d:42:9b:82:29:98:83:d9:ec:f7:a5:9d:
66:1c:93:c7:9b:fa:cf:9c:68:21:9c:24:9c:13:49:08:51:3e:
2b:fc:f7:90:4a:91:13:12:19:e0:f8:d7:82:fc:03:74:e0:58:
cd:ce:dc:13:5a:89:ee:e6:5a:b4:81:22:d4:47:bd:d8:53:27:
ff:b1:a6:93:15:0d:88:4e:54:9f:33:09:94:9c:f7:94:0f:ed:
f6:1f:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org