Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/pcV5rv3CAVruNpYs3PmsEbu2ILY.roa
File: pcV5rv3CAVruNpYs3PmsEbu2ILY.roa (raw, json)
Hash identifier: zwizGyjg7VAsDHSFHfnrbHkNjL9p1U6V42mFUVGW1eQ=
Subject key identifier: A5:C5:79:AE:FD:C2:01:5A:EE:36:96:2C:DC:F9:AC:11:BB:B6:20:B6
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0AF8671F
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/pcV5rv3CAVruNpYs3PmsEbu2ILY.roa
Signing time: Sat 01 Jan 2022 13:02:44 +0000
ROA not before: Sat 01 Jan 2022 13:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13174
IP address blocks: 213.87.0.0/19 maxlen: 19
213.87.32.0/21 maxlen: 21
213.87.44.0/22 maxlen: 22
213.87.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184051487 (0xaf8671f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 13:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5c579aefdc2015aee36962cdcf9ac11bbb620b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:0b:bd:24:e3:58:9f:34:c4:20:07:89:85:
e2:29:37:ea:60:66:58:20:ca:50:40:8b:ab:5c:7a:
bc:d9:79:4c:e6:be:b9:1c:04:d0:7e:8b:ce:5b:37:
cd:f1:9a:e6:48:99:aa:56:ee:b5:9e:48:2e:cf:33:
88:bb:4d:de:14:fa:b7:a9:3f:e3:4a:95:33:40:b4:
07:38:f2:43:db:81:28:6b:a6:fb:19:d6:70:d3:7c:
4c:1c:36:23:fe:e2:7b:46:8f:e9:6e:44:fe:e2:86:
e5:27:75:9a:3c:23:d8:6e:fa:f7:87:b0:22:f9:25:
e8:7e:9c:d3:08:a1:cb:df:04:ca:50:1b:45:ed:b9:
db:39:da:32:86:13:34:5d:52:e1:c4:9f:bc:b1:cf:
c9:9e:95:d1:07:1e:c1:27:05:60:df:a1:b8:f0:26:
09:7f:9e:ad:69:6a:cf:8d:fc:8c:49:12:c4:11:05:
08:11:cc:08:62:00:55:9d:e6:ee:c4:71:19:1c:91:
7d:42:f7:e9:ab:c4:45:54:8a:1d:d0:41:1e:37:f9:
02:83:bc:be:34:bd:78:37:66:ab:f1:a8:dd:a0:dd:
41:43:e7:4c:7f:a5:be:0c:87:50:93:a7:23:52:bf:
7b:9c:54:1e:51:8a:53:a1:6d:26:32:62:78:4c:29:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:79:AE:FD:C2:01:5A:EE:36:96:2C:DC:F9:AC:11:BB:B6:20:B6
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/pcV5rv3CAVruNpYs3PmsEbu2ILY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.0.0-213.87.39.255
213.87.44.0-213.87.55.255
Signature Algorithm: sha256WithRSAEncryption
78:b2:40:63:8a:d2:36:9d:09:16:d8:cc:a9:88:58:6a:51:30:
74:73:60:b0:6e:2d:1b:0a:32:b7:ae:e7:42:f3:4e:1d:5b:4b:
41:61:46:2a:95:e3:21:4b:7b:bf:cb:ca:b0:a5:35:47:86:94:
4c:2f:0f:d8:86:6b:5c:37:21:7b:b9:bd:e8:6b:6b:f9:92:34:
d0:58:95:8e:dc:2a:81:ef:79:57:69:b4:91:ff:47:92:47:17:
33:49:c1:8b:94:35:61:3c:c8:eb:6c:d8:67:96:e3:53:ba:5d:
b6:2f:42:97:cd:20:a8:60:14:14:75:fc:d4:34:8b:f5:82:50:
a1:c7:56:38:50:1d:7d:d7:08:9a:24:f7:2c:27:58:13:20:27:
3d:d1:5b:d2:4b:f3:e9:a8:60:0b:97:25:92:4a:79:b8:57:db:
c8:ca:e5:de:b1:61:7b:a0:3c:b5:43:83:1a:3b:b4:4b:ee:65:
ed:20:5f:7c:4b:8f:1e:5c:f5:29:1d:2d:56:96:fb:04:51:5c:
68:f7:19:43:55:a6:14:ca:7b:7d:66:06:ea:60:f4:7b:3f:0d:
a5:31:3c:a5:33:2a:98:11:0a:6d:13:c6:0c:a6:23:39:38:df:
f0:2c:1e:ff:3c:d1:1e:db:e3:e0:be:ab:f3:ed:b4:3b:c4:9f:
40:69:b7:a8
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECvhnHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZWZlMWM4NTk0MDlhYzVkZTc0MTRjNDhmODY3Mzk5MTNiZTZiN2U1MB4XDTIyMDEw
MTEzMDI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTVjNTc5YWVmZGMy
MDE1YWVlMzY5NjJjZGNmOWFjMTFiYmI2MjBiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALEpC70k41ifNMQgB4mF4ik36mBmWCDKUECLq1x6vNl5TOa+
uRwE0H6Lzls3zfGa5kiZqlbutZ5ILs8ziLtN3hT6t6k/40qVM0C0BzjyQ9uBKGum
+xnWcNN8TBw2I/7ie0aP6W5E/uKG5Sd1mjwj2G7694ewIvkl6H6c0wihy98EylAb
Re252znaMoYTNF1S4cSfvLHPyZ6V0QcewScFYN+huPAmCX+erWlqz438jEkSxBEF
CBHMCGIAVZ3m7sRxGRyRfUL36avERVSKHdBBHjf5AoO8vjS9eDdmq/Go3aDdQUPn
TH+lvgyHUJOnI1K/e5xUHlGKU6FtJjJieEwp9ZMCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSlxXmu/cIBWu42lizc+awRu7YgtjAfBgNVHSMEGDAWgBSu/hyFlAmsXedB
TEj4ZzmRO+a35TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3J2NGNoWlFKckYzblFVeEktR2M1a1R2bXQtVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvNDUxZjA0LWUzYzktNDRlYS1hNmExLTQyODQ1ODY3OWNlNC8x
L3BjVjVydjNDQVZydU5wWXMzUG1zRWJ1MklMWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
NDUxZjA0LWUzYzktNDRlYS1hNmExLTQyODQ1ODY3OWNlNC8xL3J2NGNoWlFKckYz
blFVeEktR2M1a1R2bXQtVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwIQQCAAEwGzALAwMA1VcDBAPVVyAwDAMEAtVXLAME
A9VXMDANBgkqhkiG9w0BAQsFAAOCAQEAeLJAY4rSNp0JFtjMqYhYalEwdHNgsG4t
Gwoyt67nQvNOHVtLQWFGKpXjIUt7v8vKsKU1R4aUTC8P2IZrXDche7m96Gtr+ZI0
0FiVjtwqge95V2m0kf9HkkcXM0nBi5Q1YTzI62zYZ5bjU7pdti9Cl80gqGAUFHX8
1DSL9YJQocdWOFAdfdcImiT3LCdYEyAnPdFb0kvz6ahgC5clkkp5uFfbyMrl3rFh
e6A8tUODGju0S+5l7SBffEuPHlz1KR0tVpb7BFFcaPcZQ1WmFMp7fWYG6mD0ez8N
pTE8pTMqmBEKbRPGDKYjOTjf8Cwe/zzRHtvj4L6r8+20O8SfQGm3qA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org