Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pJCg7sdFXSqQKZoCFd_eJw8LN5k.roa
File: pJCg7sdFXSqQKZoCFd_eJw8LN5k.roa (raw, json)
Hash identifier: Ys9XJsT9I94bZ4J0odlb0+8VBhRjytpvE0xarO2Kxco=
Subject key identifier: A4:90:A0:EE:C7:45:5D:2A:90:29:9A:02:15:DF:DE:27:0F:0B:37:99
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AE856BA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pJCg7sdFXSqQKZoCFd_eJw8LN5k.roa
Signing time: Sat 01 Jan 2022 13:57:46 +0000
ROA not before: Sat 01 Jan 2022 13:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13086
IP address blocks: 213.216.64.0/18 maxlen: 18
213.186.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719869626 (0x2ae856ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a490a0eec7455d2a90299a0215dfde270f0b3799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:58:7c:fc:ee:90:55:b4:dc:ca:f6:22:0d:
ea:c9:34:b4:2c:97:15:a2:94:e9:2f:bb:1a:4d:d1:
0a:c5:a0:2b:1e:c4:04:aa:cf:e7:f7:d8:fd:e7:a5:
5d:dd:97:d5:2b:00:ef:21:75:0e:73:32:3e:bc:c3:
89:7c:67:e4:b4:e9:a1:f0:69:95:4e:e7:f9:5a:09:
e5:2c:4f:54:b5:ec:28:a4:e7:d8:ae:f2:61:f1:b8:
b8:c1:28:37:af:0e:c5:76:15:1b:21:0c:d0:96:53:
d4:1d:47:33:4a:65:39:f1:f5:4d:fa:69:41:e0:3e:
a8:42:ae:93:25:aa:67:48:0d:9f:f0:39:c9:35:f0:
97:84:07:2f:fc:bd:f8:a4:12:a7:60:47:f6:75:05:
b6:36:b5:90:a8:e1:11:62:c5:68:ca:d7:76:9e:20:
89:86:c1:b0:17:62:73:59:c2:96:b2:80:5c:dd:1a:
71:13:5e:0e:a1:22:bd:5b:7b:df:9d:79:d4:f2:5b:
20:23:8c:e6:4e:f5:d9:5b:a7:34:10:92:0d:1a:c3:
b2:24:71:9b:c9:f0:14:90:22:d0:d8:8e:29:66:1b:
01:62:a6:a7:44:a2:a0:a5:bd:87:a6:11:3d:78:0b:
4f:ae:9d:be:3e:49:31:fc:64:90:c3:07:7e:1b:1a:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:A0:EE:C7:45:5D:2A:90:29:9A:02:15:DF:DE:27:0F:0B:37:99
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pJCg7sdFXSqQKZoCFd_eJw8LN5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.186.64.0/19
213.216.64.0/18
Signature Algorithm: sha256WithRSAEncryption
11:ce:e2:ef:6e:f8:10:69:93:bf:d4:48:34:aa:31:58:87:1b:
9f:e4:fa:24:3b:50:10:26:aa:4d:a7:e2:ed:47:64:52:0c:60:
c3:e3:12:64:79:b5:20:9a:0d:17:08:71:40:97:f6:c3:bd:dd:
64:54:77:44:71:31:bc:21:d5:83:ff:eb:bd:ad:b1:5d:8d:a8:
90:02:cd:cc:31:79:81:c5:b8:35:57:46:71:53:2b:81:4a:c0:
ae:16:4a:6b:bb:aa:51:36:d7:b2:12:17:5d:1a:70:1b:f0:f6:
62:54:f8:63:b5:ab:fa:d3:b2:8f:1b:40:3a:be:c6:70:fb:a1:
7e:73:31:00:1f:72:a9:29:b2:1c:77:64:4f:13:fe:ab:49:ad:
ce:1e:c9:d0:e2:f0:57:23:4b:38:ae:96:ee:4c:27:62:a6:bf:
c8:06:bc:d0:2f:0c:0a:ac:34:4a:d7:c3:9f:ae:f1:c1:23:04:
09:ed:48:9d:a6:48:aa:f2:62:72:34:93:e6:11:74:aa:86:fc:
93:2c:6b:ce:1f:66:d9:6a:3f:36:56:22:cb:63:8f:13:3a:07:
c9:7d:ad:4f:d6:70:c9:32:27:79:5b:4c:05:ad:22:ce:a8:28:
ff:d6:c4:28:3d:34:d5:aa:a9:74:96:97:65:ac:c3:6b:30:b2:
6b:dc:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org