Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/vowdmqQWzgjU_EoyFD0o1tY5bMY.roa
File: vowdmqQWzgjU_EoyFD0o1tY5bMY.roa (raw, json)
Hash identifier: W52cncVB11eWTwtg/ZMd2V3JgUcAwv3HZR2uFaViNe0=
Subject key identifier: BE:8C:1D:9A:A4:16:CE:08:D4:FC:4A:32:14:3D:28:D6:D6:39:6C:C6
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 238D4BD2
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/vowdmqQWzgjU_EoyFD0o1tY5bMY.roa
Signing time: Sat 01 Jan 2022 11:59:14 +0000
ROA not before: Sat 01 Jan 2022 11:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207062
IP address blocks: 213.140.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596462546 (0x238d4bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Jan 1 11:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be8c1d9aa416ce08d4fc4a32143d28d6d6396cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:80:34:76:a4:e0:d1:ab:85:3e:e0:b6:64:
13:16:79:78:63:35:ae:9a:f4:2a:03:ae:ae:68:c9:
4e:60:88:1f:6f:a0:95:50:6c:d8:d3:cd:2d:b0:3a:
78:28:74:ec:e8:30:46:48:9e:8e:50:57:86:4e:04:
e7:8e:4c:85:9f:7c:de:c1:00:da:25:b6:b7:8c:63:
49:54:6a:90:03:84:ea:29:2b:0d:31:b4:48:af:e1:
6d:46:a3:cb:78:ee:3d:2a:0e:e9:1e:cf:88:d5:64:
b0:d9:d8:87:ef:bd:34:28:8e:bb:fa:4b:dd:22:02:
43:5d:c5:48:22:38:bf:f7:cc:70:69:9d:cc:cb:56:
4f:7e:5b:2d:bc:ff:e6:c7:cb:a8:b3:20:a3:9f:89:
4c:73:b9:a8:6b:41:8b:c1:82:97:fd:9c:cb:52:71:
a4:07:aa:de:93:6a:1b:b8:4a:98:fc:83:4d:fc:7a:
98:ca:39:a3:0c:3c:b0:4e:63:a6:9b:91:0a:ef:da:
8c:07:72:98:ba:c0:da:d5:a4:76:aa:4c:26:1b:56:
ec:92:e5:3a:13:17:4b:66:d8:8b:b5:84:16:48:70:
b1:28:ba:f9:7f:71:e8:28:ae:68:76:67:0e:14:e9:
f5:fe:11:58:b4:50:db:fa:c7:d3:a7:0a:9c:2f:40:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8C:1D:9A:A4:16:CE:08:D4:FC:4A:32:14:3D:28:D6:D6:39:6C:C6
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/vowdmqQWzgjU_EoyFD0o1tY5bMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ef:9a:9c:69:15:9f:01:06:a5:c5:fe:56:b0:42:85:16:d9:
f6:21:ad:ae:9e:cc:19:62:10:33:9a:12:48:09:11:ab:39:cf:
8f:32:22:d9:12:cc:b7:3f:fb:a7:8e:1a:be:90:88:aa:c0:95:
44:91:61:ac:0d:63:16:21:7c:db:dc:71:4d:3f:60:ca:cb:88:
65:7c:40:72:cd:15:3a:95:e1:bb:c7:0e:54:0d:0b:45:fe:c2:
ea:8a:c9:be:a9:46:24:7b:9b:d0:07:cb:32:03:57:62:d4:86:
dd:8e:70:84:30:08:09:95:3e:bb:4a:39:23:f7:df:ed:02:76:
35:e4:7e:1c:68:f8:6b:e8:1c:12:a5:20:0e:b6:70:3a:ae:13:
6c:53:0c:17:2e:a9:46:13:7f:81:b3:da:81:6e:53:73:13:33:
3f:05:eb:63:a8:b8:55:d9:28:a3:43:da:6a:90:cb:85:5b:ed:
60:93:aa:36:43:66:31:99:da:fd:80:4f:2b:4a:96:90:5b:8e:
2e:b2:97:90:f4:9b:1f:80:2b:32:f6:95:1c:f6:91:04:a9:59:
84:18:eb:59:aa:04:f6:99:58:b2:22:7b:46:e9:eb:24:a3:47:
0d:0a:d6:d6:5a:6a:a3:85:a9:9a:ff:46:65:4a:70:38:7f:44:
d5:5e:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:17 2024 by rpki-client on console-ams.rpki-client.org