Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2HeGIVZOqxFlKq1PIcxDmzhmAik.roa
File: 2HeGIVZOqxFlKq1PIcxDmzhmAik.roa (raw, json)
Hash identifier: A8EBE8yVxqpAcICfKP20x4UA6bxvAQfuiONAqWjpfOQ=
Subject key identifier: D8:77:86:21:56:4E:AB:11:65:2A:AD:4F:21:CC:43:9B:38:66:02:29
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E14EDE2
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2HeGIVZOqxFlKq1PIcxDmzhmAik.roa
Signing time: Sat 01 Jan 2022 03:02:50 +0000
ROA not before: Sat 01 Jan 2022 03:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2723
IP address blocks: 213.161.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236252642 (0xe14ede2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8778621564eab11652aad4f21cc439b38660229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:80:29:e1:1a:19:53:6e:ba:d1:38:1c:cd:
ed:bd:80:5d:92:83:cc:9e:19:65:2f:aa:a3:16:d0:
cf:04:f1:7e:f5:05:63:96:34:71:b5:41:39:94:07:
84:6b:85:58:fe:f6:30:78:43:58:3c:73:fa:34:15:
ab:dc:b4:61:57:f3:d6:d8:a5:ae:bc:53:a3:41:06:
f7:93:cc:67:41:27:63:d1:64:16:1e:03:11:15:11:
45:85:c8:55:d3:3e:dc:ca:55:d3:42:16:14:f8:b6:
c4:65:f8:be:db:a6:b2:2b:04:33:af:d8:2b:64:4a:
9c:8d:c6:e6:5b:0e:67:3f:7f:5f:f0:3a:5e:a0:33:
43:ff:c9:ce:27:ad:c5:8c:1f:20:82:b8:1f:00:ab:
31:10:10:bd:83:10:f2:fc:9d:ec:8f:33:06:02:d5:
35:1a:fe:1b:0b:5d:85:38:e1:92:f8:c6:13:f9:01:
ac:0a:ed:ce:f8:7d:ac:12:40:50:ac:df:cf:ff:14:
04:4c:c7:fd:c2:89:df:12:7b:cd:c2:ac:5c:1f:f5:
06:19:ed:54:06:69:bd:72:be:33:7d:06:cb:75:57:
ca:c1:a0:df:b2:9f:54:bc:4d:c1:10:06:1c:84:f8:
43:28:ea:af:68:e3:03:13:c0:9f:6c:90:ba:11:bc:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:77:86:21:56:4E:AB:11:65:2A:AD:4F:21:CC:43:9B:38:66:02:29
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/2HeGIVZOqxFlKq1PIcxDmzhmAik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c8:6f:55:ec:22:17:ff:87:08:51:c2:cf:23:a3:b8:9b:59:
d9:67:b7:21:7e:35:b1:b6:de:c8:6f:7b:d1:16:b8:08:cc:3e:
4a:7b:85:ab:49:23:3e:2b:79:c0:49:15:c2:df:00:ff:fa:3f:
97:29:e5:b2:9e:d5:e0:61:ec:e1:89:35:39:01:d1:1b:22:61:
b0:29:e9:f4:78:c2:aa:64:77:32:e8:95:ba:a3:b3:bc:55:c6:
f1:92:30:4d:bd:26:6e:84:a6:70:ec:0d:06:f4:04:c8:a5:33:
b8:3f:72:54:30:c9:57:f2:e3:bc:50:9a:67:c1:ce:7f:8a:67:
4b:c3:10:e1:59:d6:68:6f:eb:7c:cc:58:d9:4a:b3:d1:74:4f:
2b:e7:58:12:1a:fb:3b:82:45:ff:85:3c:72:4a:00:9a:9c:0c:
49:7e:cb:44:61:30:25:ef:ed:d7:7e:9e:18:29:7a:2b:1e:e9:
73:1a:9d:19:6d:b8:96:ff:7b:75:38:5d:c3:80:2d:48:f8:03:
59:05:eb:9d:d7:dd:15:08:f2:0c:c9:24:41:ab:0f:64:b2:bd:
53:7b:7f:5e:8d:3a:d1:f6:35:26:42:8b:33:8d:da:46:da:c7:
02:36:9d:ae:93:9b:9a:3e:11:b2:a7:39:f1:24:ed:ba:8a:71:
da:26:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:45 2023 by rpki-client on console-ams.rpki-client.org