Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/GFIixNcelyxktF-ySJyV61_oMLs.roa
File: GFIixNcelyxktF-ySJyV61_oMLs.roa (raw, json)
Hash identifier: ZwHi7ZGthmhG19EvsM0SshU6Kd9hvioT1w5dPfywkSw=
Subject key identifier: 18:52:22:C4:D7:1E:97:2C:64:B4:5F:B2:48:9C:95:EB:5F:E8:30:BB
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E170AB4
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/GFIixNcelyxktF-ySJyV61_oMLs.roa
Signing time: Sat 01 Jan 2022 03:02:51 +0000
ROA not before: Sat 01 Jan 2022 03:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8149
IP address blocks: 213.152.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236391092 (0xe170ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=185222c4d71e972c64b45fb2489c95eb5fe830bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:56:93:f7:87:fc:60:5a:26:d3:09:9d:2b:
39:b1:50:1a:17:a4:f9:9c:64:ec:b5:0c:ec:f6:ca:
db:47:c4:5a:df:40:7c:23:ff:24:0c:11:a5:ac:86:
a3:2f:de:22:32:10:de:3b:c8:59:ac:af:94:68:81:
9d:fe:4b:51:8b:c6:0d:86:f5:3b:6e:52:28:b8:c3:
8d:d6:b3:f5:69:e8:cf:58:b7:bf:d5:77:c5:55:98:
ce:cc:94:f8:bf:e6:e7:ac:f5:43:d6:a1:4e:9b:da:
1d:1e:07:87:f3:92:46:20:9f:65:af:6b:d0:44:14:
92:d5:27:4e:06:0b:c4:bb:67:fd:8c:0f:76:ef:13:
e2:ce:67:70:e9:4c:4f:c9:8d:2a:92:98:03:e9:1b:
c6:6a:06:2d:8f:c2:b3:f3:35:d0:9b:a0:d0:fc:fa:
b6:5a:f9:28:34:a7:8f:8d:3c:e0:18:a1:6d:38:a5:
d9:a2:34:da:47:c1:a2:e5:fb:fb:bd:10:d4:d8:2a:
e6:72:1b:fc:c1:81:cd:8d:06:a7:39:74:e3:f4:1c:
d6:39:95:f3:2b:dd:aa:3b:1f:3a:2e:9b:b3:e2:4e:
d4:99:a3:45:48:cd:ca:b1:a6:2c:f7:b8:37:6d:96:
31:75:0c:fd:46:5f:6e:3b:59:16:66:fa:60:c1:f7:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:22:C4:D7:1E:97:2C:64:B4:5F:B2:48:9C:95:EB:5F:E8:30:BB
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/GFIixNcelyxktF-ySJyV61_oMLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:32:eb:f0:02:cb:2b:a8:4a:3e:ac:89:f5:5e:39:15:28:e5:
b1:10:3d:3c:48:5b:c1:c8:e5:a2:5a:98:6c:34:a6:7f:3e:6b:
c1:22:83:4b:fe:c2:89:01:5b:6b:b5:c4:e4:f7:28:76:d9:34:
f7:9c:f4:47:b4:fd:07:6b:64:39:8c:84:b4:80:2f:59:1d:c5:
7d:b5:e3:aa:c1:2d:b8:19:f2:7e:04:e1:b4:df:e7:c8:18:5e:
cd:92:3e:96:f2:d4:8a:5d:cf:b3:5d:f1:ca:83:65:97:57:b3:
46:48:3d:ae:bc:b9:3a:51:03:69:44:b5:0d:9a:fe:c5:31:b5:
39:19:38:1a:c9:76:f4:51:fb:6c:e2:f5:b6:fa:bb:ad:33:de:
ab:b2:68:ea:93:48:62:57:d9:d4:d5:74:3d:05:97:c4:f8:d4:
b4:bb:0a:58:87:24:d1:c2:4a:69:ed:54:5f:5e:7a:b6:55:3a:
00:de:60:22:fa:18:4d:2f:c4:30:0b:c3:06:41:94:eb:11:46:
ee:66:17:de:90:09:66:6f:c3:4e:f0:42:45:a2:40:21:4d:c4:
1d:a1:5e:7e:05:90:62:bb:05:e4:4d:4b:b0:de:8c:cc:a0:66:
36:b6:cd:56:df:68:b3:23:fb:a3:fd:e8:86:5e:47:3b:23:fc:
7f:04:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-fra.rpki-client.org