Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/eTbrSMO1nJ5GJQfL9BeI64j8WDI.roa
File: eTbrSMO1nJ5GJQfL9BeI64j8WDI.roa (raw, json)
Hash identifier: QMUQ5LZJ5GcVq5wQnzrGV5OS92v8B9pXd7mV9b0Qgyw=
Subject key identifier: 79:36:EB:48:C3:B5:9C:9E:46:25:07:CB:F4:17:88:EB:88:FC:58:32
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 09035911
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/eTbrSMO1nJ5GJQfL9BeI64j8WDI.roa
Signing time: Sat 01 Jan 2022 02:52:34 +0000
ROA not before: Sat 01 Jan 2022 02:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210262
IP address blocks: 213.231.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151214353 (0x9035911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jan 1 02:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7936eb48c3b59c9e462507cbf41788eb88fc5832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:7e:d5:e6:da:9c:d5:4a:1a:e2:be:a4:56:
64:5f:7a:f3:f6:6b:e7:7d:50:4c:f2:3a:09:e8:6c:
32:51:89:76:f4:43:2a:e3:86:a0:15:70:3b:a9:77:
5a:d3:58:86:39:c9:ec:be:f9:9b:91:55:28:b6:c5:
40:d4:3a:ab:29:81:24:4b:c7:fe:e5:15:38:ea:46:
4c:03:ec:17:7b:11:81:18:ce:10:ad:4d:a6:e9:f4:
24:1f:6f:91:4b:b5:3d:9d:cc:c1:8e:c6:2b:dc:02:
57:f6:24:0c:d0:84:d8:1d:b4:12:d8:ab:9b:d5:7a:
6b:1b:64:ae:80:2e:9a:e1:65:67:18:71:b8:a2:68:
9f:1c:4d:0c:1f:c6:1a:d2:c1:f5:4b:92:ed:d2:c3:
53:d2:3f:f4:32:0d:d8:28:c5:00:33:ed:e5:93:0b:
d8:53:e2:bb:9b:86:3a:2c:b5:ee:d0:40:58:55:76:
04:83:36:d5:58:31:82:87:1d:5e:e9:05:b3:4a:fb:
62:e7:fd:09:1c:c1:45:ed:0b:2e:62:e6:15:ef:ec:
6f:bf:c5:80:a6:ac:51:96:2a:b8:8e:e0:48:03:a1:
0c:85:fd:9c:35:7f:ff:bf:ad:b7:4d:89:a1:3a:d5:
46:30:af:ba:b1:4d:31:a4:8a:54:dc:02:e1:06:1a:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:EB:48:C3:B5:9C:9E:46:25:07:CB:F4:17:88:EB:88:FC:58:32
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/eTbrSMO1nJ5GJQfL9BeI64j8WDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.231.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:71:39:62:03:70:03:45:4c:94:d5:dd:5f:be:1a:26:de:37:
04:83:4f:7b:b2:ce:7b:03:97:ad:2e:a4:a4:f7:1e:87:6a:a1:
d4:54:58:89:ec:10:85:bb:8b:16:9a:50:90:6c:f1:72:6d:61:
b4:d5:88:0a:c9:e5:fb:2a:c9:e3:bb:9e:46:a0:a4:bb:c0:be:
a1:68:54:69:70:62:c9:df:a4:75:bc:7c:00:a2:c2:71:84:75:
79:a1:e1:b5:cf:96:6c:ba:28:30:17:a8:4b:26:29:27:3a:82:
99:e3:ea:4f:ab:15:4e:14:e7:1d:ca:16:ca:5c:f5:7d:15:e2:
9c:9f:28:4f:af:c1:87:f3:ef:f5:e2:13:e7:00:c4:ce:8d:49:
1a:2c:cf:69:70:c3:2c:81:47:a7:0d:9c:2c:43:26:6b:98:9b:
1a:b5:b5:a2:b9:d5:5c:43:6e:d0:2b:e7:bc:aa:aa:85:d4:42:
c4:4d:e0:61:54:b8:f5:cd:88:74:b4:89:4c:9d:41:44:84:5e:
c7:10:88:7d:8b:cb:dd:f6:3f:3a:1a:ac:99:6a:fe:5b:10:6c:
83:7f:37:c5:cf:7a:e3:f2:03:7a:d9:f5:27:49:e3:fb:9d:a1:
25:52:92:d7:f2:5e:0e:92:e7:78:fb:60:b9:77:66:ab:1f:e2:
20:a8:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:46 2023 by rpki-client on console-ams.rpki-client.org