Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/xWbzP1aPnwryI58-0tun0l5Nf5c.roa
File: xWbzP1aPnwryI58-0tun0l5Nf5c.roa (raw, json)
Hash identifier: Rnfdh4weMwskhy8SvfJ8GQncbrQToQqRmGWyfZNBsv8=
Subject key identifier: C5:66:F3:3F:56:8F:9F:0A:F2:23:9F:3E:D2:DB:A7:D2:5E:4D:7F:97
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 023B13D4
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/xWbzP1aPnwryI58-0tun0l5Nf5c.roa
Signing time: Wed 16 Mar 2022 10:14:45 +0000
ROA not before: Wed 16 Mar 2022 10:14:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209984
IP address blocks: 213.226.85.0/24 maxlen: 24
213.226.84.0/22 maxlen: 22
213.226.84.0/24 maxlen: 24
213.226.84.0/23 maxlen: 23
213.226.87.0/24 maxlen: 24
213.226.86.0/23 maxlen: 23
213.226.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37426132 (0x23b13d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Mar 16 10:14:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c566f33f568f9f0af2239f3ed2dba7d25e4d7f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:2d:fc:0b:87:59:56:c4:02:e8:21:4c:2d:
82:99:68:2c:6b:3e:59:31:2a:08:01:1b:86:23:b2:
a1:7e:27:32:b5:8a:d3:e2:7b:d5:ad:17:9d:3a:43:
7c:6f:c2:4c:5a:b9:4f:07:79:5f:47:2b:d6:ac:de:
0c:86:ba:cf:75:37:e5:76:66:21:5f:1b:17:68:0e:
4b:89:72:26:7d:d3:54:87:8f:ea:b8:85:09:5f:e5:
3d:dd:10:df:91:76:22:82:e4:23:48:3b:ad:f1:7d:
f4:1c:fa:d2:b4:0e:e6:dd:34:1f:fc:ae:86:3b:5d:
34:08:83:2b:93:c3:8d:cb:05:fe:3c:ad:49:9a:f7:
45:2c:13:15:03:1f:51:24:9d:fb:3c:08:b8:59:35:
12:47:d4:cb:55:5e:ab:4b:f4:f7:19:44:4e:78:b8:
e5:c2:2a:25:a2:38:cb:fe:ed:4a:5f:cd:7b:1d:52:
4d:ad:aa:a3:ba:dd:e1:09:69:1c:2e:ad:24:19:a2:
fe:d6:39:06:48:81:88:2c:cb:5a:b5:ee:dc:a6:71:
c2:0a:cc:56:05:7a:15:47:89:91:35:41:57:e4:af:
25:bc:0f:f3:4e:df:50:4d:c2:c1:88:4b:73:98:cb:
9a:b2:bf:ae:9f:9c:51:8c:7f:60:36:ee:03:68:03:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:F3:3F:56:8F:9F:0A:F2:23:9F:3E:D2:DB:A7:D2:5E:4D:7F:97
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/xWbzP1aPnwryI58-0tun0l5Nf5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.84.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d7:a1:54:9c:0c:f2:31:16:4f:e7:16:24:ca:10:6f:36:9a:
12:9a:34:05:0d:db:c9:0c:f5:85:98:de:c1:f3:24:33:fb:62:
86:4b:b7:5e:13:3d:0c:13:9c:f9:07:c7:4b:21:93:fe:87:01:
f3:d1:2a:e9:36:72:4c:4b:02:8d:db:c1:84:b9:7f:4e:b1:32:
1e:71:1a:79:62:e6:de:51:18:5a:aa:10:78:8d:eb:31:01:42:
fe:0d:6d:91:bc:cc:0f:75:d0:74:0b:1c:04:64:e8:f9:94:04:
4f:19:23:d9:dc:dc:50:ca:57:9a:57:5d:29:17:2a:42:94:c5:
bf:92:3f:e8:a3:26:3d:a2:8d:e9:1c:cc:fb:71:ab:9b:8f:da:
02:58:fc:12:5c:bb:01:c7:9f:e1:db:65:c3:4b:cd:33:9e:e2:
f9:50:b9:f3:6b:b3:d8:f7:03:98:73:42:a9:c0:41:58:17:d6:
ad:b3:09:48:74:7d:08:ac:13:c8:7e:e8:41:41:04:c1:d4:4a:
16:9a:57:53:40:9b:17:b1:68:8e:81:84:fc:78:76:ec:8c:74:
c3:aa:ff:b2:b3:78:1e:5f:d1:b8:27:ac:95:ec:46:d2:12:07:
56:fe:a8:d9:4b:19:4c:b6:4d:ae:2c:d6:c0:3d:e6:ca:30:44:
12:a6:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:49 2023 by rpki-client on console-ams.rpki-client.org