Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/a748e2teHIS9pf4PoL7t0xVWxiE.roa
File: a748e2teHIS9pf4PoL7t0xVWxiE.roa (raw, json)
Hash identifier: UQngLk3T7NZFIppgfAej2BwUMp4nh5kXdmBLJehLPYo=
Subject key identifier: 6B:BE:3C:7B:6B:5E:1C:84:BD:A5:FE:0F:A0:BE:ED:D3:15:56:C6:21
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 098D3FED
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/a748e2teHIS9pf4PoL7t0xVWxiE.roa
Signing time: Sat 01 Jan 2022 05:59:44 +0000
ROA not before: Sat 01 Jan 2022 05:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35470
IP address blocks: 213.249.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160251885 (0x98d3fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 1 05:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bbe3c7b6b5e1c84bda5fe0fa0beedd31556c621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:c1:5f:60:55:7f:8f:1b:2f:fe:64:b7:bb:
c1:ba:ad:d8:33:81:42:d6:c7:b8:2e:b1:9e:cb:c5:
de:6a:ed:6c:e2:d1:73:7e:cc:51:59:54:0f:1e:bd:
38:48:4d:c4:ee:16:c1:f1:c8:71:92:45:a1:f4:93:
6f:de:f5:a3:2d:51:a0:f9:e6:3f:7c:1e:ef:c9:de:
97:08:8b:8b:26:f4:ff:29:44:53:1b:20:63:53:18:
f4:5f:43:6c:9a:b7:08:28:01:dd:ec:24:99:e7:af:
4e:f3:70:df:6e:41:61:9e:9a:cc:cc:63:17:2e:7f:
62:21:e2:97:82:77:ed:e8:59:8c:e0:be:2d:0d:60:
ae:2e:42:37:98:8b:ee:c7:25:7d:bf:d5:22:3f:ce:
de:7f:c8:55:55:9d:56:99:7f:cf:af:8c:c5:dd:ff:
8d:67:f6:5a:02:80:76:9d:78:28:11:f8:90:b1:d2:
d8:44:3a:0a:99:29:04:d2:b6:e4:6c:ca:f3:08:08:
ab:30:a7:69:fd:b2:ad:d7:5d:2d:e4:c4:ed:52:73:
1c:75:a8:ba:d8:3c:d6:3c:cf:c3:50:f3:1f:51:86:
48:f4:a2:1d:e5:a4:47:c3:15:3b:64:62:02:9b:de:
5c:b7:64:31:a5:6f:4b:42:67:19:e7:33:7b:02:cd:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BE:3C:7B:6B:5E:1C:84:BD:A5:FE:0F:A0:BE:ED:D3:15:56:C6:21
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/a748e2teHIS9pf4PoL7t0xVWxiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.249.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0c:ce:02:0f:82:99:79:a3:9d:59:de:a1:f7:8b:d7:c0:cb:
54:a6:07:35:10:b1:29:c1:24:ad:21:aa:c1:53:1d:5f:43:26:
e0:ad:6a:f7:d0:3c:cd:66:6b:a7:2b:61:37:96:e7:f1:97:4b:
73:28:5a:f7:5c:3a:9d:37:e7:33:53:cd:71:c0:47:f2:ed:17:
41:fc:44:02:c7:92:cc:6b:d1:6a:06:b1:be:85:f6:f3:c3:d5:
a5:f5:57:56:b6:b1:da:5b:de:8c:30:a5:e0:6e:e4:26:46:38:
48:8a:c9:32:77:8c:35:76:45:02:67:e6:c4:00:25:b2:be:0e:
77:26:dc:c0:eb:86:fb:42:c7:61:27:d0:0b:07:62:c0:ca:78:
ca:dc:86:ad:11:ec:8b:66:60:e5:01:f6:65:0c:0a:d4:fb:2e:
5b:d9:ff:e9:4a:95:15:38:99:df:2d:71:54:16:95:99:cf:c0:
27:63:25:df:0f:14:b0:9f:2f:c2:3b:90:b6:b5:27:08:2a:3a:
de:5d:a3:a3:8a:bf:ea:a2:ae:3e:dd:bf:95:0a:65:e9:16:60:
60:88:a7:5d:71:c3:39:0c:93:83:d1:6d:3c:e1:02:b6:e4:8b:
3e:51:7a:61:fe:88:c9:d1:35:5e:db:c2:cb:d3:a2:63:8c:6f:
fe:4a:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:56 2024 by rpki-client on console-fra.rpki-client.org