Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Bx6KfD1L15osPDMTArIBCjuXDZA.roa
File: Bx6KfD1L15osPDMTArIBCjuXDZA.roa (raw, json)
Hash identifier: 2h9wgIPXxgP12GEMQlZAtYNynywzFYeXonvDTfxKBE8=
Subject key identifier: 07:1E:8A:7C:3D:4B:D7:9A:2C:3C:33:13:02:B2:01:0A:3B:97:0D:90
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1ABE2B6B
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Bx6KfD1L15osPDMTArIBCjuXDZA.roa
Signing time: Sat 01 Jan 2022 16:03:13 +0000
ROA not before: Sat 01 Jan 2022 16:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203611
IP address blocks: 213.14.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448670571 (0x1abe2b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=071e8a7c3d4bd79a2c3c331302b2010a3b970d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:b4:d9:f3:b3:8b:f4:30:30:d0:46:12:6e:
90:f0:bb:a7:7d:53:7b:db:de:48:47:8d:f0:9e:85:
30:8f:7e:d0:cf:25:d6:3b:1a:80:80:08:64:f1:a7:
be:b5:ab:89:81:e1:61:da:4c:13:8b:2a:9e:56:00:
a3:df:ab:47:ec:49:e2:b2:b3:6a:f3:fa:57:e4:9e:
c7:11:ca:c8:52:2f:fb:77:f0:ed:fa:1e:f7:c7:4c:
0a:e6:f3:1e:86:84:81:9c:68:43:44:4e:18:64:af:
4a:e8:4c:a9:7b:28:53:0f:e9:aa:ae:12:0e:8d:a2:
9f:22:5a:20:ca:8f:14:ef:8f:23:d4:b0:d1:d8:29:
01:ff:1a:2b:1b:53:40:28:09:27:77:ed:d5:b8:24:
6d:56:3d:d3:c3:09:62:2f:a5:bf:b8:d5:08:51:1d:
b1:d9:68:7d:e4:33:7a:6c:53:39:59:f6:4f:cd:18:
18:d5:b7:85:0d:b0:58:7c:1c:4b:0a:bd:a4:83:46:
26:08:c8:6c:ba:06:e2:ee:06:f8:7e:b0:f9:2d:e4:
13:a1:d9:e0:88:72:ba:ea:9a:7b:d5:74:4f:6a:54:
10:bd:0b:d5:1e:39:ce:af:3c:18:7b:b3:ad:91:da:
a7:87:c1:9b:22:01:54:12:c0:92:8c:81:5d:45:0b:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:8A:7C:3D:4B:D7:9A:2C:3C:33:13:02:B2:01:0A:3B:97:0D:90
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Bx6KfD1L15osPDMTArIBCjuXDZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7e:50:86:b9:85:47:0f:43:8a:f6:dc:35:3b:00:d7:ee:48:
55:27:90:38:0f:35:2a:e5:fa:c3:e9:de:c2:2f:ab:2a:6a:a9:
02:49:b4:14:53:32:5a:a4:0d:31:66:b5:af:29:18:df:d8:f7:
f6:bc:ca:6d:b0:cb:c7:42:30:7c:3d:f9:99:8c:c7:eb:92:7c:
e4:29:c3:4b:39:b3:b0:3c:b6:71:b3:4a:cf:a6:c1:e4:5a:84:
fd:f0:a7:39:94:a8:ad:35:77:8f:91:88:0e:7b:8c:e3:e9:69:
e2:7f:89:22:65:4a:9a:9b:ab:04:2a:88:2e:cd:e9:22:b1:6e:
66:33:bb:bb:2b:76:c6:4c:8b:68:45:4f:6a:8e:5f:a9:75:fe:
cb:75:9e:84:65:07:ce:5f:64:38:e8:b7:81:eb:fc:51:85:be:
9d:d1:b9:b9:19:0d:66:1f:f7:66:bd:c8:dd:cf:46:d4:07:05:
16:27:c8:19:7d:b9:55:94:f0:26:d6:5f:c2:ed:32:e5:2e:91:
b4:4b:1f:1c:af:c3:9e:59:fa:2f:4b:49:bf:93:26:26:9d:a7:
e9:4d:a5:56:5f:c8:7c:71:ef:97:cd:a9:20:af:47:a1:1c:91:
88:6b:7d:ea:e0:e4:97:cf:6e:63:62:60:f3:7c:1d:5f:e4:ff:
61:13:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org