Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ievmqd5TS01rCGJuYUCdIZKBZkE.roa
File: Ievmqd5TS01rCGJuYUCdIZKBZkE.roa (raw, json)
Hash identifier: pGO/GwEP1HnK6BTsMtEEk5BZbSAwysjFUK7Y/Ne/gHE=
Subject key identifier: 21:EB:E6:A9:DE:53:4B:4D:6B:08:62:6E:61:40:9D:21:92:81:66:41
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1ABE1FAA
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ievmqd5TS01rCGJuYUCdIZKBZkE.roa
Signing time: Sat 01 Jan 2022 16:03:12 +0000
ROA not before: Sat 01 Jan 2022 16:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203445
IP address blocks: 213.14.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448667562 (0x1abe1faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21ebe6a9de534b4d6b08626e61409d2192816641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:fc:5f:db:3c:15:0b:36:7a:2e:e2:44:bb:
52:76:5a:31:00:61:dc:27:e9:1b:51:66:db:83:43:
4e:41:0e:77:af:33:13:68:58:52:d8:92:55:06:53:
5b:34:6f:23:21:b2:cd:17:9c:24:55:b3:82:7f:2d:
53:85:14:6b:69:01:96:b5:a6:86:0d:97:f7:80:38:
ce:ca:6e:92:f5:72:f1:b1:b6:bd:e6:5c:eb:5c:1f:
ff:90:97:f4:c0:e0:03:1d:f4:1e:de:db:51:c0:35:
94:9d:b7:cd:f0:13:14:46:51:fd:26:cb:ca:02:c2:
ce:8d:42:d9:e3:d7:76:1a:b2:0f:3f:42:ab:b6:b4:
05:d7:e1:35:cf:fa:5c:7a:8f:97:b4:3b:76:89:8a:
eb:22:57:9b:3f:e8:8f:02:3c:84:36:03:42:b9:44:
ab:1c:ec:cc:d9:c2:23:69:09:0b:b9:f1:21:45:32:
22:b9:31:bd:50:98:27:c5:d0:58:1d:41:df:24:52:
c9:7f:80:8c:93:74:ff:a7:b6:15:e9:c3:43:1c:d1:
b3:ca:31:e6:07:3e:27:b3:66:8b:10:ae:f6:3f:b2:
68:4f:ee:84:8d:d4:35:95:d3:1b:04:1e:f7:70:9c:
9c:08:91:0d:8b:21:2f:fc:0c:07:1c:8e:64:9d:5f:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:E6:A9:DE:53:4B:4D:6B:08:62:6E:61:40:9D:21:92:81:66:41
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Ievmqd5TS01rCGJuYUCdIZKBZkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.248.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ea:7d:c7:c0:94:e3:17:43:ea:30:45:b0:78:73:3a:e3:e7:
47:c9:4f:e3:4d:95:bb:49:09:f5:71:fb:5c:35:b0:6f:2c:23:
82:cd:81:7e:f0:34:db:9f:7a:dd:9f:9b:2c:45:ff:b6:80:14:
b9:96:7a:71:c3:53:1a:15:30:d2:b8:09:de:f0:48:13:ee:a8:
a6:a1:a9:d7:ee:58:23:e9:e8:8f:9a:dc:11:de:c5:1b:7c:5e:
93:cb:a5:9f:15:0b:45:b0:97:2f:17:f8:8a:1c:f1:d5:ab:1b:
3a:47:31:a2:16:3c:d0:c5:24:d7:8f:ec:58:80:13:5d:29:6f:
cb:31:9c:f3:af:e7:00:01:5c:fe:7e:95:28:8b:d7:f6:99:27:
66:06:b4:f6:a8:a3:47:16:53:37:f4:66:4b:42:ec:9e:14:93:
a4:b3:3b:40:f4:5c:f6:27:64:2d:4e:38:ca:c8:69:64:25:57:
99:c3:4d:82:29:23:b4:86:56:96:50:85:08:16:e0:75:d9:1b:
90:7f:4a:eb:62:bb:51:e6:27:9f:50:d9:89:82:9b:68:33:47:
89:cd:a4:a8:96:f6:bf:9e:d2:03:4c:2d:d9:2b:5d:58:f0:62:
89:a0:96:ba:ad:84:70:9a:18:cb:99:94:af:f6:74:c0:c8:67:
68:f8:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org