Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/T-dk8ewV7GGiVFxjzOMVCcaWsRU.roa
File: T-dk8ewV7GGiVFxjzOMVCcaWsRU.roa (raw, json)
Hash identifier: ZYpiuWIsb3yta1WFzrUTcNHU89+mjUdAP3n90aygXyo=
Subject key identifier: 4F:E7:64:F1:EC:15:EC:61:A2:54:5C:63:CC:E3:15:09:C6:96:B1:15
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1AB88E50
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/T-dk8ewV7GGiVFxjzOMVCcaWsRU.roa
Signing time: Sat 01 Jan 2022 16:03:08 +0000
ROA not before: Sat 01 Jan 2022 16:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55002
IP address blocks: 213.14.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448302672 (0x1ab88e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fe764f1ec15ec61a2545c63cce31509c696b115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:0b:cf:25:eb:b8:51:af:0a:dd:06:b8:b4:
42:8d:63:27:e3:ca:b8:7c:16:8d:d6:73:88:35:3a:
09:2e:d1:59:b8:67:b4:76:0c:e3:b7:75:20:6f:ac:
27:6b:98:f8:f5:73:9a:c6:94:29:b8:fa:cc:84:80:
75:bd:87:dd:54:b7:bf:fc:50:d8:89:50:1a:41:da:
30:a6:38:85:5a:8a:f6:1d:f8:63:5c:fb:5e:9d:1f:
d6:8d:27:d9:b4:72:a7:31:2a:10:e9:a6:c2:3b:f5:
3a:1c:cd:98:86:50:50:f2:03:66:ea:f5:13:c3:f2:
d7:c1:be:8c:12:22:ac:3f:d7:d8:76:0f:62:80:f4:
af:1b:a6:ab:84:b5:43:fc:55:a6:c5:f2:b6:88:6c:
79:df:28:bb:ed:36:53:33:05:44:75:d1:c1:c9:9e:
0d:07:14:4c:83:43:5a:44:23:7d:22:fd:10:5c:4c:
69:6b:b0:66:15:02:08:f0:bc:ab:1c:56:45:09:99:
47:a7:6f:fb:08:4f:df:fd:11:a0:7f:66:f8:0c:53:
45:e0:86:d5:6c:91:77:c2:56:f6:32:9e:41:fc:db:
9a:82:a5:50:0e:b9:c8:16:06:e0:1a:e2:20:c6:ff:
0e:fd:89:b2:7c:bd:c6:7d:52:43:62:0a:b9:01:1a:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E7:64:F1:EC:15:EC:61:A2:54:5C:63:CC:E3:15:09:C6:96:B1:15
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/T-dk8ewV7GGiVFxjzOMVCcaWsRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:74:1a:16:5d:48:de:cf:1b:b9:96:89:76:b6:99:c9:34:3a:
55:0b:74:3a:e5:4f:f7:39:46:71:43:7c:65:51:d6:d5:fa:f7:
a8:f3:d9:45:20:d8:4c:d4:ea:a0:1b:1f:b5:91:47:d6:a4:27:
ea:74:70:f3:54:39:57:f9:ac:5b:03:b8:80:fe:b9:d3:49:75:
5b:04:91:5c:65:3f:d1:45:80:a2:94:cf:78:fe:c1:e8:72:b7:
af:d5:ec:1a:36:0d:fe:40:8d:e4:81:7a:27:d0:2c:36:86:82:
a9:3b:a8:fa:f1:cb:f5:fa:59:8a:90:3b:45:4f:37:42:66:c2:
72:58:25:e1:a3:21:74:bb:a8:7e:f1:34:11:b4:34:91:3f:07:
02:b2:41:47:db:ed:b3:3a:a1:be:8c:8c:e8:c0:64:59:d0:e5:
60:1b:bd:0c:48:77:a0:c6:6d:7d:ca:9a:e4:d3:79:16:a0:c3:
dc:04:5e:70:a1:43:5b:de:f2:ac:0b:79:88:f3:a1:67:b1:35:
26:0b:c7:d5:93:1f:8c:bb:d0:e3:59:18:16:1f:e7:eb:97:47:
d8:2d:0a:21:98:ea:94:e1:c9:86:76:ce:eb:a8:24:24:0b:56:
ee:52:e4:6b:04:1b:30:fc:21:f3:4a:37:3a:b4:5b:24:74:54:
05:60:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org