Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Vi6YwTIdaG-OQ969V0Qs2pChpx0.roa
File: Vi6YwTIdaG-OQ969V0Qs2pChpx0.roa (raw, json)
Hash identifier: ZCp5Cd9QYrkQboL+xNoLQHsgPiKFVk9Eo98USdjgy3Q=
Subject key identifier: 56:2E:98:C1:32:1D:68:6F:8E:43:DE:BD:57:44:2C:DA:90:A1:A7:1D
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1ABDBC4A
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Vi6YwTIdaG-OQ969V0Qs2pChpx0.roa
Signing time: Sat 01 Jan 2022 16:03:12 +0000
ROA not before: Sat 01 Jan 2022 16:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 213.74.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448642122 (0x1abdbc4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=562e98c1321d686f8e43debd57442cda90a1a71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:b9:b3:6e:d7:5a:4d:6f:18:88:76:e0:6a:
ff:f1:b5:84:b7:2c:d2:f0:8d:80:64:a7:ca:84:08:
01:95:b0:23:d5:4e:9a:d6:6e:06:35:d0:b3:a1:91:
c1:e5:ef:38:e1:fb:c6:24:48:68:5b:0d:7f:e1:ea:
47:bd:8c:0e:55:b5:1e:e7:93:91:ce:96:d3:d4:e9:
96:34:0b:55:8c:da:9a:96:28:df:c3:cc:d3:a4:fa:
f4:4f:f8:e0:d3:a5:78:0c:9c:b9:26:38:c3:09:c3:
0d:f8:ec:dc:12:ce:1d:d1:ac:f6:40:f5:65:85:21:
22:74:29:a0:50:9a:d6:45:a1:1d:91:ca:38:79:46:
d4:4c:a5:b4:b5:0a:92:f2:25:2f:ba:87:0f:b3:1e:
3a:f6:18:e8:38:06:c8:a7:58:67:d1:18:74:fd:f7:
aa:c4:c4:c1:90:43:65:f1:96:9f:27:9d:48:0e:b4:
f0:01:67:3a:20:99:7a:e7:8e:1c:d6:c5:d6:cf:b2:
11:f3:95:14:42:b1:87:10:9c:f8:93:9a:70:23:c2:
44:33:54:d9:c9:f1:c1:a2:f5:81:92:e0:bb:1d:3b:
59:cb:22:06:90:a6:64:19:8a:ec:9d:a9:e8:89:12:
5e:e8:be:b7:5d:60:ac:d0:9c:61:6f:e2:4d:c1:cf:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2E:98:C1:32:1D:68:6F:8E:43:DE:BD:57:44:2C:DA:90:A1:A7:1D
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Vi6YwTIdaG-OQ969V0Qs2pChpx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.74.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c8:01:1c:85:e1:57:8c:e8:f8:2d:ef:0c:46:71:4b:59:fb:
ee:3f:a1:a9:f6:4b:e7:1d:b6:ad:be:03:2f:3f:de:2b:3d:9f:
db:9b:8d:4f:a9:94:1b:10:8b:c5:49:d6:0a:65:14:e4:8a:d4:
45:16:15:36:41:14:f1:65:a1:69:cf:48:8e:63:91:1c:fb:73:
7e:18:83:4b:a9:a9:2b:5b:a1:17:34:c6:31:8d:bd:83:42:2c:
1e:69:21:4c:c4:7a:c6:f1:a9:ef:36:3d:a2:e1:c4:ca:b6:19:
d3:57:ab:57:bb:21:bd:dc:f0:18:fa:0f:b7:dc:18:ce:e7:c0:
40:6d:7c:99:08:65:63:87:24:77:b5:3c:22:6e:9e:9e:95:9e:
6b:52:91:4d:5e:0f:90:bf:6c:33:d2:75:b5:bc:88:53:19:27:
6e:2d:20:ea:e4:08:6b:aa:ba:85:57:11:e1:9e:64:f8:a4:1a:
41:a4:76:97:fe:b7:64:5d:82:f3:a5:ae:20:86:d9:dd:e2:89:
9c:7c:f3:fb:ec:41:1c:75:73:2d:10:fd:da:a3:bf:fe:07:80:
87:1c:a5:a3:2d:27:96:fe:7c:11:ea:1d:33:a5:6e:4f:5f:3f:
d2:7a:b4:00:e0:89:f4:e6:54:81:01:54:61:ba:00:0c:9e:61:
c7:2a:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org