Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tBFkGnhg2fXqHOISHUSXyQZEQOw.roa
File: tBFkGnhg2fXqHOISHUSXyQZEQOw.roa (raw, json)
Hash identifier: QpvmMcDCI0U1zn5jhfVwwPCcbf5h/uwrZ2mnZzaGNqo=
Subject key identifier: B4:11:64:1A:78:60:D9:F5:EA:1C:E2:12:1D:44:97:C9:06:44:40:EC
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1ABFA136
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tBFkGnhg2fXqHOISHUSXyQZEQOw.roa
Signing time: Sat 01 Jan 2022 16:03:13 +0000
ROA not before: Sat 01 Jan 2022 16:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203925
IP address blocks: 213.14.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448766262 (0x1abfa136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b411641a7860d9f5ea1ce2121d4497c9064440ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:91:98:66:6e:35:21:2e:dd:28:24:01:e0:
e4:0b:70:ce:a6:9d:94:ad:f2:e6:4c:eb:b2:2e:fa:
2a:9f:5a:01:b1:9e:6c:e7:e1:64:26:8c:9f:1d:03:
f3:57:c5:14:18:7d:ac:60:16:de:30:a7:a3:0f:a3:
90:0e:c5:79:6a:7f:02:83:43:72:2d:cb:ba:97:36:
d2:2f:76:37:c8:0a:47:c7:4a:15:e6:63:c5:35:cb:
6f:cd:3a:ec:82:3d:01:7f:6b:bf:1f:a5:df:46:c9:
ff:ba:9f:b1:cc:3d:3d:c8:8d:c2:50:70:83:a7:63:
d6:4a:21:37:c9:0d:60:bd:2f:e9:ad:3e:d5:ac:82:
f3:47:df:3b:f0:9e:a9:c0:60:f7:a0:33:f3:d4:35:
d6:08:15:47:49:3b:e6:d0:60:a9:7f:96:cc:dd:bc:
37:c4:1a:35:4c:0e:04:43:10:63:36:80:75:95:73:
d4:e1:f6:38:b0:1d:8d:0d:2f:1e:14:5e:16:ff:ab:
1e:5d:86:19:94:97:f9:88:07:8f:da:d0:98:9e:e1:
c3:85:e0:3a:05:8e:00:b7:6a:73:91:bb:6e:eb:4f:
3d:7f:8d:4f:a3:a9:8e:a7:ee:4c:4d:65:c8:4b:51:
51:d0:c3:99:cb:5a:6c:a1:54:82:7c:2e:72:41:68:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:64:1A:78:60:D9:F5:EA:1C:E2:12:1D:44:97:C9:06:44:40:EC
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tBFkGnhg2fXqHOISHUSXyQZEQOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c4:5e:0e:2c:f2:31:76:ac:f2:81:ca:b4:70:12:15:65:1a:
51:5f:e0:3f:dc:fd:bf:fe:36:50:c0:65:14:8f:2b:e0:1f:4f:
8d:79:bb:c6:4b:f7:0f:bb:94:da:07:af:1e:2f:f9:d0:15:e9:
c1:f9:69:16:e8:2b:bb:ef:43:63:9c:5f:b9:88:f6:fa:47:20:
b5:b9:01:1e:88:81:b0:09:31:81:22:4e:6c:17:35:d2:df:9b:
e8:76:9a:c7:02:e7:75:3e:49:16:bd:32:ea:e6:81:a6:1f:cb:
4c:5c:95:a2:47:53:d8:70:75:6e:e0:e1:a7:3b:95:6f:6b:e9:
5b:4b:f1:3c:41:e8:da:f9:fc:e3:b0:11:38:5c:41:a3:9b:dc:
66:55:0e:44:d0:b2:67:42:34:d1:a8:22:0f:70:07:14:1d:38:
1a:3e:30:26:8f:c9:73:e3:27:2e:16:73:de:b1:2a:e3:90:7b:
e4:21:8e:33:65:90:e3:c3:3f:2b:b3:53:9c:42:11:d2:33:32:
ae:f5:ed:59:8f:90:d6:b9:59:6f:42:90:d0:69:df:7d:af:83:
86:40:e3:12:28:47:38:34:2a:7f:e0:53:b6:20:e3:4f:0e:50:
d0:e6:d9:cd:a7:f1:c5:14:1f:f4:1f:4e:0c:00:80:37:fe:9f:
16:34:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org