Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/cIDK54GURwIr2vpvPq7dGntxnd4.roa
File: cIDK54GURwIr2vpvPq7dGntxnd4.roa (raw, json)
Hash identifier: QpNGeb30RxJRK96Ph5rauej6VXptkrv2XWSQFFY0gUU=
Subject key identifier: 70:80:CA:E7:81:94:47:02:2B:DA:FA:6F:3E:AE:DD:1A:7B:71:9D:DE
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 08070D2C
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/cIDK54GURwIr2vpvPq7dGntxnd4.roa
Signing time: Sat 01 Jan 2022 11:54:14 +0000
ROA not before: Sat 01 Jan 2022 11:54:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50256
IP address blocks: 213.252.240.0/24 maxlen: 24
213.252.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134679852 (0x8070d2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 1 11:54:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7080cae7819447022bdafa6f3eaedd1a7b719dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:55:61:a9:7f:0e:1f:91:9d:c4:cc:5b:a9:
95:ca:04:97:e3:b9:5a:36:7c:98:2d:84:05:99:ad:
60:a4:d1:89:c6:7e:56:9e:0b:69:27:01:62:76:db:
2f:c0:94:2a:c9:fe:d0:79:03:90:ad:72:56:24:96:
fc:e4:bb:c0:a6:49:4f:6c:56:93:14:69:41:b3:9d:
3a:01:70:cb:d2:8a:aa:7e:94:e6:00:ef:d8:f1:ac:
16:aa:f0:fa:88:6e:1e:13:20:c1:e9:02:61:2a:18:
0a:e5:77:c7:90:02:99:a4:29:72:e2:7b:b0:74:5c:
3a:57:22:d9:49:d6:a0:28:f2:5f:a2:23:cd:7a:f8:
d0:e8:36:5a:54:26:ca:94:26:2e:c7:dd:3b:4a:d2:
be:b4:1a:19:a3:b7:04:c1:44:2a:87:85:60:55:73:
99:dd:f8:a8:88:8e:4e:3b:37:3e:3d:5b:c0:76:d4:
47:6a:de:a3:74:d9:ac:4c:69:3f:66:25:ba:26:1e:
0e:4e:92:4a:a0:19:be:76:ce:74:33:c9:30:07:e2:
47:c7:07:41:c4:1b:21:d9:30:c7:e5:59:5e:fe:3b:
db:86:85:65:c5:e0:35:d6:3c:9e:d4:10:b8:35:f5:
9e:62:22:f9:07:b4:31:f5:06:d9:b3:16:ee:6f:db:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:80:CA:E7:81:94:47:02:2B:DA:FA:6F:3E:AE:DD:1A:7B:71:9D:DE
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/cIDK54GURwIr2vpvPq7dGntxnd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.240.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:d9:55:39:18:23:88:8b:be:fe:4b:69:d1:4e:32:68:12:ff:
05:e5:08:b2:ea:0b:1c:6a:db:41:93:29:50:09:a7:a8:ef:00:
86:0c:1d:6f:8b:b1:a1:2d:cd:48:15:de:42:33:6f:bb:aa:c9:
9b:70:7c:b6:2f:88:37:df:23:ae:2b:fd:35:53:dd:e6:7b:26:
f1:e7:f3:29:94:9e:54:a6:88:a0:91:eb:57:9a:62:0c:1c:84:
f2:6f:c7:cf:06:18:5e:7e:5c:a6:bd:32:de:23:f4:3c:2b:ef:
7a:80:33:ea:9e:4c:40:9b:61:9d:08:7a:a2:fe:27:a9:18:80:
51:92:dc:8f:a9:cd:77:9e:28:93:e5:60:23:33:f6:b0:32:46:
86:92:c4:a6:a5:e6:cf:e8:12:a4:34:77:de:1b:6c:44:79:78:
7c:9c:89:25:7e:3b:f2:b0:00:10:3d:cf:21:48:eb:82:5f:4b:
11:94:f9:68:12:4d:37:f4:5e:1a:6b:2b:66:a3:53:ee:91:27:
0c:2c:00:22:71:18:33:80:39:6f:f2:6e:e6:60:49:1a:ec:34:
fc:54:d6:4d:fe:66:a7:8d:64:e3:f0:e5:3d:4b:86:99:e9:f4:
6c:e5:4f:13:5a:7a:a3:7a:e9:11:a2:03:e8:05:31:0e:6c:99:
d4:65:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:07 2023 by rpki-client on console-ams.rpki-client.org