Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/1-8csBMsHmJTJpVp9RYdN5xvjFok.roa
File: 1-8csBMsHmJTJpVp9RYdN5xvjFok.roa (raw, json)
Hash identifier: k6z6Tx0AeBC/qtPAiklmrl/m9ELRXnUO+uFZK5FUKL0=
Subject key identifier: FB:C7:2C:04:CB:07:98:94:C9:A5:5A:7D:45:87:4D:E7:1B:E3:16:89
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 0A8F5BEA
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/1-8csBMsHmJTJpVp9RYdN5xvjFok.roa
Signing time: Sat 01 Jan 2022 13:02:41 +0000
ROA not before: Sat 01 Jan 2022 13:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60027
IP address blocks: 213.243.48.0/24 maxlen: 24
213.243.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177167338 (0xa8f5bea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jan 1 13:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbc72c04cb079894c9a55a7d45874de71be31689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:73:e5:2d:89:99:50:ce:57:23:93:2f:00:
e7:fe:4a:82:3e:8c:f5:7d:8e:65:77:b7:17:47:17:
f4:9f:4c:00:9f:3a:7f:93:5d:6d:dd:d1:4f:a4:4f:
2b:58:32:cc:fe:fe:b6:34:b6:ef:1b:ba:fd:7a:e6:
1e:57:10:1a:3b:75:34:59:ee:4b:37:3a:f6:a9:32:
a9:eb:39:59:d2:79:ed:83:cc:d9:85:b5:19:a8:ea:
b3:43:66:40:f8:36:2b:16:d7:00:57:76:c1:ac:15:
0b:8d:9d:3c:ca:4b:22:8f:c0:fe:36:64:2a:b0:43:
2a:a1:7e:4c:bb:c2:39:19:28:00:35:2d:f8:e1:e8:
1e:2c:1d:46:b8:08:81:4c:70:0d:15:b1:73:43:4e:
40:6c:47:07:3f:81:b5:fd:16:8a:9b:c6:a8:07:2a:
15:48:55:77:d0:be:3b:68:c3:e2:42:09:f7:d9:e8:
92:c5:6e:7b:ee:1d:84:7e:64:89:b2:46:3b:64:eb:
f3:b6:c3:67:88:03:e7:07:fb:e8:6a:b4:78:bb:82:
7a:e2:28:9e:00:18:67:be:e0:1b:b3:d7:c8:b1:0c:
92:7a:bf:dc:a6:a0:52:bf:fe:e7:ac:e9:8d:3f:bf:
ad:20:6b:1e:c2:b7:bc:94:09:d2:94:0a:ac:e9:57:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:2C:04:CB:07:98:94:C9:A5:5A:7D:45:87:4D:E7:1B:E3:16:89
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/1-8csBMsHmJTJpVp9RYdN5xvjFok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.243.48.0/24
213.243.61.0/24
Signature Algorithm: sha256WithRSAEncryption
98:36:de:af:e0:04:a9:53:87:67:b8:8b:fc:a0:dd:26:89:d4:
c6:48:83:b7:8a:86:3b:e9:51:47:62:f4:74:07:07:e6:98:d0:
69:eb:43:d1:f0:df:30:77:6a:ac:67:68:53:7b:78:c6:8c:6f:
4e:d9:78:40:0e:5a:6e:af:9d:cb:f4:1d:62:06:aa:02:ed:21:
f3:05:91:70:eb:1c:19:36:f1:d1:6e:10:bf:3a:51:56:e1:82:
19:e3:64:8a:b5:f5:44:e3:28:5e:64:2f:f1:da:ac:d0:a1:bc:
43:44:63:c9:ed:4e:7e:b9:76:82:61:1c:4b:5e:67:31:e6:5c:
ff:08:31:88:82:9f:f7:ed:a9:6c:2e:24:37:f4:8b:92:59:98:
99:ba:ed:36:fa:8b:b5:dd:96:eb:ee:58:07:cc:2b:6f:68:86:
a6:8d:bd:ef:da:6f:1d:a6:62:c3:10:0e:d0:61:79:ae:0a:28:
17:50:fa:01:25:4d:14:30:8b:50:5d:93:d9:e9:d6:72:c2:0f:
a3:ec:e1:a4:71:47:d9:53:15:67:d0:f9:30:a4:55:2d:66:93:
cd:fe:15:38:4e:63:8a:6c:fa:2b:69:9c:01:2a:bb:4b:0b:ff:
6a:80:7a:63:90:b4:17:b0:f4:2f:23:81:08:40:3a:92:7b:5d:
2b:14:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:27 2023 by rpki-client on console-fra.rpki-client.org