Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/0dcwTAuaZ_rSQ04RVsXt_9yGFBg.roa
File: 0dcwTAuaZ_rSQ04RVsXt_9yGFBg.roa (raw, json)
Hash identifier: dx3fFk9TuG4FWDriOmeefiv8qMRxeNkxaGXI3GmbhHI=
Subject key identifier: D1:D7:30:4C:0B:9A:67:FA:D2:43:4E:11:56:C5:ED:FF:DC:86:14:18
Certificate issuer: /CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Certificate serial: E99CA4
Authority key identifier: 0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/0dcwTAuaZ_rSQ04RVsXt_9yGFBg.roa
Signing time: Sat 01 Jan 2022 04:55:05 +0000
ROA not before: Sat 01 Jan 2022 04:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 213.232.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15309988 (0xe99ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Validity
Not Before: Jan 1 04:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1d7304c0b9a67fad2434e1156c5edffdc861418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:d0:43:98:78:4b:1f:4f:b3:3d:fa:f9:9f:
69:bc:f0:7a:a7:f5:f0:ba:d0:41:bd:0a:2a:77:3f:
61:5d:24:d0:d3:68:66:46:24:4e:b1:36:d2:d4:ba:
6d:62:91:5b:ca:f3:98:8c:cb:68:9b:7a:31:f4:4f:
c5:e6:05:70:a6:8f:ae:b8:e4:1d:58:4e:3f:c2:cf:
b6:0f:49:0c:68:76:04:c3:2c:c6:1b:75:db:23:93:
20:db:8b:41:ab:ce:65:6a:c9:98:4a:83:ff:de:4a:
fd:a6:c7:64:9c:9e:f1:97:15:53:27:e3:55:d9:29:
a5:46:61:c9:6a:91:90:e4:bf:13:50:39:40:f8:8f:
2d:d1:ff:ed:59:7c:8f:bd:a5:1b:a2:c8:a8:3b:6a:
c1:94:6d:b8:3b:7c:24:ef:70:28:17:fe:b9:14:95:
99:b4:39:fc:2c:14:b8:5e:1f:8d:e7:61:3e:6d:91:
ec:f4:f0:97:fe:5d:77:41:c3:d5:3d:4f:c2:00:c6:
d4:ef:e9:45:6e:26:71:80:91:1a:d4:a3:1a:57:15:
2f:64:29:5a:e0:90:55:b5:8a:41:77:b0:01:77:22:
62:7d:de:47:c8:e7:fe:24:4b:b0:8e:72:29:f2:4a:
a8:95:95:de:3a:af:df:6c:0c:5d:12:f1:5e:0b:6f:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D7:30:4C:0B:9A:67:FA:D2:43:4E:11:56:C5:ED:FF:DC:86:14:18
X509v3 Authority Key Identifier:
keyid:0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/0dcwTAuaZ_rSQ04RVsXt_9yGFBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4d:68:49:7c:ba:9c:62:c8:b1:ae:18:3c:61:e6:00:18:9d:
3e:2b:2b:64:9b:82:77:4b:38:63:12:52:38:14:26:9c:64:b6:
30:2d:5d:e2:be:e6:bc:a9:29:dd:28:a4:9e:b3:02:4f:e7:bb:
fd:92:25:30:ab:96:10:59:13:49:15:58:5b:bd:c5:1d:70:06:
3c:83:34:68:1a:b7:6f:a5:7a:6c:e5:20:bb:0f:47:4d:0a:39:
7d:f9:7c:42:da:27:1e:e7:17:bc:c8:b6:f9:76:3f:a8:30:51:
31:f1:f3:a5:1b:c1:37:77:2a:ee:3d:fc:40:f6:c6:5b:b2:54:
5c:8c:54:e4:7f:28:ce:c7:f3:e6:83:89:bc:53:ac:c3:99:47:
c7:ec:9c:49:24:67:03:71:9a:08:2b:ff:f8:d2:5a:aa:50:b7:
b7:e8:08:a4:a9:bb:93:78:68:ad:48:0c:4f:c9:25:e7:d1:5c:
1d:ac:71:fa:62:23:d3:35:21:cd:79:7b:bd:21:19:1f:1d:f6:
dd:bd:a9:e9:14:b6:12:df:94:ac:9d:5b:61:0a:ff:9b:65:6a:
35:c6:00:e9:2c:97:50:68:cf:c2:f0:d8:18:8c:9d:d9:1b:d9:
70:ef:4b:df:8d:c0:e3:20:ac:f1:10:95:f7:1d:fb:ee:17:03:
ce:75:ab:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:31 2023 by rpki-client on console-fra.rpki-client.org