Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Bn7BBnUq4rvYKS1irHSVhXWNNwo.roa
File: Bn7BBnUq4rvYKS1irHSVhXWNNwo.roa (raw, json)
Hash identifier: zIHFEfWMjomxZGzWb9PBhS5aa3Wjqj5UADehmIY88SA=
Subject key identifier: 06:7E:C1:06:75:2A:E2:BB:D8:29:2D:62:AC:74:95:85:75:8D:37:0A
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0676700F
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Bn7BBnUq4rvYKS1irHSVhXWNNwo.roa
Signing time: Wed 15 Jun 2022 20:08:47 +0000
ROA not before: Wed 15 Jun 2022 20:08:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46841
IP address blocks: 213.170.222.0/24 maxlen: 24
213.170.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108425231 (0x676700f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 15 20:08:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=067ec106752ae2bbd8292d62ac749585758d370a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:e0:b6:44:62:4b:6c:87:4d:0d:4b:3e:9a:
e0:39:7a:5e:9d:01:8c:e2:cc:b1:70:7d:53:f9:df:
f4:93:99:40:74:ca:29:f1:a5:48:db:c1:74:e8:a4:
92:3f:8e:4e:89:61:f2:b0:f9:fa:d9:ec:da:06:2c:
c6:aa:0c:80:09:fb:9b:08:b4:b6:52:18:49:b2:bd:
47:e4:b6:1c:09:a6:57:c0:33:59:cd:5f:77:df:20:
ee:6c:2f:12:62:04:6e:54:91:f9:f6:e7:a3:61:b6:
06:40:c4:b6:5e:19:ee:63:4c:2a:bc:d3:e6:4f:3c:
ee:38:f2:55:ca:73:28:e8:6a:05:a8:ea:dc:00:6d:
b4:df:8b:90:f0:0a:32:32:e4:45:f1:f6:d7:89:75:
02:6a:ab:de:f3:4c:7b:48:bf:08:fd:73:79:60:ff:
bd:40:27:6e:74:ac:71:cc:46:03:24:0d:67:be:db:
b5:e4:85:e1:fa:dc:b6:8f:20:f6:6f:81:1d:a8:70:
6f:3e:90:f9:18:1f:81:3d:fb:6a:0e:8e:17:c7:6f:
85:88:48:10:09:ab:35:a6:e7:d9:3f:b6:4e:79:35:
34:11:c1:f8:49:8b:54:36:b1:34:0b:2c:04:0d:ab:
b3:a5:93:a9:a4:bf:04:ee:92:99:d4:0d:0f:73:e3:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7E:C1:06:75:2A:E2:BB:D8:29:2D:62:AC:74:95:85:75:8D:37:0A
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Bn7BBnUq4rvYKS1irHSVhXWNNwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.221.0-213.170.222.255
Signature Algorithm: sha256WithRSAEncryption
4f:c0:e2:55:13:79:e7:63:5d:2d:02:1e:24:7d:32:7b:54:01:
8a:ae:ed:3e:1a:fc:87:52:18:ac:2c:01:2e:40:71:9a:98:5f:
0a:d9:7c:39:40:c3:7e:ed:54:f6:1c:a0:15:68:65:f7:85:05:
cf:d2:85:6d:ec:cf:a1:c3:2b:9c:16:4c:a0:d5:9e:48:75:49:
0c:38:8b:88:52:49:40:1c:d0:42:09:fc:9f:6c:2b:1a:15:6e:
5e:10:e8:fb:95:30:0f:9c:22:8b:21:10:d3:40:b9:3f:56:4c:
f4:65:33:32:68:a5:bf:7b:43:33:23:b9:02:bc:ce:c6:4f:28:
25:a6:d6:41:0a:0c:a7:dc:c5:79:93:bc:6b:be:1f:60:96:79:
05:4d:96:89:ca:e0:d2:91:a0:b9:67:d6:10:c3:81:ab:27:4f:
dd:ff:6d:5e:ec:db:7a:d0:51:7e:e3:7b:5b:15:76:62:72:1a:
21:27:56:48:88:cb:59:fa:a7:4d:dc:14:5b:dc:6f:aa:db:4c:
6b:0c:c4:64:de:20:b6:3e:7d:e9:4c:ff:d7:b1:19:40:ad:18:
d8:88:57:b4:72:54:67:1a:91:be:55:04:54:c7:7b:79:ed:1a:
5e:55:ec:4a:6a:ad:5b:1b:ea:cb:50:5b:b8:eb:4c:03:9f:70:
5f:6e:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org