Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b156fc-6d1f-4212-9782-66731152a098/1/HoW8u8dJSJ3ObtUbkYFSKGITSLw.roa
File: HoW8u8dJSJ3ObtUbkYFSKGITSLw.roa (raw, json)
Hash identifier: voEPgSUiREdBtlgglkNB3BWoiwD/W9BXu3WaQkNQGms=
Subject key identifier: 1E:85:BC:BB:C7:49:48:9D:CE:6E:D5:1B:91:81:52:28:62:13:48:BC
Certificate issuer: /CN=14cb5f446e42eb1733804f11e52b2ac7da4dbe14
Certificate serial: C65711
Authority key identifier: 14:CB:5F:44:6E:42:EB:17:33:80:4F:11:E5:2B:2A:C7:DA:4D:BE:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMtfRG5C6xczgE8R5Ssqx9pNvhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b156fc-6d1f-4212-9782-66731152a098/1/HoW8u8dJSJ3ObtUbkYFSKGITSLw.roa
Signing time: Sat 01 Jan 2022 10:03:58 +0000
ROA not before: Sat 01 Jan 2022 10:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 213.109.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12998417 (0xc65711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14cb5f446e42eb1733804f11e52b2ac7da4dbe14
Validity
Not Before: Jan 1 10:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e85bcbbc749489dce6ed51b91815228621348bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:55:96:65:73:1a:d7:3e:3a:62:d2:8b:6b:
98:73:16:65:14:f3:bc:ca:d0:e5:8f:8f:06:c4:e8:
c4:11:8e:cc:c0:32:17:07:a7:f0:7e:c7:6f:49:d7:
31:85:75:0e:e2:9b:e4:53:57:ce:dd:e0:8d:4c:8c:
25:32:fb:db:8d:df:a6:2d:0d:66:1d:de:79:b8:df:
f4:98:9a:7b:44:01:d1:73:10:eb:12:c1:7a:16:46:
58:d3:a8:ac:88:87:24:9f:f4:5b:ed:3d:9a:1c:b1:
b0:0a:d3:c4:f2:36:20:3a:61:cd:48:b8:a8:e2:c2:
fc:13:3f:fc:b0:59:bb:b7:2c:db:79:3d:23:59:91:
b3:6d:23:e5:31:ba:68:fa:b3:8a:fd:1e:37:3b:0a:
06:31:7b:c3:ab:ea:57:78:40:92:bc:7f:66:bc:44:
80:cb:31:d7:d0:4c:ba:6b:7c:5c:4e:b3:28:41:81:
1b:88:84:8e:57:c4:0a:14:1c:fc:be:ce:ee:be:34:
fe:42:41:fd:2e:05:0a:85:e1:36:74:b3:84:7a:2b:
b8:85:dd:d8:51:30:46:66:18:60:7e:c6:3c:49:80:
85:fb:4e:48:03:b3:f7:4f:ac:e6:0d:d1:13:75:13:
d4:a3:ad:48:a7:9e:3b:9b:ad:8e:9d:d0:6a:9a:7b:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:BC:BB:C7:49:48:9D:CE:6E:D5:1B:91:81:52:28:62:13:48:BC
X509v3 Authority Key Identifier:
keyid:14:CB:5F:44:6E:42:EB:17:33:80:4F:11:E5:2B:2A:C7:DA:4D:BE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMtfRG5C6xczgE8R5Ssqx9pNvhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b156fc-6d1f-4212-9782-66731152a098/1/HoW8u8dJSJ3ObtUbkYFSKGITSLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b156fc-6d1f-4212-9782-66731152a098/1/FMtfRG5C6xczgE8R5Ssqx9pNvhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.147.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1d:35:90:a4:f9:05:41:e4:b4:2f:59:87:1b:df:b7:8e:f4:
de:f3:a3:4c:80:f9:99:0f:00:c7:20:5c:d6:89:28:10:e1:ed:
f6:c5:bc:1b:5a:6a:bf:9c:07:76:c2:eb:b5:1c:9a:5f:ed:23:
62:16:02:3b:23:ca:fd:9b:ad:2e:32:26:e6:17:d4:2e:db:fe:
eb:69:1c:98:c8:ed:84:70:d1:cf:6b:e9:3b:e3:6a:fe:2d:82:
23:bf:66:2c:22:e6:9d:45:b5:72:66:2a:d5:40:34:4e:2b:43:
4d:a1:69:82:6a:78:9b:a1:46:35:e3:54:5c:42:7c:44:6c:4b:
75:a2:ff:d6:65:63:ce:1e:71:b8:1c:03:c7:e4:ae:68:b6:3e:
9c:d7:00:74:35:32:06:96:e5:cb:85:01:1f:43:2d:0c:56:d5:
19:98:c6:8d:34:fd:52:56:73:4f:70:64:55:50:b4:38:3b:de:
5a:2b:1c:76:5d:a9:7b:31:cf:5c:d2:64:b5:45:51:90:21:cf:
f8:35:43:1d:21:eb:6f:6b:84:35:46:8c:a1:3a:29:51:09:de:
5b:9b:47:fe:88:67:8e:ff:56:35:c1:65:46:84:f8:e5:79:ff:
2a:b5:4a:c2:e1:a7:8f:8e:8d:12:01:2f:65:97:03:79:24:50:
ad:91:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:22 2023 by rpki-client on console-fra.rpki-client.org