Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/OrOaOxR-c65oS_rTVD7Ji6ZjPRQ.roa
File: OrOaOxR-c65oS_rTVD7Ji6ZjPRQ.roa (raw, json)
Hash identifier: TENyBEv9oLvuxr8/bsanA14wHBi4629a1mhZjNyeryU=
Subject key identifier: 3A:B3:9A:3B:14:7E:73:AE:68:4B:FA:D3:54:3E:C9:8B:A6:63:3D:14
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 056259E1
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/OrOaOxR-c65oS_rTVD7Ji6ZjPRQ.roa
Signing time: Sat 01 Jan 2022 06:53:05 +0000
ROA not before: Sat 01 Jan 2022 06:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28785
IP address blocks: 213.222.192.0/21 maxlen: 21
213.222.192.0/22 maxlen: 22
213.222.196.0/24 maxlen: 24
213.222.196.0/23 maxlen: 23
213.222.201.0/24 maxlen: 24
213.222.204.0/24 maxlen: 24
213.222.200.0/21 maxlen: 21
213.222.205.0/24 maxlen: 24
213.222.206.0/24 maxlen: 24
213.222.210.0/24 maxlen: 24
213.222.211.0/24 maxlen: 24
213.222.212.0/24 maxlen: 24
213.222.207.0/24 maxlen: 24
213.222.208.0/24 maxlen: 24
213.222.208.0/21 maxlen: 24
213.222.216.0/24 maxlen: 24
213.222.217.0/24 maxlen: 24
2a03:7580::/40 maxlen: 40
2a03:7580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90331617 (0x56259e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Jan 1 06:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ab39a3b147e73ae684bfad3543ec98ba6633d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:fe:30:49:e4:ec:11:bb:98:e2:83:34:c8:
db:54:8f:83:7f:27:0b:4a:a2:af:4a:29:28:a5:1a:
f6:1b:4d:b2:d5:60:4a:4d:57:4b:f9:47:4a:e4:c9:
ab:b5:7f:10:e3:a6:04:22:29:56:6b:8b:f3:76:b4:
b3:76:69:e3:7d:8d:2b:a9:15:96:0a:af:35:97:ea:
48:d0:00:60:eb:2e:91:f7:7f:22:c7:57:3e:d4:b4:
99:71:5e:f0:a3:4f:7d:ff:4d:84:b0:45:2f:f3:2f:
7a:22:a6:6b:b1:37:84:d1:1e:37:92:93:ff:bb:f5:
44:bd:4a:44:4d:63:b6:06:09:7b:71:fa:ee:ea:72:
dd:88:ae:90:34:c7:f9:e2:67:53:f2:d7:f7:84:d6:
58:04:27:20:17:30:27:ea:4e:ec:60:c9:6f:5f:6a:
d2:2b:d9:8a:13:0c:2a:06:25:1f:cd:4f:04:dc:29:
b0:f3:d4:d4:97:80:72:79:24:fd:7a:d7:5f:28:d9:
ab:d4:52:b3:58:2a:32:41:bd:22:a0:8f:d6:f9:a6:
3e:c6:79:99:9e:df:f5:02:09:11:84:fd:6b:4a:1e:
77:f5:cc:4b:d8:7e:9a:f4:71:e9:0b:5d:1c:17:ec:
e2:ba:af:f6:92:80:42:ec:5b:fe:9c:71:ae:e7:f5:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:9A:3B:14:7E:73:AE:68:4B:FA:D3:54:3E:C9:8B:A6:63:3D:14
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/OrOaOxR-c65oS_rTVD7Ji6ZjPRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.192.0-213.222.217.255
IPv6:
2a03:7580::/32
Signature Algorithm: sha256WithRSAEncryption
78:30:5e:0f:6f:ab:f9:2e:35:a2:95:f2:8f:d0:91:9b:4b:7b:
9c:1c:2b:65:f3:f6:dc:d6:c8:ee:fa:d2:c2:80:8c:5f:6a:d9:
af:cc:93:65:8c:6c:12:12:e8:d6:75:ba:bf:04:0f:52:cf:ca:
d6:51:c2:0c:3f:07:1d:34:b5:b9:91:fc:13:d4:0f:7e:61:88:
7e:50:8d:c9:cd:1b:55:cb:08:04:a2:15:13:c5:13:6b:b0:be:
94:62:ec:73:0e:b1:d0:3d:d1:96:36:fb:cd:a8:e2:86:4a:55:
64:d9:16:9b:12:0a:46:b6:ed:a5:2b:ac:3a:a8:25:59:d4:99:
fe:ce:d5:86:0a:6e:1c:c5:ac:16:20:b5:81:4f:0e:f0:cb:f0:
55:b7:0e:0e:e4:fe:02:ef:06:26:f8:5b:45:ea:3a:d0:68:7c:
17:0c:da:a2:8e:60:35:44:29:5d:fe:94:d2:4e:c8:ed:60:40:
b7:45:23:09:9b:ed:69:f9:5a:ee:64:bb:be:51:35:87:dd:0a:
35:da:3e:9f:0e:50:1d:ab:8d:3c:d4:2c:20:52:8a:da:df:0f:
8e:17:56:7a:a1:3b:ea:a6:2f:d6:e4:22:dd:08:b8:b5:67:f6:
9c:e1:5b:fa:74:ba:46:6f:48:d0:cb:9b:71:7d:a9:83:e5:aa:
16:a6:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:07 2024 by rpki-client on console-ams.rpki-client.org