Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/1-m78fIlMaGhczChVkLI74frx9Ro.roa
File: 1-m78fIlMaGhczChVkLI74frx9Ro.roa (raw, json)
Hash identifier: iQwHsNPLP73mBQGpbe8MN4gPIp9hTEvRzD/uC9XdcE4=
Subject key identifier: FA:6E:FC:7C:89:4C:68:68:5C:CC:28:55:90:B2:3B:E1:FA:F1:F5:1A
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 0184EC9E2F1B357E8915DAB2A94D2BA86D6B
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/1-m78fIlMaGhczChVkLI74frx9Ro.roa
Signing time: Wed 07 Dec 2022 12:45:00 +0000
ROA not before: Wed 07 Dec 2022 12:45:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211251
IP address blocks: 213.171.64.0/23 maxlen: 23
213.171.66.0/23 maxlen: 23
213.171.68.0/23 maxlen: 23
213.171.74.0/24 maxlen: 24
79.98.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:9e:2f:1b:35:7e:89:15:da:b2:a9:4d:2b:a8:6d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Dec 7 12:45:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa6efc7c894c68685ccc285590b23be1faf1f51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:2d:a0:85:dc:b0:41:2c:15:f2:b2:de:32:
c1:04:ac:44:fb:fd:cd:26:e4:24:9c:f2:30:75:05:
6d:c0:72:18:d7:38:38:23:68:3e:4b:f2:6c:06:88:
c5:db:fc:15:cd:a1:9f:31:29:79:c1:cb:83:f5:9f:
3e:c2:93:8b:46:c1:35:16:06:9e:9d:8d:40:36:57:
9f:11:96:7d:a4:a6:12:55:c0:7b:93:8e:9f:86:a6:
dd:db:aa:91:86:b9:2d:84:b6:dd:82:74:d1:6e:57:
c2:66:a7:5f:9b:18:57:f2:0e:05:9c:57:3d:ac:6a:
3e:53:0c:c9:3d:2d:bc:2a:3e:df:cb:11:5f:64:9f:
45:2a:41:4c:47:e8:5e:de:06:89:2a:a0:3a:2c:91:
7f:83:18:b1:99:15:49:03:07:3c:38:57:59:fc:cb:
80:7e:59:19:cc:37:57:ba:57:29:e6:93:4d:65:11:
8b:c0:5c:01:2e:5d:2c:bc:ff:78:70:a5:f1:9f:19:
99:d6:f6:ee:28:13:31:60:3d:a3:5e:5d:6d:6b:b2:
ec:8c:37:14:df:d5:bd:a6:0b:66:7b:be:bf:30:7a:
ed:8f:ab:25:7e:b7:a0:00:95:cf:cf:2a:b2:a0:b1:
49:ee:fb:21:3f:f2:8d:b7:b6:68:c4:38:13:f1:5d:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:FC:7C:89:4C:68:68:5C:CC:28:55:90:B2:3B:E1:FA:F1:F5:1A
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/1-m78fIlMaGhczChVkLI74frx9Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.176.0/22
213.171.64.0-213.171.69.255
213.171.74.0/24
Signature Algorithm: sha256WithRSAEncryption
39:59:e3:fc:ae:12:ab:43:86:c1:e7:64:d1:7f:ff:aa:c2:99:
1d:33:50:b9:68:28:4d:39:09:9f:40:0c:1d:40:f2:c6:3c:b1:
fb:58:a4:79:bf:04:60:9f:48:37:61:1b:f0:82:10:db:be:e3:
04:1d:34:36:62:6c:c3:12:12:04:45:5c:cf:5c:33:a3:6f:08:
17:ad:11:49:b9:69:d0:4f:36:d5:34:7a:93:f3:9b:02:0e:65:
32:bb:bf:5a:d3:36:61:da:c1:a3:8a:26:a4:67:e9:82:e0:f4:
5c:11:e2:a5:8f:84:d6:73:b9:c4:5e:6e:10:46:23:4d:02:5d:
7e:b2:9a:cf:4d:0d:87:5f:7a:55:a8:44:66:6a:87:40:10:22:
36:c1:97:0b:c3:05:8e:e6:5c:92:dc:df:f8:87:a1:8d:95:37:
13:e1:4b:c8:45:40:fe:6d:0c:a2:15:ed:fb:b6:b7:5e:7a:fd:
98:30:57:01:1e:0b:99:40:2c:9f:3e:cd:2b:27:c7:8f:d5:c0:
2c:ba:9d:0a:94:bc:3a:f9:72:78:8f:21:f9:b1:9e:ae:2f:8b:
b2:18:d1:90:56:d9:f4:52:15:c6:4d:b2:f6:84:2a:d0:c6:fe:
54:bb:2f:65:0a:d6:06:e0:83:d4:64:5d:de:4c:eb:1b:25:c6:
18:44:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-fra.rpki-client.org