Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/aBX852gbl0FWH22BrLyUO9ltdcU.roa
File: aBX852gbl0FWH22BrLyUO9ltdcU.roa (raw, json)
Hash identifier: Cs5uf4/S+HJXo11mtkQbQp6bc9WkS1NLfuYWZtnDQqc=
Subject key identifier: 68:15:FC:E7:68:1B:97:41:56:1F:6D:81:AC:BC:94:3B:D9:6D:75:C5
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17E9BAD5
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/aBX852gbl0FWH22BrLyUO9ltdcU.roa
Signing time: Sat 01 Jan 2022 00:54:44 +0000
ROA not before: Sat 01 Jan 2022 00:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211838
IP address blocks: 213.175.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401193685 (0x17e9bad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6815fce7681b9741561f6d81acbc943bd96d75c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:e6:ac:22:82:3b:15:3e:28:58:51:ac:c3:
ee:7f:e3:c7:11:13:63:8b:6f:10:4b:b1:78:62:55:
e4:39:a9:66:ec:ad:d1:de:89:2b:b1:d0:17:82:e4:
b6:9c:b1:37:2b:75:ff:50:c1:00:6e:01:c9:7e:55:
e5:fa:6f:c4:2c:fd:b7:17:d2:86:39:4e:a6:7e:6c:
9a:27:e4:85:e7:72:4f:b8:50:bf:e1:35:67:f8:20:
88:65:b2:d2:c9:a8:86:9a:ec:f9:ad:01:07:93:97:
8a:81:e7:fe:30:25:0d:b5:0f:12:18:e9:b5:c3:6d:
90:14:c5:66:8e:c3:77:72:11:6a:c1:6c:30:03:3a:
b1:64:fc:00:2a:e3:25:e9:e6:71:13:8a:84:5e:f1:
18:b3:3a:d4:0d:08:30:76:f5:c2:18:db:e4:5c:92:
f9:df:5b:4a:4f:19:f8:86:be:9c:7e:be:1d:90:8b:
9b:43:2d:7f:99:13:7d:d8:cb:e8:fa:0f:cb:ff:eb:
8f:94:b5:ec:dd:f7:b0:4a:11:88:d7:12:19:9e:3a:
b0:37:a9:5e:06:4b:ac:a1:5b:f4:57:96:3f:28:7b:
c1:45:f9:b3:46:ed:90:a6:c2:b5:fd:6c:22:7b:ed:
11:c4:dd:af:a5:1b:6d:d9:97:41:ef:64:ff:32:a4:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:FC:E7:68:1B:97:41:56:1F:6D:81:AC:BC:94:3B:D9:6D:75:C5
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/aBX852gbl0FWH22BrLyUO9ltdcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:46:17:09:c1:ff:14:d3:3b:5f:fe:59:06:4a:95:2c:ec:e8:
d6:6f:5c:62:b0:24:e2:a4:e2:e4:e5:b3:80:73:22:ff:5c:87:
b3:db:bc:40:f8:9c:e3:4d:81:60:88:0f:40:b3:c0:22:64:b9:
b9:3d:4c:1f:8a:a4:20:2b:70:11:a7:71:98:6d:3e:2e:fd:ae:
cb:22:60:7b:72:f4:b7:70:4a:ee:ca:5f:39:43:7e:15:51:b8:
92:ca:26:11:2a:1d:f3:4b:80:f1:4d:92:5d:bf:2a:87:2f:1e:
90:f6:d1:a1:3f:09:ef:09:df:1a:5e:5d:7d:24:20:21:84:1c:
13:2a:94:b9:af:4b:cc:f6:8b:8f:20:f6:a2:c3:6a:2f:16:cf:
ec:00:c6:f9:d6:1c:33:82:0d:68:71:b6:22:7e:29:c9:1f:e5:
6e:b6:ec:be:7e:cd:da:03:fc:ce:d4:c3:d1:63:f4:be:96:04:
7e:ce:ac:43:e1:1b:6a:d4:40:74:3a:e1:0c:3c:43:7e:2b:39:
3b:4b:0d:4c:9f:34:c9:1e:9b:fd:a6:1f:0c:28:db:21:34:31:
23:40:5e:8e:90:bf:aa:33:9f:57:07:a9:28:a7:7c:54:39:31:
7f:c4:24:50:af:3d:94:6a:f1:dc:c9:4a:9b:87:61:02:05:cd:
d5:df:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org