Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4ip_Mr6oITh2PtQjOcUoD0xceNI.roa
File: 4ip_Mr6oITh2PtQjOcUoD0xceNI.roa (raw, json)
Hash identifier: jJyldPdVxHiV4/lx/C9WYJ5nGI6RFz0yAp6IuQd//gE=
Subject key identifier: E2:2A:7F:32:BE:A8:21:38:76:3E:D4:23:39:C5:28:0F:4C:5C:78:D2
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A6981230B2854C0216945312C05D7D9
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4ip_Mr6oITh2PtQjOcUoD0xceNI.roa
Signing time: Wed 20 Jul 2022 07:01:38 +0000
ROA not before: Wed 20 Jul 2022 07:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41921
IP address blocks: 213.33.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:69:81:23:0b:28:54:c0:21:69:45:31:2c:05:d7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 07:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e22a7f32bea82138763ed42339c5280f4c5c78d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:da:c5:d8:33:52:69:ae:7b:12:95:fc:4a:
1c:e8:82:92:8d:ae:1d:9c:18:4e:25:41:33:04:43:
5f:a9:c4:08:fa:c1:0b:9c:fa:4c:8f:86:4d:ab:a3:
d8:40:e1:3e:e6:ae:ae:62:d7:29:90:5f:22:cf:c2:
f3:3b:03:17:e5:3b:0f:2f:c0:de:d3:b1:84:94:a6:
03:cf:d9:e6:88:28:23:88:6e:28:0a:ba:49:0a:6e:
87:f2:46:f1:5d:8d:4a:61:29:8f:9a:c1:bf:26:eb:
f0:28:37:b6:ac:b1:fa:72:aa:24:83:26:78:33:13:
81:52:7c:a3:11:78:8a:9d:0d:4d:a3:d7:3c:8b:05:
1e:60:38:da:e9:53:83:75:7d:30:22:60:32:03:d5:
a1:da:dd:57:cb:9c:43:e4:57:36:ec:2a:53:e6:a8:
f8:f8:00:26:90:c5:b4:b6:fe:3f:33:96:8a:5c:e8:
9d:d0:7b:28:fb:a6:cc:07:80:fc:5b:aa:b5:db:67:
34:69:3f:58:f8:59:4a:68:8a:76:e2:df:99:85:94:
91:a6:b5:05:fc:a9:d7:f4:a7:f8:91:f0:c0:a6:29:
11:46:26:4f:6f:30:fe:e0:76:94:11:38:5f:14:35:
38:dd:64:30:32:36:90:c3:af:a7:3d:15:e8:a5:f2:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:7F:32:BE:A8:21:38:76:3E:D4:23:39:C5:28:0F:4C:5C:78:D2
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4ip_Mr6oITh2PtQjOcUoD0xceNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.33.116.0/24
Signature Algorithm: sha256WithRSAEncryption
70:36:d1:b9:08:d4:72:2c:01:ba:5b:36:3a:27:6a:e4:ec:6b:
2a:2e:ab:e7:1e:c2:40:88:2d:bb:09:ab:07:8c:13:13:22:81:
21:f2:e7:3e:64:e3:10:fa:b2:a5:fe:4e:03:d5:fb:f0:e0:20:
79:34:b6:49:b1:cf:e1:86:20:5e:3d:7e:65:44:d2:c7:04:cb:
b0:b7:f7:33:e2:61:73:d9:11:a4:0e:b8:13:f2:d9:00:bb:8d:
ae:84:8a:dd:56:82:b8:02:ce:0a:c4:ed:88:3f:67:9a:06:b7:
26:46:07:b6:3d:c9:d0:d1:18:db:46:3c:7c:f4:1c:89:81:93:
28:2d:1e:8d:42:e5:df:c5:c7:59:ea:bb:62:07:bf:76:98:ed:
42:c2:61:60:dd:7a:45:c4:b5:ab:a3:f4:de:08:06:ec:c2:2c:
56:a8:66:1a:72:8b:49:b2:7d:f9:33:81:3d:c0:00:86:7c:60:
a7:bd:ff:e5:7e:97:9e:7b:3e:15:f0:4e:b4:2b:0d:fb:01:ff:
d1:02:7c:da:3e:cc:53:a9:a7:9f:35:9e:81:3f:9d:cd:fd:4a:
af:42:99:cd:75:67:5f:fd:34:c9:53:44:4b:1c:67:38:b9:76:
5f:cf:bf:c6:80:eb:72:49:e8:f6:33:55:22:7f:00:66:0c:a1:
9b:34:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org