Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/02NkJwxtlgn9HGvzFlIDtakM0Cc.roa
File: 02NkJwxtlgn9HGvzFlIDtakM0Cc.roa (raw, json)
Hash identifier: YIlwqtaz4OYyJO2lv945FWjmH+9EgitnuBaC5G7CDKk=
Subject key identifier: D3:63:64:27:0C:6D:96:09:FD:1C:6B:F3:16:52:03:B5:A9:0C:D0:27
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01842E3EABEEC39297B43163AD4436D32470
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/02NkJwxtlgn9HGvzFlIDtakM0Cc.roa
Signing time: Mon 31 Oct 2022 13:32:49 +0000
ROA not before: Mon 31 Oct 2022 13:32:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 213.109.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:3e:ab:ee:c3:92:97:b4:31:63:ad:44:36:d3:24:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 31 13:32:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d36364270c6d9609fd1c6bf3165203b5a90cd027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:56:de:15:7f:57:d3:9c:9d:c1:a5:b0:70:
a3:95:25:f1:8f:ca:dc:10:c8:b1:f4:b8:33:50:b4:
44:2e:9a:01:d1:5a:fe:5b:3a:7b:4c:6d:f3:8c:8c:
8a:a9:b4:38:4c:ef:57:04:9e:7f:c3:4c:ac:3c:83:
77:fc:0c:26:38:d4:bc:3b:c3:0b:ac:8b:7c:50:cf:
d6:cb:2b:2b:70:ec:c0:03:6f:6f:64:b4:df:5a:09:
35:47:eb:86:8b:5b:af:7a:56:16:a1:89:e1:64:b8:
02:cc:4a:7f:ef:c2:5b:f4:ee:2c:9f:71:a0:1a:f0:
26:fb:5d:c3:3f:2f:7a:41:7e:8d:6b:0c:f7:a8:f0:
d8:3a:ce:fc:74:ae:dc:ea:ac:ac:01:27:06:a7:6e:
67:8b:98:c8:42:55:0e:85:72:e0:05:43:05:41:11:
a9:e1:b2:f5:be:70:62:71:6d:55:6f:57:23:47:34:
58:49:bb:10:8f:9f:e6:03:f4:46:2c:3d:b7:6a:12:
07:64:c8:b4:85:68:bf:c1:81:91:5a:84:57:f7:64:
b0:9b:93:d6:7a:c3:90:21:ed:f5:73:26:a4:10:c0:
cd:8f:45:f9:bb:98:13:b9:ef:09:11:40:81:66:22:
18:6c:5e:ce:80:11:5d:94:bd:1a:7c:91:23:97:e7:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:63:64:27:0C:6D:96:09:FD:1C:6B:F3:16:52:03:B5:A9:0C:D0:27
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/02NkJwxtlgn9HGvzFlIDtakM0Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.180.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d9:ae:21:fd:51:8d:d4:81:98:a7:fb:c3:50:9c:67:b4:1a:
4f:37:75:da:f4:ae:f7:d3:ad:a8:5d:47:06:ff:bd:b8:e5:39:
19:d8:c9:55:24:c1:b9:64:ce:c3:cf:89:42:d6:42:d6:e7:dd:
9a:8f:79:a5:8f:b3:7b:3f:de:91:f2:c0:e0:54:b7:ef:c0:16:
86:33:48:28:45:c8:6d:9e:68:89:62:8a:09:fc:37:2b:24:50:
c5:ab:b8:68:27:ca:fc:45:d5:a8:c7:fe:80:45:d2:7b:0c:0b:
fc:5f:0c:db:3e:0e:61:f4:5c:02:06:bf:cb:54:36:f6:1e:07:
5f:35:af:50:f5:2c:39:76:21:af:61:22:dd:09:a2:c5:7a:e8:
7d:88:c5:4b:40:b2:77:6f:26:ed:e5:1b:c9:a4:e9:f9:e0:9e:
82:cd:43:86:e5:09:55:13:ca:99:f8:0a:0b:86:ce:ec:be:83:
74:7d:aa:58:f2:7d:58:47:b0:1e:59:49:4c:b4:9a:44:a8:6a:
60:97:22:33:1e:05:60:94:09:17:b6:97:a2:ed:39:2d:ca:c7:
52:65:95:28:ea:21:f9:06:d2:4f:51:06:ab:dc:d7:49:89:92:
34:c7:02:d8:d5:34:70:2e:70:f5:0a:b7:97:25:e2:6b:d5:13:
f4:1f:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org