Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Lda0BlrDUTWk0Zr1Dl_DZTK4Bdc.roa
File: Lda0BlrDUTWk0Zr1Dl_DZTK4Bdc.roa (raw, json)
Hash identifier: VeKVyU7l3UDnZBp8lY1F6OoVvR1IVitvEVEJijgWTAw=
Subject key identifier: 2D:D6:B4:06:5A:C3:51:35:A4:D1:9A:F5:0E:5F:C3:65:32:B8:05:D7
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 05802D70
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Lda0BlrDUTWk0Zr1Dl_DZTK4Bdc.roa
Signing time: Sat 01 Jan 2022 10:58:06 +0000
ROA not before: Sat 01 Jan 2022 10:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35179
IP address blocks: 213.109.47.0/24 maxlen: 24
213.109.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92286320 (0x5802d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jan 1 10:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dd6b4065ac35135a4d19af50e5fc36532b805d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:44:db:0f:05:4d:6b:03:28:e2:00:bd:3a:
0b:8c:cb:ec:8d:59:f1:88:5a:97:cc:f8:3f:49:4c:
51:4d:66:69:a4:90:2a:42:01:8c:75:16:67:5a:4d:
3c:98:cd:11:fc:54:2b:2a:76:ae:2e:34:3b:3d:2a:
1e:36:92:40:56:5c:1e:24:f2:85:36:f0:b5:b1:bd:
c3:b6:db:cf:56:6d:ab:9f:04:4f:e4:43:ba:66:46:
49:2c:d4:83:87:d6:da:6c:6f:8f:3d:cf:7d:50:2c:
3d:74:ec:48:93:45:0a:dd:1b:ae:da:56:a2:55:e5:
1c:72:ee:85:a5:3a:82:e2:a8:38:60:08:62:34:01:
0c:34:ce:48:57:ef:eb:5f:ff:d7:d4:d9:bb:49:77:
20:e4:86:0b:7a:5e:e6:1b:c4:d7:0c:f0:c7:19:60:
a0:db:15:84:ec:70:ea:3d:47:d1:11:74:14:96:4c:
af:15:e4:82:86:96:b0:0b:9e:50:98:b7:27:7d:d6:
52:57:71:1c:73:25:74:04:3d:dc:9f:6f:fb:40:a7:
dc:3f:39:4c:d8:c9:de:cb:53:e1:ab:35:94:14:c7:
e7:db:db:6b:25:f5:fd:38:4c:6c:bb:8d:3a:44:53:
4a:da:80:3b:d4:03:8b:02:e3:4d:05:b3:08:eb:8d:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D6:B4:06:5A:C3:51:35:A4:D1:9A:F5:0E:5F:C3:65:32:B8:05:D7
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Lda0BlrDUTWk0Zr1Dl_DZTK4Bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.46.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:4f:e8:f9:1b:ef:20:17:60:a6:f4:0c:ba:e4:7c:63:3d:73:
ed:71:7e:cf:b4:37:f5:f7:87:17:3c:43:df:05:89:16:de:75:
72:87:dd:2a:ff:b9:6c:a2:b6:6e:dc:8f:12:37:e8:19:ea:f6:
09:78:72:35:c6:ce:d6:e7:35:ac:73:dc:67:d5:29:b3:97:15:
c9:10:5b:24:75:f2:04:b0:d6:f1:c8:ad:fd:9f:54:cc:6d:64:
ac:af:0f:b3:09:b1:a2:ef:95:82:7a:fe:00:65:e8:4c:f5:44:
58:1a:a5:b5:18:d0:d5:34:fd:7d:26:a3:b2:ac:b4:9e:7f:b0:
27:3b:0d:c8:21:d1:6c:2f:f0:89:76:44:74:f9:89:e5:83:31:
24:22:be:1d:22:c3:cd:c1:18:e4:fa:83:af:6f:f4:90:88:50:
77:1e:4f:ba:ee:6b:4a:a7:6f:1e:c2:25:e2:96:c8:36:01:e3:
09:1d:20:35:2d:01:e2:8b:52:24:47:2c:1f:ea:ea:80:c2:68:
58:7f:98:f1:36:3b:07:2c:26:de:ab:42:6e:6d:9e:f0:7e:46:
13:98:be:39:02:1d:d0:12:80:4d:45:88:6c:96:37:6d:a1:85:
1f:80:b6:18:36:00:e5:bf:2e:da:71:c3:6a:fb:96:42:a9:2b:
3f:2b:ac:3c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBYAtcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDFjNzIyMWVkZTNhZjVlZTkyZTMyMDZhZjJmMThiZDAxMGQ1ZGQ5MB4XDTIyMDEw
MTEwNTgwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmRkNmI0MDY1YWMz
NTEzNWE0ZDE5YWY1MGU1ZmMzNjUzMmI4MDVkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJLNRNsPBU1rAyjiAL06C4zL7I1Z8Yhal8z4P0lMUU1maaSQ
KkIBjHUWZ1pNPJjNEfxUKyp2ri40Oz0qHjaSQFZcHiTyhTbwtbG9w7bbz1Ztq58E
T+RDumZGSSzUg4fW2mxvjz3PfVAsPXTsSJNFCt0brtpWolXlHHLuhaU6guKoOGAI
YjQBDDTOSFfv61//19TZu0l3IOSGC3pe5hvE1wzwxxlgoNsVhOxw6j1H0RF0FJZM
rxXkgoaWsAueUJi3J33WUldxHHMldAQ93J9v+0Cn3D85TNjJ3stT4as1lBTH59vb
ayX1/ThMbLuNOkRTStqAO9QDiwLjTQWzCOuNC88CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQt1rQGWsNRNaTRmvUOX8NlMrgF1zAfBgNVHSMEGDAWgBTEHHIh7eOvXuku
MgavLxi9AQ1d2TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hCeHlJZTNqcjE3cExqSUdyeThZdlFFTlhkay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvZTk5YjM1LThjZjYtNDkzNC1hNTkxLTk5MzBmMjE5NGEwZS8x
L0xkYTBCbHJEVVRXazBacjFEbF9EWlRLNEJkYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
ZTk5YjM1LThjZjYtNDkzNC1hNTkxLTk5MzBmMjE5NGEwZS8xL3hCeHlJZTNqcjE3
cExqSUdyeThZdlFFTlhkay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdVtLjANBgkqhkiG9w0BAQsFAAOC
AQEAwE/o+RvvIBdgpvQMuuR8Yz1z7XF+z7Q39feHFzxD3wWJFt51cofdKv+5bKK2
btyPEjfoGer2CXhyNcbO1uc1rHPcZ9Ups5cVyRBbJHXyBLDW8cit/Z9UzG1krK8P
swmxou+Vgnr+AGXoTPVEWBqltRjQ1TT9fSajsqy0nn+wJzsNyCHRbC/wiXZEdPmJ
5YMxJCK+HSLDzcEY5PqDr2/0kIhQdx5Puu5rSqdvHsIl4pbINgHjCR0gNS0B4otS
JEcsH+rqgMJoWH+Y8TY7Bywm3qtCbm2e8H5GE5i+OQId0BKATUWIbJY3baGFH4C2
GDYA5b8u2nHDavuWQqkrPyusPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:26 2024 by rpki-client on console-ams.rpki-client.org