Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KTdX7lqzJ-8BQ7W7Kf-KRQml1w8.roa
File: KTdX7lqzJ-8BQ7W7Kf-KRQml1w8.roa (raw, json)
Hash identifier: 42qLRU03lci9EDsUpfYP+m+9M7ToyDV+h6bYiNKxEU0=
Subject key identifier: 29:37:57:EE:5A:B3:27:EF:01:43:B5:BB:29:FF:8A:45:09:A5:D7:0F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 03189243
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KTdX7lqzJ-8BQ7W7Kf-KRQml1w8.roa
Signing time: Sat 01 Jan 2022 16:04:14 +0000
ROA not before: Sat 01 Jan 2022 16:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 213.108.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51941955 (0x3189243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=293757ee5ab327ef0143b5bb29ff8a4509a5d70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:e4:0b:55:78:3d:83:03:f4:a9:77:f8:9b:
5a:93:f6:3b:f6:b1:64:25:7c:6f:6b:e9:71:52:96:
de:94:4e:34:63:14:28:ea:2d:08:8b:12:ef:4b:b5:
e6:cd:a5:56:3f:3e:27:06:b4:a7:0e:7f:ae:36:a7:
dc:4a:d5:8d:78:a5:46:c1:be:c8:ec:da:a2:f9:f2:
16:0f:84:c4:7b:ed:0e:5b:ff:5d:80:97:ca:98:94:
c8:67:d8:71:59:fb:fe:84:a9:94:99:0c:73:f2:5b:
e8:c8:6d:62:c5:04:ba:50:57:3a:15:ca:20:c9:ef:
ac:12:0a:7b:5e:37:98:d0:bb:07:54:1d:79:3a:ab:
a9:37:ac:b1:1d:af:5e:4f:f3:a8:4c:30:57:10:ab:
cd:93:4b:13:0a:bf:1a:bb:6d:3b:37:49:b0:9e:2c:
90:ba:5d:6b:fb:48:d6:23:ac:3e:a5:db:ca:25:c1:
dd:2d:b7:4e:43:33:fc:e0:4e:36:5b:1f:fc:4a:97:
54:8e:b7:aa:51:5b:4d:db:8e:0d:f5:ce:03:a7:9e:
eb:7b:c3:2e:2d:a0:b6:2a:a2:1b:ca:b0:b3:02:17:
44:61:0f:c5:fc:ed:05:86:4f:db:ef:a8:2e:ab:34:
9d:d6:9c:de:0c:6c:22:d3:80:e9:99:55:f2:b6:be:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:37:57:EE:5A:B3:27:EF:01:43:B5:BB:29:FF:8A:45:09:A5:D7:0F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KTdX7lqzJ-8BQ7W7Kf-KRQml1w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.198.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d0:6f:4c:41:d6:cf:a4:d1:7a:bf:40:41:df:28:d1:f7:da:
4c:bc:49:ed:61:21:5b:c1:6d:71:4c:4f:95:ea:07:aa:c1:85:
6c:9d:c2:2d:d9:aa:26:f0:6c:a9:56:66:27:65:d0:e4:aa:78:
8f:c1:42:31:78:13:f1:1d:32:a4:f1:d5:aa:4e:5c:dd:aa:41:
c3:47:b9:2a:7f:61:eb:fb:2b:d1:92:af:34:14:9b:df:e2:03:
44:9d:e5:d6:8c:aa:c0:b6:8c:dd:82:0a:2b:d4:41:47:45:71:
55:8c:d7:c1:88:83:6d:8d:aa:21:27:7a:85:98:2e:a5:ca:dd:
4a:0b:3c:65:a2:bf:4a:0f:c2:9e:07:cf:53:66:a3:32:a4:a0:
5a:20:03:86:90:4b:33:3c:04:f5:7d:85:4b:e8:65:a8:4d:86:
51:0b:57:dd:93:b6:2d:d1:14:b7:ea:4f:25:09:17:5b:54:82:
80:cc:e3:01:92:a3:73:18:53:cd:cc:65:f5:b4:b1:de:ae:12:
1f:bf:c7:ac:52:59:9a:62:09:28:7b:3b:b3:f8:06:a8:f8:48:
bc:80:5e:56:f1:40:cd:6d:b0:e1:8e:13:30:fa:d6:b3:2e:8c:
7f:07:c3:6c:62:80:2c:3a:96:32:0c:e0:57:33:64:59:82:24:
bc:d1:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org