Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/psjvKoxowbhcNwjIueP3HW0JJQs.roa
File: psjvKoxowbhcNwjIueP3HW0JJQs.roa (raw, json)
Hash identifier: TTclM9ngjpgcuFUW0tR5yt1Wljqc/D/a6XlK+lCGQAk=
Subject key identifier: A6:C8:EF:2A:8C:68:C1:B8:5C:37:08:C8:B9:E3:F7:1D:6D:09:25:0B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018558867356348D061627D582A06F2B4558
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/psjvKoxowbhcNwjIueP3HW0JJQs.roa
Signing time: Wed 28 Dec 2022 11:38:04 +0000
ROA not before: Wed 28 Dec 2022 11:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50040
IP address blocks: 213.108.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:86:73:56:34:8d:06:16:27:d5:82:a0:6f:2b:45:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Dec 28 11:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6c8ef2a8c68c1b85c3708c8b9e3f71d6d09250b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:bd:55:57:4c:04:f7:b6:79:47:62:09:0f:
2e:5e:49:65:64:d4:55:77:ea:29:de:92:96:da:e4:
5c:8d:46:29:90:24:ec:a6:cf:86:7a:19:99:d3:53:
85:0f:03:4b:3f:e7:8d:b6:5c:de:38:1d:bf:81:17:
35:83:5d:41:1c:25:fe:93:cf:1f:b0:f1:8e:19:17:
c3:e1:f2:9f:f3:30:68:ba:95:cc:77:20:5d:10:bb:
ff:c0:40:ef:55:3c:27:b3:2e:93:7b:ca:47:1e:49:
db:e3:49:33:01:10:a9:7e:f5:69:43:cc:6b:d9:4d:
a1:5f:99:fc:4b:a8:d6:07:96:2d:1b:e5:a3:a7:5f:
fa:50:f6:12:06:a5:43:8e:da:28:09:2c:a7:7e:d4:
fa:b2:5b:5d:32:37:86:bb:3b:ce:63:4e:16:cb:7c:
4d:14:18:ae:a3:1c:e5:1b:41:55:bb:7c:c8:12:f3:
38:6c:f9:ab:44:92:63:ae:6b:e7:91:38:c8:f5:0a:
d4:0c:f7:77:cf:ed:a8:49:8b:f7:24:b3:26:19:9b:
15:98:47:01:95:48:43:67:65:19:6b:6b:68:43:02:
e5:e4:de:ef:d5:91:de:14:97:10:26:f2:09:5a:3f:
d4:15:01:c2:12:b5:30:55:8c:12:4c:d4:9b:d6:e1:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C8:EF:2A:8C:68:C1:B8:5C:37:08:C8:B9:E3:F7:1D:6D:09:25:0B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/psjvKoxowbhcNwjIueP3HW0JJQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.197.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9e:38:00:ce:65:e8:e1:31:cc:4b:bd:85:8e:f2:f4:b2:95:
56:06:c7:6d:2c:fe:41:2c:e3:1b:83:1b:46:9e:14:51:c9:3a:
58:ef:33:ef:0e:a4:cb:bf:dc:00:91:04:2f:98:ae:40:74:38:
cc:1d:57:b6:08:2b:5a:73:e1:b0:11:c2:f9:5b:3e:d4:cd:4e:
a1:73:f6:ae:51:08:ed:b2:be:19:d2:45:8d:e5:5d:80:91:13:
db:9f:84:32:5e:d0:17:7b:7b:08:8e:3f:b5:3d:b0:ae:27:0e:
ae:78:e0:78:60:ac:e3:c8:60:b1:3f:d9:d4:ca:e8:0a:5a:59:
5c:9b:3b:19:b2:a9:48:ee:00:9f:ef:e0:04:be:b6:4a:ca:fd:
f3:c1:46:3a:82:21:0f:c7:84:b7:5d:46:ef:d6:3e:6e:94:92:
ea:bb:ec:1b:99:1b:c0:dd:8b:37:23:a1:ca:53:e5:2e:ba:3f:
80:99:f7:e0:46:c7:a1:5e:68:6d:6c:71:d2:78:ee:74:06:26:
e1:ad:e6:5c:24:31:a4:c3:2c:43:44:37:18:d2:61:ef:d3:06:
51:22:95:a7:b1:33:cf:1c:f1:6b:4d:7c:69:2c:7d:3e:0f:bb:
0d:0a:91:c0:30:e4:52:9b:4c:2d:3f:75:6b:97:45:b9:fc:b1:
dd:08:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org