Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0acwj37-cfBI_Kh89p_NBaDD76o.roa
File: 0acwj37-cfBI_Kh89p_NBaDD76o.roa (raw, json)
Hash identifier: /nxan2FJGt68W3MUP5Pn5/VpGbCsD1YDJ6X25I2wPaA=
Subject key identifier: D1:A7:30:8F:7E:FE:71:F0:48:FC:A8:7C:F6:9F:CD:05:A0:C3:EF:AA
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0184AE835379615E8BBB525314EA22809A0F
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0acwj37-cfBI_Kh89p_NBaDD76o.roa
Signing time: Fri 25 Nov 2022 11:19:12 +0000
ROA not before: Fri 25 Nov 2022 11:19:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 213.21.233.0/24 maxlen: 24
213.21.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:83:53:79:61:5e:8b:bb:52:53:14:ea:22:80:9a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 25 11:19:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1a7308f7efe71f048fca87cf69fcd05a0c3efaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:e8:b8:1e:c7:02:98:54:3a:d2:74:ce:1c:
e4:0d:85:27:c6:74:6c:d2:96:40:f1:1f:cb:1b:5e:
d8:dd:55:21:20:28:58:21:ab:e1:e1:37:4d:3e:3e:
66:23:18:8f:48:b3:5f:4d:f9:7b:d8:90:ab:dd:d0:
69:31:32:7e:42:ca:52:27:64:46:05:ca:4f:1a:1e:
db:9b:82:03:b3:49:bf:8c:de:0f:14:71:1a:33:5a:
db:21:9f:4c:58:ec:98:2c:55:b4:9f:3f:6b:1c:b6:
49:2a:40:6f:fd:e3:91:5f:67:54:e0:f2:b6:b6:dc:
7c:15:65:ca:ab:89:56:ab:af:db:74:20:5b:34:57:
35:9a:43:db:41:da:ce:bc:2b:de:86:ec:2f:c8:b8:
da:3e:5f:46:28:bd:69:31:e5:c2:2d:27:cd:dd:0a:
a4:f8:e4:08:ad:50:6e:f0:26:2e:04:6e:d5:6e:8b:
d0:85:16:5f:54:7d:52:e9:b5:33:91:2e:1f:c0:ab:
b8:25:e9:1f:29:a2:56:f3:c8:de:3e:30:2b:97:85:
b2:14:df:fa:28:83:fd:8f:62:63:cf:d2:01:47:3a:
f4:ca:7c:72:01:c6:f5:4b:84:98:1d:3b:fb:cf:cc:
4c:da:76:23:19:55:8c:70:73:93:02:4e:e9:0f:e6:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A7:30:8F:7E:FE:71:F0:48:FC:A8:7C:F6:9F:CD:05:A0:C3:EF:AA
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0acwj37-cfBI_Kh89p_NBaDD76o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.233.0/24
213.21.252.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5d:4e:c1:bf:78:5e:8d:2e:83:c0:d3:6a:de:34:1f:58:bd:
0e:3a:44:64:de:33:bb:26:7f:67:97:e3:a5:00:72:ab:da:22:
ff:61:ba:a5:a5:3e:33:4c:1c:b1:32:2e:e4:cd:46:f6:cd:e0:
9c:f8:24:2f:46:5a:d3:d0:58:1c:d6:5a:ed:a2:41:19:13:b5:
3d:e7:8f:df:b7:5a:b2:f3:60:93:3d:dc:57:b7:e2:91:36:d7:
3b:85:0a:b6:ea:b5:ef:24:9b:b4:93:e1:aa:39:ac:56:a7:48:
58:93:51:59:e0:e8:73:6f:04:8d:7e:1c:ba:88:a6:21:50:37:
ab:c5:d9:90:e2:6e:5b:8a:65:98:c0:78:7f:27:56:5c:f4:52:
d6:fb:76:88:52:c6:4a:a6:ef:77:9d:ca:36:36:5a:15:47:68:
4b:35:15:3b:76:08:64:7f:e9:fe:d7:64:a4:4e:51:27:31:e8:
a1:5b:d8:85:90:53:6f:5a:3b:2b:44:da:95:b3:7a:48:12:32:
44:fb:59:93:78:f6:8f:a0:d7:68:e3:2f:59:29:68:82:e9:78:
2e:00:f9:17:8f:1f:ab:6a:f6:72:13:58:ca:1a:d1:6b:51:11:
fa:fd:f7:ba:d7:e8:b6:88:ce:f7:a5:84:2a:d0:0d:1b:24:a9:
e6:b4:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org