Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/5uKJ-ueT2K8kaU0nuTfIntobadw.roa
File: 5uKJ-ueT2K8kaU0nuTfIntobadw.roa (raw, json)
Hash identifier: Zi2BEZH75mc1tc2IeMwU1T6AlOyesraS3xPjdRFvJ2M=
Subject key identifier: E6:E2:89:FA:E7:93:D8:AF:24:69:4D:27:B9:37:C8:9E:DA:1B:69:DC
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01847AF05E5CCCB4E405F229907C8B35D5C7
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/5uKJ-ueT2K8kaU0nuTfIntobadw.roa
Signing time: Tue 15 Nov 2022 10:58:03 +0000
ROA not before: Tue 15 Nov 2022 10:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.229.0/24 maxlen: 24
213.21.234.0/24 maxlen: 24
213.21.252.0/24 maxlen: 24
213.21.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:f0:5e:5c:cc:b4:e4:05:f2:29:90:7c:8b:35:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 15 10:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6e289fae793d8af24694d27b937c89eda1b69dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:81:ba:ac:f7:eb:49:45:20:b0:1d:0b:3e:
df:dd:a5:b0:49:b4:7f:98:94:ec:f4:14:fd:fc:55:
ec:c1:f0:7e:19:55:1d:ce:4c:f9:84:37:8a:25:40:
0c:90:9d:14:8c:4a:71:f3:3a:c8:ab:7c:08:26:a1:
78:f2:e0:88:43:8d:11:bc:78:14:86:73:9c:81:de:
b0:88:67:60:aa:3f:22:6b:33:8b:3a:3d:a9:15:90:
d2:fd:be:0a:3f:8e:6a:7e:8d:ee:25:54:d9:fc:1f:
09:b7:23:50:cd:21:4a:d7:6c:0f:23:f7:e9:b8:1b:
1d:01:1b:55:e5:3f:40:79:81:82:3d:cf:34:ba:17:
bb:7c:52:ae:94:fc:04:06:aa:e9:a0:fd:b0:50:14:
07:e0:1b:c7:81:de:ff:cb:79:f2:a5:d1:04:e4:c4:
9e:3f:75:f8:05:9f:28:ad:0c:55:55:dd:41:22:2a:
39:76:ba:28:60:7a:f1:f9:cb:87:02:a8:70:98:a1:
d9:d8:fa:77:9d:eb:34:54:b4:72:98:e3:52:5c:f3:
81:3c:3c:10:af:88:a3:5a:a5:09:82:75:dd:02:64:
e4:2c:4c:a7:45:32:d2:e1:c4:0b:54:75:f0:fd:7a:
c8:b0:ad:21:a2:68:93:84:23:01:e2:23:7b:d0:41:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E2:89:FA:E7:93:D8:AF:24:69:4D:27:B9:37:C8:9E:DA:1B:69:DC
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/5uKJ-ueT2K8kaU0nuTfIntobadw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.229.0/24
213.21.234.0/24
213.21.250.0/24
213.21.252.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ee:1f:fd:06:a5:85:cc:d4:cb:8a:1d:fc:ba:ac:16:fb:d4:
63:1e:df:c2:75:14:7b:96:79:05:7b:84:a8:84:64:87:71:0a:
f3:58:f4:bb:c2:eb:b0:3e:f2:0d:72:6e:d3:79:2b:bf:67:35:
02:80:b1:4f:f3:94:d7:7e:dc:e9:0e:91:eb:05:21:16:d7:2e:
d4:e2:32:6d:e3:6e:3a:86:64:33:0c:4a:f5:7e:93:4c:e4:f3:
9f:ce:d5:55:85:f2:a5:2c:56:bc:2b:c3:d8:3e:48:56:0f:6c:
43:59:8c:2f:3c:4f:7a:21:65:8e:d4:77:6b:43:91:22:ea:0e:
db:31:6a:59:69:7a:70:46:6c:67:d1:46:51:36:55:31:69:05:
8f:92:2b:57:51:1f:12:a1:20:b2:0d:c0:30:9c:8e:c5:c9:03:
03:dc:7c:02:3a:f4:c0:96:1d:3a:f7:25:70:87:88:55:a6:05:
84:cf:24:1c:11:2f:84:fa:38:3e:c4:0f:d3:0e:52:97:ad:a9:
d2:c1:a6:bd:54:f4:5e:04:3e:51:0c:03:33:fa:34:91:01:ff:
89:9d:fe:b3:d4:a0:4c:7e:01:f7:2d:b3:f7:c2:9e:8f:63:e4:
57:c7:7b:bc:e5:91:26:06:d3:21:63:c0:75:b2:f0:53:56:3f:
f6:13:c8:e2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYR68F5czLTkBfIpkHyLNdXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjIxMTE1MTA1ODAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmUyODlmYWU3OTNkOGFmMjQ2OTRkMjdiOTM3Yzg5ZWRhMWI2OWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLqBuqz360lFILAdCz7f3aWwSbR/
mJTs9BT9/FXswfB+GVUdzkz5hDeKJUAMkJ0UjEpx8zrIq3wIJqF48uCIQ40RvHgU
hnOcgd6wiGdgqj8iazOLOj2pFZDS/b4KP45qfo3uJVTZ/B8JtyNQzSFK12wPI/fp
uBsdARtV5T9AeYGCPc80uhe7fFKulPwEBqrpoP2wUBQH4BvHgd7/y3nypdEE5MSe
P3X4BZ8orQxVVd1BIio5drooYHrx+cuHAqhwmKHZ2Pp3nes0VLRymONSXPOBPDwQ
r4ijWqUJgnXdAmTkLEynRTLS4cQLVHXw/XrIsK0homiThCMB4iN70EGy6wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFObiifrnk9ivJGlNJ7k3yJ7aG2ncMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvNXVLSi11ZVQySzhrYVUwbnVUZkludG9iYWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1RXlAwQA
1RXqAwQA1RX6AwQA1RX8MA0GCSqGSIb3DQEBCwUAA4IBAQAi7h/9BqWFzNTLih38
uqwW+9RjHt/CdRR7lnkFe4SohGSHcQrzWPS7wuuwPvINcm7TeSu/ZzUCgLFP85TX
ftzpDpHrBSEW1y7U4jJt4246hmQzDEr1fpNM5POfztVVhfKlLFa8K8PYPkhWD2xD
WYwvPE96IWWO1HdrQ5Ei6g7bMWpZaXpwRmxn0UZRNlUxaQWPkitXUR8SoSCyDcAw
nI7FyQMD3HwCOvTAlh069yVwh4hVpgWEzyQcES+E+jg+xA/TDlKXranSwaa9VPRe
BD5RDAMz+jSRAf+Jnf6z1KBMfgH3LbP3wp6PY+RXx3u85ZEmBtMhY8B1svBTVj/2
E8ji
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org