Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/6EOUfFRJsWEOhy0puMjNVgMAi6k.roa
File: 6EOUfFRJsWEOhy0puMjNVgMAi6k.roa (raw, json)
Hash identifier: 9sCmdDaRQmfUKAVs3+AP4uoAk1MTIvNDZWop0bxQx/4=
Subject key identifier: E8:43:94:7C:54:49:B1:61:0E:87:2D:29:B8:C8:CD:56:03:00:8B:A9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0474EE1D
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/6EOUfFRJsWEOhy0puMjNVgMAi6k.roa
Signing time: Thu 07 Apr 2022 12:44:41 +0000
ROA not before: Thu 07 Apr 2022 12:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.237.0/24 maxlen: 24
213.21.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74771997 (0x474ee1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Apr 7 12:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e843947c5449b1610e872d29b8c8cd5603008ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:3f:86:c2:f6:be:41:60:8b:d4:e6:48:b4:
44:46:2a:ed:92:ac:c4:f7:fe:61:35:bc:b9:02:3e:
6d:fa:ad:e2:6e:59:c7:f8:42:de:e4:f7:52:bc:39:
52:44:ab:cf:f4:4b:67:be:c6:ea:1a:6b:86:70:bc:
44:6f:e8:dc:2b:22:d1:04:c1:eb:7a:f3:29:9a:c4:
b8:b3:93:e6:49:39:5f:24:5b:ac:cd:0e:91:ad:d4:
fc:8b:dc:7a:7d:82:44:b0:de:21:b6:70:da:62:89:
6e:0b:63:a6:20:75:f9:e8:e0:08:42:e3:4d:01:6c:
5c:09:93:ef:7d:22:7f:d1:4a:2b:b7:8d:4e:86:5c:
96:b8:f0:4a:75:eb:01:fe:3b:a4:df:dd:0e:9d:b7:
c6:fb:68:b8:5e:37:9a:f9:2f:94:1f:db:d7:22:29:
3d:0c:25:68:12:ed:11:80:df:5f:04:d1:21:09:44:
a9:f8:0f:08:f5:05:9e:89:7e:cf:1e:d1:91:4a:99:
06:e3:b0:a0:c9:9a:94:64:41:33:e6:dd:9d:c5:b8:
aa:f3:53:7d:14:13:70:b9:45:12:ab:e9:cb:98:b2:
c2:89:98:d4:d9:dd:fe:34:4c:08:1d:af:69:6c:f2:
42:64:87:20:75:db:b4:70:4f:3b:8d:1e:15:ef:71:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:94:7C:54:49:B1:61:0E:87:2D:29:B8:C8:CD:56:03:00:8B:A9
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/6EOUfFRJsWEOhy0puMjNVgMAi6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.235.0/24
213.21.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b0:b5:38:ae:e2:70:37:66:af:1a:c9:5c:9a:83:03:a4:1b:
8f:9a:ed:0f:35:93:b4:aa:86:0c:38:25:6c:3f:e5:1b:29:91:
34:fc:c4:4c:ae:aa:7f:68:78:02:78:95:ad:1c:56:33:90:8a:
96:41:18:ac:9f:db:bb:7f:59:1a:b5:67:9a:f7:1e:59:69:25:
5a:49:ed:71:48:55:ac:a1:2a:53:54:66:18:b5:ad:fb:da:dd:
c1:34:d9:83:ef:28:e2:fd:a4:c0:52:65:cf:28:3e:3a:3f:05:
a0:18:dd:34:c1:0d:d5:4c:40:99:45:48:dc:05:b9:fe:49:d4:
0c:2d:5d:93:85:aa:84:c6:c6:62:8e:6d:d6:be:07:8c:a5:8f:
cb:49:00:10:b0:6c:09:4f:75:3a:9f:29:26:13:78:74:34:e8:
77:11:38:ae:79:46:62:0c:13:dd:1f:8a:ce:09:e6:98:70:27:
aa:e5:b2:75:17:fa:83:6c:8a:84:79:0f:a2:88:7e:bf:a4:cb:
41:18:07:a5:00:96:52:ef:46:3e:57:95:aa:8d:4e:1c:53:59:
e4:ab:88:f7:ba:cc:96:71:1f:a7:67:78:fb:43:99:b8:45:9f:
f8:8e:d8:54:6b:5f:03:f0:fb:7c:b7:a0:b1:d6:56:22:f4:77:
93:de:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org