Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Lq7HbWrKGpPgJRZGklbRFxv26Xc.roa
File: Lq7HbWrKGpPgJRZGklbRFxv26Xc.roa (raw, json)
Hash identifier: Ga/NNHG11wWoG0B+eI/H1sE6sfo6if3uKRidd8Gtis4=
Subject key identifier: 2E:AE:C7:6D:6A:CA:1A:93:E0:25:16:46:92:56:D1:17:1B:F6:E9:77
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01852A0A5017F55AF38BF77AFC5BB0AFED8C
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Lq7HbWrKGpPgJRZGklbRFxv26Xc.roa
Signing time: Mon 19 Dec 2022 10:59:56 +0000
ROA not before: Mon 19 Dec 2022 10:59:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 213.21.231.0/24 maxlen: 24
213.21.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:0a:50:17:f5:5a:f3:8b:f7:7a:fc:5b:b0:af:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 19 10:59:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2eaec76d6aca1a93e02516469256d1171bf6e977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:8f:34:72:b5:f0:d3:04:af:f3:db:07:b4:
85:13:07:d9:3a:c7:db:3e:a5:15:83:f5:39:a2:05:
d6:de:4e:87:f1:29:fc:22:56:48:0e:fd:12:d1:94:
99:a7:69:3c:c8:b7:52:25:3e:02:63:3d:c7:4c:ae:
15:ee:b0:6b:0d:95:81:fc:f1:00:fa:9e:1b:1e:b8:
1c:62:90:50:ae:20:70:88:06:b5:dc:af:c1:c2:dd:
ab:db:6a:f0:a9:a0:4a:8b:e1:78:c5:49:75:c6:f6:
87:a3:b3:33:5a:1d:1b:75:f5:9d:03:e9:3d:7b:13:
f4:ab:0f:cd:a2:52:3e:9b:bc:41:81:36:4f:b1:0a:
f4:07:4d:7a:36:31:31:93:31:3e:5f:bc:92:b9:04:
04:25:89:d6:e5:73:b8:19:bd:7a:61:a6:96:96:60:
6c:35:32:bd:81:39:79:ff:60:c8:0a:23:64:ce:d9:
02:69:89:84:56:59:25:28:b6:a3:89:5d:ec:6f:60:
54:5b:47:8d:ee:52:81:19:5f:76:a5:d4:c1:9a:92:
7d:56:40:96:b2:5c:af:b7:7a:93:96:6f:a1:85:30:
09:a7:ac:2d:dd:19:2f:88:bc:6b:01:74:27:a6:ac:
64:7e:ea:00:ca:e2:5c:91:01:e2:d8:b5:84:35:83:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AE:C7:6D:6A:CA:1A:93:E0:25:16:46:92:56:D1:17:1B:F6:E9:77
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Lq7HbWrKGpPgJRZGklbRFxv26Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.231.0/24
213.21.244.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e3:cf:83:01:93:68:e4:04:76:45:88:45:47:94:f2:40:bd:
53:5a:a3:1e:4b:1c:5e:83:6a:fc:09:ba:dc:51:86:35:36:34:
47:b0:84:44:78:1a:c3:3a:b7:84:b3:f4:7e:c2:42:91:0a:e0:
53:67:0f:8e:02:8b:6b:e6:13:c3:a7:40:c2:00:75:da:0c:a0:
80:95:f7:cf:09:2b:78:26:9f:f8:8b:77:66:44:17:8d:ca:f7:
1f:29:90:d2:53:4a:50:ca:a7:7f:1d:57:b7:a0:99:0b:fb:a4:
50:5c:44:d1:07:54:92:8a:75:0c:61:f7:78:54:ef:64:84:af:
3a:f5:23:68:04:09:f6:cd:dc:e8:f6:53:d3:ef:05:bd:96:d0:
9e:9a:17:40:c0:3a:d6:86:9d:1f:88:3e:df:08:4b:f2:72:06:
59:97:0f:f5:20:59:9e:d9:50:e2:d4:22:52:73:d4:03:5b:75:
30:28:41:c2:1d:99:38:86:33:99:66:88:5f:be:31:db:3b:1f:
ff:d3:fe:34:73:00:de:3d:37:ca:4a:dd:94:5b:45:72:02:59:
63:ed:af:53:bc:b2:ee:24:6f:53:9d:5a:3c:85:8d:33:88:15:
5f:64:f6:9b:7d:f5:c2:71:f7:07:6d:5f:30:ff:e8:9a:89:92:
db:8f:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org