Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PeJrozX9UG5-QY51lRSM0Gz_4mk.roa
File: PeJrozX9UG5-QY51lRSM0Gz_4mk.roa (raw, json)
Hash identifier: Gh6frOSwrdwqxZb5Uk1bFTNYMPn5neDR5U8MyhILM7o=
Subject key identifier: 3D:E2:6B:A3:35:FD:50:6E:7E:41:8E:75:95:14:8C:D0:6C:FF:E2:69
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01852A0A50761009AE45645B90D1CCE22226
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PeJrozX9UG5-QY51lRSM0Gz_4mk.roa
Signing time: Mon 19 Dec 2022 10:59:57 +0000
ROA not before: Mon 19 Dec 2022 10:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 213.21.228.0/24 maxlen: 24
213.21.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:0a:50:76:10:09:ae:45:64:5b:90:d1:cc:e2:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 19 10:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3de26ba335fd506e7e418e7595148cd06cffe269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:52:04:c8:b4:ff:46:02:89:49:d8:05:bd:
79:4b:3b:7d:60:1a:9e:db:62:99:31:5c:7e:1a:68:
48:e7:5b:22:24:e7:f0:fd:f1:ad:10:e9:47:1e:94:
a5:52:79:65:58:b2:13:aa:12:c6:f1:06:d1:d4:61:
8c:1e:8a:33:51:bc:ae:34:77:32:0f:90:ce:8e:76:
2d:2c:c2:66:ba:ad:bf:07:3f:16:f3:f5:52:d2:26:
bd:84:4a:77:8c:b1:48:2a:35:06:ec:f7:3f:79:b2:
f0:56:a4:cf:2b:89:ad:41:9a:77:22:4d:73:0e:05:
3f:7a:a9:02:2a:e4:f3:d6:b1:0a:c0:20:e6:5b:3f:
7a:fd:1f:f1:5e:6c:ce:0d:1c:3b:38:12:ea:eb:f8:
0d:99:ce:8a:d4:77:d1:80:3b:6e:36:51:32:09:bc:
99:ba:98:eb:c0:0f:7a:b2:43:f4:22:05:00:2d:db:
1b:50:6f:22:f9:41:22:ee:1c:9f:aa:0d:54:42:f9:
d8:c2:19:37:a8:8f:97:6a:e4:78:0e:b7:d2:af:ce:
8e:af:cf:01:9f:c6:8b:d3:4f:70:4d:5b:40:50:91:
f5:08:91:bb:f8:8d:9e:2b:48:6b:0f:9f:7a:42:4d:
bf:b9:16:ff:d9:50:c2:a2:57:46:ff:86:10:6e:5a:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:6B:A3:35:FD:50:6E:7E:41:8E:75:95:14:8C:D0:6C:FF:E2:69
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/PeJrozX9UG5-QY51lRSM0Gz_4mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.228.0/24
213.21.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fa:d9:a1:9b:b0:57:aa:e4:cc:5e:be:29:11:4e:a7:67:15:
10:0c:60:d7:2a:75:04:aa:7c:6b:e2:e5:cb:bb:41:07:57:d0:
70:6c:58:19:a4:22:4f:e6:64:3c:b8:f4:a9:c4:4f:06:50:58:
25:6a:a2:19:85:2d:72:20:1a:ae:65:85:44:9d:98:a8:ce:fb:
59:7f:4c:c2:a1:6b:6a:cd:d8:86:f1:58:c9:76:b3:0d:0e:45:
f2:a5:db:92:3e:48:73:82:f3:72:fb:24:20:22:4a:21:f9:81:
b2:66:23:59:7a:1c:9c:29:2b:46:f1:05:2e:38:aa:a6:21:ec:
2f:a8:8d:2a:6e:6c:fa:a4:54:d0:f4:5c:b3:9d:b6:c6:e7:28:
2a:3a:8d:1c:17:08:5b:e2:46:75:3c:4c:db:50:69:cc:d9:16:
eb:3f:d3:46:47:55:f8:81:8e:33:1f:20:a8:08:3a:3c:2d:e9:
1a:aa:b5:22:c8:b9:b3:a8:d3:a3:cf:ea:e3:e1:82:e6:58:3e:
8e:5d:30:36:f7:39:14:23:91:f7:8c:b8:e6:24:1f:bd:20:a5:
27:7f:24:ff:e7:08:47:7c:07:19:d3:e9:92:2a:e1:fb:2f:57:
a4:54:dc:95:81:67:4a:7a:68:5b:05:88:b7:5a:fe:f4:55:77:
48:96:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org