Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Z-Z1pAKVTVzjSv-aVEYux0qw8qA.roa
File: Z-Z1pAKVTVzjSv-aVEYux0qw8qA.roa (raw, json)
Hash identifier: q7B/91lwLTqfOmsBDXlZVDJdgjMxrpkL2na2hoxJoys=
Subject key identifier: 67:E6:75:A4:02:95:4D:5C:E3:4A:FF:9A:54:46:2E:C7:4A:B0:F2:A0
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0184CD0707B2B675FB6C2DC3BD3C92F9A8A9
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Z-Z1pAKVTVzjSv-aVEYux0qw8qA.roa
Signing time: Thu 01 Dec 2022 09:31:40 +0000
ROA not before: Thu 01 Dec 2022 09:31:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212027
IP address blocks: 213.21.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:07:07:b2:b6:75:fb:6c:2d:c3:bd:3c:92:f9:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 1 09:31:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67e675a402954d5ce34aff9a54462ec74ab0f2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:03:87:f6:c5:cb:a1:f8:52:75:73:b0:69:
ed:07:ee:f0:d0:2c:bb:67:e7:72:74:37:73:9e:a3:
67:ff:3a:af:ed:8b:43:a0:99:ae:c9:96:ab:ed:1e:
7c:87:4b:fa:0e:f3:fe:4b:db:8a:1d:20:50:ab:88:
c9:27:c5:3c:5b:f5:87:28:b7:f3:2c:1b:0f:3c:b0:
f4:86:a6:37:38:94:cc:98:5c:e1:39:4b:a7:34:bf:
b8:f9:fb:86:3e:14:ab:13:48:19:bf:e8:14:51:cd:
c6:98:c8:e5:90:f2:0e:0d:6f:46:d4:f4:76:7e:63:
63:16:50:97:7f:fe:26:86:5d:f9:48:00:e0:08:09:
0c:6f:20:35:26:0d:40:15:69:8c:d3:5c:de:0c:d4:
00:49:32:11:83:02:4d:ce:db:6f:3d:92:92:61:a2:
aa:ec:61:0d:f9:28:af:f7:f9:bd:b5:f8:1c:39:da:
76:9d:70:92:a8:3a:94:8a:d1:95:f2:e9:c0:1b:bc:
67:c6:f6:65:77:98:42:ee:a3:95:b3:26:47:bb:2d:
e7:0b:2a:c6:1b:8f:cd:7c:0a:85:29:e4:7b:5f:84:
02:65:5b:38:34:e7:1f:b6:d8:5e:ca:c6:58:aa:70:
23:75:61:ec:f1:1b:4e:f5:1c:f6:9a:2f:0e:4b:84:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E6:75:A4:02:95:4D:5C:E3:4A:FF:9A:54:46:2E:C7:4A:B0:F2:A0
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Z-Z1pAKVTVzjSv-aVEYux0qw8qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.239.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c5:de:b5:1c:60:f3:e4:82:b1:d7:bc:95:e2:fa:75:31:0a:
ed:b5:2b:f6:cd:6b:d6:8c:75:f3:76:31:5a:81:60:24:40:97:
03:9b:6d:85:72:93:7e:ac:80:dd:77:75:d5:64:27:5b:96:ba:
d3:c9:2c:12:8d:63:61:4e:6c:f2:7b:35:e0:32:36:be:75:97:
30:dc:8a:13:58:51:30:a7:a5:ec:cd:0c:04:a1:c9:e7:ae:34:
57:e9:0a:32:b2:4c:5f:8d:61:a7:68:ca:49:7a:df:3c:12:96:
03:17:55:ec:49:44:ea:5f:c1:b3:86:22:11:7a:0b:c9:dc:06:
b3:26:68:96:aa:28:18:eb:0a:d3:14:dc:d0:ab:66:b3:52:dd:
a4:33:b0:57:77:37:12:3c:d2:98:3f:c1:f9:8b:d3:5a:b4:d7:
dd:89:ab:1e:0c:41:02:ec:41:22:65:41:4d:98:f9:5f:13:42:
6e:8c:35:f8:ee:9e:bc:92:cd:c2:d6:7f:11:6d:41:c8:b7:e7:
62:6b:ce:e1:20:dc:53:a0:3f:26:2e:d9:29:fa:95:bc:4e:1f:
f2:fe:c5:ad:2f:31:86:8c:d9:73:6a:a7:fe:93:50:b1:ec:a1:
7b:2d:b1:39:5e:bc:fc:4f:e8:43:29:cf:71:0f:97:be:fa:44:
b5:74:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org