Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/byeUj8LOECTx5CsbeXnFkdozF04.roa
File: byeUj8LOECTx5CsbeXnFkdozF04.roa (raw, json)
Hash identifier: YUy/i5qY2bvvN48QTh27ugeagdxyuVRcxzbQgH+DQDA=
Subject key identifier: 6F:27:94:8F:C2:CE:10:24:F1:E4:2B:1B:79:79:C5:91:DA:33:17:4E
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0184B2CFC3D7D7ED9B4AB6A2ABDE9927EE20
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/byeUj8LOECTx5CsbeXnFkdozF04.roa
Signing time: Sat 26 Nov 2022 07:21:11 +0000
ROA not before: Sat 26 Nov 2022 07:21:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 213.21.230.0/24 maxlen: 24
213.21.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b2:cf:c3:d7:d7:ed:9b:4a:b6:a2:ab:de:99:27:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 26 07:21:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f27948fc2ce1024f1e42b1b7979c591da33174e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:4c:a2:4a:72:64:4d:f5:cc:d5:a6:ce:68:
58:81:18:9a:f9:f9:96:d6:dd:d9:df:a2:a4:53:9e:
63:ff:fa:6a:af:5d:47:ef:5b:12:ac:cf:b3:3b:77:
07:5f:5c:75:b1:ae:1e:7b:19:24:1e:c3:16:dd:9a:
fa:9f:95:aa:3c:c1:e2:84:7e:2e:17:3a:92:c9:0d:
0a:57:7d:cf:de:d5:24:84:df:13:4a:3a:ee:3c:4a:
10:a7:6f:a2:f3:7e:d9:36:9c:29:54:3e:d5:04:ce:
e6:5b:bc:38:d2:16:7e:26:93:29:ef:a1:f7:04:80:
a9:95:3d:dd:7f:49:d5:4d:d5:09:62:ce:16:08:84:
cf:54:fc:2f:39:0e:c8:7e:55:02:a8:54:8a:92:9e:
0a:15:1b:b6:ad:24:5c:83:01:59:33:4a:d4:a9:81:
bd:1c:8c:0f:2f:f9:0a:17:f0:a8:24:66:65:a8:97:
c0:83:98:6a:87:fd:9c:de:a8:58:fe:59:20:cf:8e:
80:40:5d:67:99:16:ea:0d:d1:88:05:7b:72:a7:a7:
b6:f4:33:e0:5d:d9:a5:6d:15:fc:b6:84:8e:f8:7e:
02:1b:d3:83:60:ae:0a:07:29:89:d5:63:46:5a:2c:
ab:03:e1:6a:61:e1:88:e6:04:eb:80:06:3a:9e:12:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:94:8F:C2:CE:10:24:F1:E4:2B:1B:79:79:C5:91:DA:33:17:4E
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/byeUj8LOECTx5CsbeXnFkdozF04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.230.0/24
213.21.234.0/24
Signature Algorithm: sha256WithRSAEncryption
46:47:14:38:62:fc:45:be:b4:b8:8b:a2:ef:b9:e5:1e:cd:32:
d6:d0:de:79:e8:6e:c7:cc:78:0c:4b:cc:e7:2d:de:88:27:8e:
28:60:e9:26:21:f2:08:8f:42:a6:8b:42:23:e5:87:b5:f9:c9:
43:2e:bf:d9:f9:87:bf:16:e0:25:83:9c:14:78:5b:15:9c:50:
bd:c5:2d:8a:7e:4e:b0:ee:7e:3a:cf:95:92:a0:c1:39:d5:d1:
4b:0c:74:6d:a4:ad:3b:e5:21:37:24:01:ce:5a:ed:a1:ea:94:
e8:e5:a6:9d:3c:85:8d:4b:04:ee:09:8c:7c:6e:9f:8e:f1:b0:
4f:43:85:11:43:a6:4b:72:b4:4d:23:40:98:9d:b3:4a:65:4c:
2d:02:ff:84:83:d6:de:2d:dc:03:8c:3b:77:98:e0:40:b7:80:
30:12:8c:4a:a1:64:13:12:52:c4:21:10:dd:c2:af:8f:36:10:
84:5d:12:b6:61:83:07:01:80:35:f1:1b:b6:bd:f2:b8:6b:14:
d2:5c:29:15:84:d9:b5:ae:d2:b9:62:95:00:29:40:b4:f1:df:
b8:d9:8f:70:4b:ba:a9:14:6c:90:e3:19:f6:bc:cf:ed:01:02:
a4:68:a0:62:aa:0b:65:cc:10:51:71:f7:35:e0:06:74:d5:c9:
9b:f1:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org