Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fBNKgDueTH8RXiErAKuhQNxTXNU.roa
File: fBNKgDueTH8RXiErAKuhQNxTXNU.roa (raw, json)
Hash identifier: LhYXNRRCzm3tUcfjGq2+rCF+V/kLv5xVnsAbIY7TXlg=
Subject key identifier: 7C:13:4A:80:3B:9E:4C:7F:11:5E:21:2B:00:AB:A1:40:DC:53:5C:D5
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0183A778284792E9825C57A00805E8DFFA56
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fBNKgDueTH8RXiErAKuhQNxTXNU.roa
Signing time: Wed 05 Oct 2022 09:26:53 +0000
ROA not before: Wed 05 Oct 2022 09:26:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:78:28:47:92:e9:82:5c:57:a0:08:05:e8:df:fa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Oct 5 09:26:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c134a803b9e4c7f115e212b00aba140dc535cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:68:21:28:b9:77:c8:ab:70:42:0a:9e:40:
68:9e:e7:ad:9a:e0:d1:92:84:7c:a7:70:a6:93:30:
79:10:5e:50:77:4f:b2:2a:58:c0:04:b4:2e:a7:e9:
d5:84:b3:f4:5d:2e:e6:81:aa:28:9c:4b:9d:dc:3c:
fe:4a:cb:ce:98:de:df:fa:03:92:b8:a0:44:5f:d5:
a2:15:d5:cd:04:ab:b7:7a:68:3b:77:85:9e:57:b7:
45:a4:5b:d0:e1:ae:e5:be:ba:49:ef:f4:75:fe:e9:
06:5f:a4:28:01:44:7e:01:c3:90:fd:a0:36:28:21:
bd:58:d9:22:cb:50:61:24:06:e0:b9:38:e3:58:f2:
2a:03:52:26:dd:07:a1:3c:0d:18:d0:e9:17:28:ed:
0b:32:98:db:eb:60:0d:e9:ef:33:63:77:8c:82:21:
75:54:a2:13:a7:fd:c8:c3:a9:7d:ec:27:7e:96:20:
34:1b:4d:cb:1b:7d:cf:4f:a8:96:94:d5:e6:31:f5:
3e:d2:1b:67:26:49:51:91:be:23:32:97:5d:16:8d:
12:ac:cb:c2:9b:d7:87:01:4e:b0:82:ba:4d:23:b6:
d2:8a:68:70:0d:72:7c:18:cd:e8:60:d5:0f:1d:b2:
a6:61:81:a7:99:a9:56:f2:30:64:ea:df:a5:5d:fd:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:4A:80:3B:9E:4C:7F:11:5E:21:2B:00:AB:A1:40:DC:53:5C:D5
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fBNKgDueTH8RXiErAKuhQNxTXNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.229.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c3:5b:c6:c9:dc:86:c6:fb:54:5d:95:cb:da:ef:fa:e9:37:
cf:3a:5f:95:8f:d4:86:d5:19:49:b1:24:06:81:ea:e5:af:6d:
cf:1c:52:4e:3f:65:c1:ee:12:a8:dd:3f:4d:20:f3:d6:6c:96:
bc:f0:43:85:f8:01:25:22:93:4e:7d:bb:d3:54:85:ce:5f:7d:
7d:fe:9f:9a:b1:55:66:3f:d3:0e:6c:c9:52:a1:63:a0:ee:18:
7a:ec:16:94:7b:50:1f:95:57:61:d6:f6:bc:f7:63:92:03:99:
36:6d:30:ad:bc:6f:ec:40:62:1b:bf:4c:82:d3:85:40:d6:56:
ca:bf:c2:e5:00:f2:60:9e:69:59:a4:46:fc:fb:4f:cb:3b:97:
2f:62:7b:30:d5:a9:d8:ae:54:54:0a:20:44:27:ae:54:6a:23:
93:7c:84:89:31:16:e8:e4:8e:a3:b6:f4:53:04:bc:bf:60:d4:
49:4a:20:79:ac:94:93:79:32:fc:2c:5a:66:7a:8f:58:10:7d:
93:04:f1:a7:c2:d9:e6:49:36:56:a5:f5:2f:b9:46:1d:86:93:
20:ca:09:f4:3c:cd:97:bc:50:b8:46:18:9e:96:f0:dc:74:d8:
59:a1:b6:27:2e:f3:e1:ff:0d:c1:8c:97:3d:e2:a5:ea:fd:a9:
60:df:da:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org