Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fEZLdrLsytJEd-g7FIt_gsyf2bo.roa
File: fEZLdrLsytJEd-g7FIt_gsyf2bo.roa (raw, json)
Hash identifier: gp+MqvvunCH+MNgVwJtLqlf2Aj8hFLrWz3S+uH1VOzg=
Subject key identifier: 7C:46:4B:76:B2:EC:CA:D2:44:77:E8:3B:14:8B:7F:82:CC:9F:D9:BA
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01852A0A516BC444F53A9CE80A1BA5C95410
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fEZLdrLsytJEd-g7FIt_gsyf2bo.roa
Signing time: Mon 19 Dec 2022 10:59:57 +0000
ROA not before: Mon 19 Dec 2022 10:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 213.21.238.0/24 maxlen: 24
213.21.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:0a:51:6b:c4:44:f5:3a:9c:e8:0a:1b:a5:c9:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 19 10:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c464b76b2eccad24477e83b148b7f82cc9fd9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:ce:e1:69:55:6f:4f:e5:7d:2e:ca:68:11:
f1:2c:b6:69:d5:db:80:50:7d:48:7b:3f:4d:2f:23:
c9:e5:27:25:f4:b2:b6:63:17:ef:84:a4:95:f2:72:
c3:b0:1b:91:9b:a2:24:37:65:be:6b:7d:7e:2d:dc:
2c:da:b4:a7:c9:b4:8d:fa:12:c1:ab:6a:2b:c2:26:
e2:54:af:fc:73:0f:f4:48:78:f6:0c:ec:02:19:46:
5f:2e:05:1d:db:6f:db:26:a2:91:4f:88:b8:c5:b0:
88:68:15:81:3d:af:98:b5:36:01:2e:aa:4b:47:18:
8e:98:1b:94:5e:69:b8:7d:d1:0b:ed:1c:d4:c7:db:
a8:f5:03:7b:9d:20:e7:b6:37:e8:28:e2:85:da:68:
92:30:5a:04:da:83:2c:fa:86:25:35:34:73:78:47:
55:99:49:0e:72:81:be:4e:fe:aa:ac:e3:a2:27:59:
84:eb:57:68:39:c3:83:4b:b7:0c:80:c9:04:1d:1c:
72:47:42:a7:c2:4b:39:47:ab:a0:95:15:7b:d1:fd:
cc:22:d8:8e:df:5f:fd:be:13:ab:b6:95:4b:7c:19:
37:51:b1:d6:7b:72:ca:bf:7e:d9:97:0f:1d:35:50:
1e:5e:4d:b3:c4:31:0a:bf:c8:40:5d:e1:2c:71:b2:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:46:4B:76:B2:EC:CA:D2:44:77:E8:3B:14:8B:7F:82:CC:9F:D9:BA
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fEZLdrLsytJEd-g7FIt_gsyf2bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.238.0/24
213.21.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5c:3d:7b:9e:c1:21:66:4a:33:55:6f:03:cb:7f:e5:24:d8:
e2:7a:f9:ce:b7:f6:51:a2:7e:30:7c:8e:19:47:62:25:94:24:
c8:e6:ec:88:ee:80:dc:3f:98:ed:34:bc:80:b9:29:88:c8:35:
0b:1c:e0:e9:0f:db:61:9f:d0:3a:f3:89:3d:0d:04:04:39:64:
77:a7:f3:3c:27:88:a3:06:02:6a:e5:c1:f7:a4:61:03:c5:da:
db:13:e7:26:9f:76:58:77:2a:18:ef:f8:9a:73:06:0c:24:5d:
2f:50:e7:e1:92:ef:28:c0:d8:b3:b6:4e:3f:14:30:fb:44:e9:
17:dd:be:9a:36:88:58:83:6a:27:56:25:87:93:9b:f6:4e:f9:
04:b0:6d:52:e6:06:5d:59:11:b3:7b:8a:6f:f5:fc:f1:40:3c:
f3:28:ab:2b:c0:7d:cf:33:e1:03:2a:f0:f0:92:fc:d5:ea:d9:
ba:08:f1:d7:69:cf:f5:2b:4c:8f:03:28:a9:a9:91:d5:e7:ba:
24:19:ac:ca:62:52:ec:05:72:d4:39:61:f5:af:a7:39:39:bc:
3b:c8:67:3f:1d:1f:8e:cb:39:47:4b:76:df:00:9a:bd:58:27:
05:b7:f5:00:c4:49:11:a0:d2:ca:96:c0:32:98:ec:8b:09:21:
7d:49:57:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYUqClFrxET1OpzoChulyVQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjIxMjE5MTA1OTU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzQ2NGI3NmIyZWNjYWQyNDQ3N2U4M2IxNDhiN2Y4MmNjOWZkOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrHO4WlVb0/lfS7KaBHxLLZp1duA
UH1Iez9NLyPJ5Scl9LK2YxfvhKSV8nLDsBuRm6IkN2W+a31+Ldws2rSnybSN+hLB
q2orwibiVK/8cw/0SHj2DOwCGUZfLgUd22/bJqKRT4i4xbCIaBWBPa+YtTYBLqpL
RxiOmBuUXmm4fdEL7RzUx9uo9QN7nSDntjfoKOKF2miSMFoE2oMs+oYlNTRzeEdV
mUkOcoG+Tv6qrOOiJ1mE61doOcODS7cMgMkEHRxyR0Knwks5R6uglRV70f3MItiO
31/9vhOrtpVLfBk3UbHWe3LKv37Zlw8dNVAeXk2zxDEKv8hAXeEscbL/awIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHxGS3ay7MrSRHfoOxSLf4LMn9m6MB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvZkVaTGRyTHN5dEpFZC1nN0ZJdF9nc3lmMmJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXuAwQA
1RX4MA0GCSqGSIb3DQEBCwUAA4IBAQCbXD17nsEhZkozVW8Dy3/lJNjievnOt/ZR
on4wfI4ZR2IllCTI5uyI7oDcP5jtNLyAuSmIyDULHODpD9thn9A684k9DQQEOWR3
p/M8J4ijBgJq5cH3pGEDxdrbE+cmn3ZYdyoY7/iacwYMJF0vUOfhku8owNiztk4/
FDD7ROkX3b6aNohYg2onViWHk5v2TvkEsG1S5gZdWRGze4pv9fzxQDzzKKsrwH3P
M+EDKvDwkvzV6tm6CPHXac/1K0yPAyipqZHV57okGazKYlLsBXLUOWH1r6c5Obw7
yGc/HR+OyzlHS3bfAJq9WCcFt/UAxEkRoNLKlsAymOyLCSF9SVfV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org