Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gWRaHNNEcg1UOVtXaHbRJwUkc2w.roa
File: gWRaHNNEcg1UOVtXaHbRJwUkc2w.roa (raw, json)
Hash identifier: 2FsOAe6YxzI/H0hAaQ7h7BCubRZMuiYyaEd90/akGfQ=
Subject key identifier: 81:64:5A:1C:D3:44:72:0D:54:39:5B:57:68:76:D1:27:05:24:73:6C
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01852A0A50D6872CFF82E2E416A6D476310F
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gWRaHNNEcg1UOVtXaHbRJwUkc2w.roa
Signing time: Mon 19 Dec 2022 10:59:57 +0000
ROA not before: Mon 19 Dec 2022 10:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 213.21.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:0a:50:d6:87:2c:ff:82:e2:e4:16:a6:d4:76:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 19 10:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81645a1cd344720d54395b576876d1270524736c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:c4:d1:0d:8f:43:e6:7e:5e:8a:9b:87:cf:
95:cc:52:4c:db:2d:d2:5a:5f:a2:7f:5d:49:70:62:
a8:10:0e:79:5f:7f:bb:20:96:d5:ee:78:0a:87:8f:
73:3e:b8:00:5a:50:fd:31:11:4a:07:9e:5d:1c:7d:
85:40:6d:a3:a0:48:12:c9:8f:ac:13:d3:98:14:75:
48:c6:27:ce:36:99:c4:20:a9:28:0f:4a:d5:87:55:
38:7d:a1:0f:e7:fc:00:14:fe:4d:94:70:91:ae:20:
36:fa:1a:61:74:e5:d2:46:95:96:50:00:53:43:97:
c5:ba:00:f3:43:e0:1c:4a:a9:62:7a:59:04:6d:3a:
9f:c7:cb:34:0f:3e:be:2f:bd:1c:b7:d2:06:7a:a0:
7a:73:e4:68:bb:b9:74:cb:01:13:48:98:ec:4a:dd:
12:f3:b2:92:73:25:d3:f5:71:08:8b:ed:ec:75:c8:
1f:b9:94:ee:50:5f:d7:c6:a2:d6:35:c5:f8:e2:5b:
b1:02:ff:53:20:4f:52:e1:c0:11:df:07:d9:46:4a:
b9:89:7b:47:9b:62:18:ee:40:cd:d9:ee:86:7b:6b:
85:b5:68:0f:08:af:7c:45:28:72:4c:74:7f:43:a3:
9a:b3:54:55:d8:01:18:25:ac:f9:d3:3f:d1:9e:f5:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:5A:1C:D3:44:72:0D:54:39:5B:57:68:76:D1:27:05:24:73:6C
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gWRaHNNEcg1UOVtXaHbRJwUkc2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.235.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7e:79:27:65:ba:7a:74:84:14:c3:96:78:29:53:3a:ab:a7:
45:04:6f:e0:c6:b2:27:bc:32:d3:68:bd:a4:3a:dd:85:2a:b2:
c1:b0:ba:4a:a6:59:10:3b:49:0f:7b:82:c5:da:d6:f8:bd:92:
24:e7:7c:1a:99:fa:47:8a:79:73:0f:d9:b0:e3:ef:23:35:70:
b4:91:b3:d8:a9:2f:7b:3e:92:ab:0d:f9:09:50:bc:0a:14:0b:
ee:70:22:b7:e8:b0:61:c3:7f:f4:05:5c:e8:a6:45:c8:12:11:
95:e5:31:ef:17:47:25:31:e0:42:18:e7:b5:5f:92:28:c7:de:
7d:36:ba:4f:2f:a6:c3:5a:46:a3:dc:08:97:d5:f3:4a:83:25:
a1:d9:e7:aa:68:b2:51:64:9c:fb:7b:e0:2d:01:e6:64:9c:f8:
df:8f:3a:f1:f5:7f:9f:4e:d6:cf:e1:31:ae:c9:50:65:9f:5e:
8d:f7:d5:3a:1f:62:db:2e:d4:1d:6f:66:f5:b4:30:c5:08:e9:
0f:3f:e7:1a:26:f6:3d:4a:99:da:88:31:54:74:b5:c5:9a:f4:
01:de:e2:cf:1b:b0:06:17:f7:17:a7:a7:66:3b:a4:c2:08:eb:
50:19:f7:a8:58:87:11:96:ce:3c:cb:4f:05:02:b6:b2:47:51:
c5:6e:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org