Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/r5Ep-8IfVlBspVmeXaxm4YUz66o.roa
File: r5Ep-8IfVlBspVmeXaxm4YUz66o.roa (raw, json)
Hash identifier: 01l8yeLbtNOr5g9TYBplYVS2Ct0562c/hL+8Xl31+ds=
Subject key identifier: AF:91:29:FB:C2:1F:56:50:6C:A5:59:9E:5D:AC:66:E1:85:33:EB:AA
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01848535C3D7ADEDDEC4192FDD55EF60F37B
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/r5Ep-8IfVlBspVmeXaxm4YUz66o.roa
Signing time: Thu 17 Nov 2022 10:50:04 +0000
ROA not before: Thu 17 Nov 2022 10:50:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:35:c3:d7:ad:ed:de:c4:19:2f:dd:55:ef:60:f3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 17 10:50:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af9129fbc21f56506ca5599e5dac66e18533ebaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:de:54:a5:57:07:bd:9f:bf:45:8a:c2:41:
ac:54:c9:a1:67:31:cc:ea:0a:bb:ea:87:0c:bb:3d:
e1:03:0c:25:f5:ae:6c:7a:92:2c:48:41:12:16:22:
34:e8:87:8b:3f:9f:7b:c4:8b:de:82:25:d5:87:24:
43:47:2b:49:62:27:25:bb:9a:21:8f:d7:4e:09:9c:
a9:5f:f4:73:51:2c:f5:57:75:f5:21:03:1e:96:17:
57:83:d8:13:af:bd:e2:fc:fe:75:88:71:6d:d7:67:
0e:be:7c:c3:2a:85:9b:47:b1:dd:bc:34:a7:98:d6:
ae:fa:14:74:89:24:d1:f5:ec:94:e6:9d:8e:e7:85:
d3:85:9e:87:3a:48:33:f9:d6:1c:3b:cb:ef:0c:77:
c1:74:d1:7b:46:33:88:b5:bd:77:f2:4b:25:0e:d0:
a6:f2:8c:67:e3:ab:0d:47:40:4f:39:4a:18:58:b0:
cd:be:00:bb:aa:92:a0:b6:4e:98:28:d9:c3:27:55:
7b:6d:b2:ba:23:e1:c2:57:58:f6:b1:6e:c0:00:36:
1a:d3:b3:44:1f:81:1f:01:07:9b:b2:f0:30:89:30:
6b:bd:3c:99:e5:b0:b4:f1:34:f3:f2:35:e3:f1:11:
09:23:c9:c2:af:b9:13:53:f6:bb:16:32:15:95:93:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:29:FB:C2:1F:56:50:6C:A5:59:9E:5D:AC:66:E1:85:33:EB:AA
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/r5Ep-8IfVlBspVmeXaxm4YUz66o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.229.0/24
Signature Algorithm: sha256WithRSAEncryption
41:14:25:e3:c4:7c:8c:85:68:4f:3a:8a:00:56:b1:46:d3:4f:
64:76:bb:8d:ed:2b:fa:50:e3:76:7f:05:2c:75:8a:72:e4:ca:
71:d3:ff:ff:14:25:de:4f:51:4b:6b:00:58:fc:60:6a:b3:4c:
a1:4b:b2:2f:d4:88:87:d2:fd:b3:1c:a6:ca:10:b1:68:bb:fe:
57:d4:66:b3:90:68:a2:0d:68:1b:dc:8a:7d:de:16:c0:8f:f7:
b8:6f:7a:08:44:51:e0:51:a0:7a:34:85:f8:23:cd:54:34:3c:
26:20:af:d5:e8:e8:5f:24:48:82:50:13:d4:bd:c5:a2:51:eb:
35:c0:d9:95:97:a7:3b:0e:78:29:05:73:fa:dd:45:9a:a2:47:
38:81:27:4e:c3:c1:55:99:95:b8:a3:94:3e:75:4d:fa:0f:e9:
eb:33:e9:0c:bf:75:c1:a7:1b:9e:f1:75:c6:ad:dd:25:d4:c1:
02:7e:0b:ea:d3:e1:a3:4f:3c:cc:9f:22:5d:5a:07:56:07:d5:
18:0b:e6:7e:08:ad:55:d2:46:0f:6a:48:3e:ba:c6:2f:e2:0f:
e4:7d:fa:ed:45:23:f6:ba:50:39:86:9b:5c:4a:70:9f:23:14:
66:ef:70:3c:c1:fc:10:2d:21:9f:49:2d:58:78:fc:52:20:89:
d6:a4:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org