Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/mEfPOot7Dv7Y1sEBEi0jJAmsCdA.roa
File: mEfPOot7Dv7Y1sEBEi0jJAmsCdA.roa (raw, json)
Hash identifier: Gd+wsN6RFrqedj2AVDoMWH1UKKNaMdo8zJDNNybsGKw=
Subject key identifier: 98:47:CF:3A:8B:7B:0E:FE:D8:D6:C1:01:12:2D:23:24:09:AC:09:D0
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 0A308419
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/mEfPOot7Dv7Y1sEBEi0jJAmsCdA.roa
Signing time: Sat 01 Jan 2022 04:56:03 +0000
ROA not before: Sat 01 Jan 2022 04:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201184
IP address blocks: 213.109.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170951705 (0xa308419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 04:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9847cf3a8b7b0efed8d6c101122d232409ac09d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:d7:e3:a6:33:f4:ea:df:19:2a:62:77:5b:
1c:7f:8d:f7:ae:8a:31:c5:cf:ae:9b:ff:6f:f6:e1:
64:75:68:cd:b9:55:12:a1:aa:da:85:0f:35:38:b8:
fc:a7:19:18:10:ec:01:bf:41:71:26:36:ea:71:4a:
92:82:a6:e4:9d:d5:53:5c:95:24:21:e6:8f:30:8b:
88:58:7f:b8:25:9d:c1:8e:20:6f:a4:f5:46:3b:27:
ad:4d:76:59:14:6a:ab:1d:8b:76:b2:00:cc:90:70:
15:b3:34:e8:2d:5e:2a:cf:b8:ee:a2:c0:f2:f7:6a:
a3:2b:66:4c:7b:ab:12:c7:19:5d:b6:71:a5:98:73:
83:9c:04:09:6a:7b:a8:d6:ae:b9:81:d4:c1:9e:d3:
74:0a:fe:47:4e:11:a1:85:66:00:f3:4a:8b:17:42:
f0:df:5c:11:c7:87:21:c1:e3:bd:7e:e9:21:86:42:
a1:47:ba:92:b5:f9:ff:13:75:ad:4d:b2:01:7c:31:
56:18:b5:b9:ad:a3:36:25:99:0d:86:9a:07:76:fc:
74:a9:3e:f7:6a:bc:20:fe:a5:15:b8:5b:61:c3:74:
07:48:cc:47:7e:ca:d4:f3:51:91:7e:d9:7c:16:e8:
ad:92:2a:61:44:69:11:95:42:91:0a:f5:e5:92:a4:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:47:CF:3A:8B:7B:0E:FE:D8:D6:C1:01:12:2D:23:24:09:AC:09:D0
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/mEfPOot7Dv7Y1sEBEi0jJAmsCdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.81.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4f:a7:47:9e:19:a3:9e:1d:7e:d7:45:b0:b3:54:8e:09:7a:
48:72:30:a5:e0:f9:ce:17:03:66:93:76:4d:c7:0e:8d:b4:84:
33:78:7b:0d:b5:aa:0d:71:73:3a:8b:a1:f1:2e:f1:29:68:56:
5d:af:24:75:7c:29:28:a9:ba:19:ee:98:14:e5:11:7f:71:01:
fb:97:fe:91:13:01:a5:a3:58:dd:d5:cc:69:83:57:7d:7c:c1:
4d:06:95:6c:8f:55:d5:66:22:39:5c:f0:fd:f1:89:c1:b3:f6:
60:1d:91:52:7b:d8:6d:a2:a6:9a:3d:3c:b9:d0:25:13:df:57:
13:5a:d8:f8:ae:7d:54:8f:88:35:0a:da:01:38:32:58:eb:90:
b9:50:97:08:c3:95:d7:fd:b8:1a:e7:eb:b6:40:a6:03:35:d5:
4e:9a:3d:e4:1b:66:80:71:06:79:b9:d0:3e:52:4c:1f:59:7b:
8e:fe:12:9e:fc:6c:dc:7c:d4:9c:93:c8:f7:0a:ec:7a:be:b5:
a0:8e:cf:bd:b1:ce:1e:b4:1b:3f:57:60:3b:7c:a7:a5:68:f5:
a2:bd:86:6f:bd:6b:b2:99:b1:7b:9b:72:47:61:0d:61:9a:89:
5a:56:7d:ff:81:c8:aa:74:e5:11:9c:2f:65:6a:95:c2:7f:eb:
6d:00:1e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-ams.rpki-client.org