Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/qR6MULPMd9GM7UB0bDb97IbZMiM.roa
File: qR6MULPMd9GM7UB0bDb97IbZMiM.roa (raw, json)
Hash identifier: fqyjK156AV6/hgo5VIjftUd1dzP6cSDSp05fYe8CwTs=
Subject key identifier: A9:1E:8C:50:B3:CC:77:D1:8C:ED:40:74:6C:36:FD:EC:86:D9:32:23
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 0183F494BDE47EC63EDF235F689530B38D53
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/qR6MULPMd9GM7UB0bDb97IbZMiM.roa
Signing time: Thu 20 Oct 2022 08:48:52 +0000
ROA not before: Thu 20 Oct 2022 08:48:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 178.132.56.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:94:bd:e4:7e:c6:3e:df:23:5f:68:95:30:b3:8d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Oct 20 08:48:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a91e8c50b3cc77d18ced40746c36fdec86d93223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:a1:ed:cb:27:39:3f:57:83:4a:51:27:83:
64:56:48:10:ab:fa:c3:b8:a3:44:6a:a6:06:1c:7f:
d8:88:cc:ed:95:df:db:ff:78:4f:f0:a3:9e:8b:1e:
09:f2:e9:f9:9f:28:dc:5b:57:a6:b9:33:3e:53:9b:
fd:f2:e7:e9:d0:2b:f2:ac:bf:36:ca:86:fc:86:c8:
92:69:ca:8f:98:36:9d:43:ae:f0:e3:fd:f7:35:f9:
53:9f:76:29:3f:e1:de:c5:ad:53:9c:bf:2b:71:75:
26:24:80:ae:a5:ff:18:4d:d7:21:82:3a:6b:f3:3c:
e5:05:6d:3e:74:7e:0e:c7:94:f7:09:c9:3e:c0:e3:
68:90:61:9f:f9:98:11:b3:27:8c:17:bf:0a:1f:e0:
73:5a:24:5a:e5:1c:0c:43:6d:aa:79:21:3d:0a:06:
2a:54:62:ec:4c:44:b9:f9:9d:ae:4d:9e:b6:b5:14:
26:25:49:cb:c4:1d:b9:ed:90:32:37:55:1a:4e:5a:
f2:ca:08:d3:45:08:fe:ec:1c:de:58:93:bf:f6:81:
23:db:2c:2d:55:9a:d3:3b:97:50:48:c5:a9:5d:55:
aa:e0:04:a4:96:b4:df:ff:5b:6e:6f:0b:91:30:be:
a2:b1:79:dd:90:74:48:56:29:ff:df:a0:0c:04:af:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1E:8C:50:B3:CC:77:D1:8C:ED:40:74:6C:36:FD:EC:86:D9:32:23
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/qR6MULPMd9GM7UB0bDb97IbZMiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.56.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:3c:a5:9f:2a:78:70:25:cf:bd:3a:e5:1f:71:e0:0c:9e:da:
e8:41:12:04:8f:32:60:c3:05:85:9c:81:9a:1a:fb:fd:06:50:
6c:b3:cd:5c:16:ab:af:bf:1c:62:f5:e2:dd:df:8c:f2:75:de:
24:7e:2f:93:9f:2d:67:db:6c:11:75:89:51:81:b9:85:8d:38:
23:84:a4:c6:4c:90:95:c9:e2:10:e5:79:51:ee:9b:aa:66:de:
89:25:58:c5:75:9d:e1:fa:19:3c:d5:c7:1d:2c:4d:4b:4d:45:
91:47:9f:22:4d:d5:29:ed:2c:e3:b4:f2:ff:ce:de:fe:06:55:
ca:ac:a2:47:de:26:bd:fe:76:fd:ef:f1:4a:4d:9a:26:54:3a:
61:e7:0d:f4:2c:86:b9:82:13:75:12:40:48:c7:c6:18:a5:22:
8c:3e:c7:1b:d8:b5:78:5b:25:50:74:43:fa:f6:18:5e:d4:85:
a6:e2:08:e1:cc:97:86:b1:63:e0:b8:68:5f:7f:ec:0d:5c:09:
10:36:e4:86:ca:e5:41:42:de:b4:e8:ce:a8:a1:c8:83:f4:dc:
a7:2f:ce:e7:a2:2f:9e:f0:d0:d1:aa:cf:3a:36:6c:f6:34:8d:
43:a3:15:04:bb:17:2a:07:2c:48:87:c4:91:b9:e0:41:9a:39:
51:36:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:29 2024 by rpki-client on console-fra.rpki-client.org