Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/2fF4DhtXjayjzP0DvDkfV6PUZr0.roa
File: 2fF4DhtXjayjzP0DvDkfV6PUZr0.roa (raw, json)
Hash identifier: nUiZUWOgWZMHJRASsktSM4USB9pfc64y1NL9sH8BRJw=
Subject key identifier: D9:F1:78:0E:1B:57:8D:AC:A3:CC:FD:03:BC:39:1F:57:A3:D4:66:BD
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AF69112
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/2fF4DhtXjayjzP0DvDkfV6PUZr0.roa
Signing time: Sat 01 Jan 2022 13:57:56 +0000
ROA not before: Sat 01 Jan 2022 13:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61078
IP address blocks: 178.16.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720802066 (0x2af69112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9f1780e1b578daca3ccfd03bc391f57a3d466bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:8f:22:10:03:4f:0c:22:1f:57:0f:df:f3:
9d:99:05:ef:4d:90:7c:97:4f:7d:1c:a5:0f:fe:f0:
0a:75:8b:1e:a9:ea:b4:93:6f:91:4f:f6:5d:6c:b1:
34:ba:92:e4:1a:9e:74:dc:28:ba:8a:f3:fd:f0:73:
5d:85:81:c6:71:64:6e:2d:67:c3:78:3e:d5:8c:b3:
a8:f4:7c:37:f0:e2:6a:92:54:bc:90:b2:1a:4c:f3:
ed:fb:9c:41:90:19:2b:4c:3a:83:46:ce:e2:f3:e6:
43:38:56:d0:35:e8:4a:bf:a1:40:d2:6c:39:f8:59:
4d:e0:4e:ec:e4:71:49:8e:2f:1a:c5:17:8e:76:82:
59:c8:b8:00:24:57:0b:ec:36:ba:7d:39:07:b7:bb:
86:ba:c5:60:2d:c9:4d:8d:04:d1:fc:ec:c9:93:89:
ec:12:a9:4c:19:10:6d:59:b8:37:d4:bf:93:6e:2b:
de:af:c1:c5:dd:62:8d:4b:a5:0a:7f:58:fc:1a:64:
5b:95:3d:a5:45:86:e7:dd:43:9e:77:fe:bf:db:f6:
d6:d7:c5:e9:e8:65:9d:37:98:a1:39:21:09:3b:7f:
78:aa:5f:9f:ed:91:90:8d:70:c7:a3:3a:0d:ac:8f:
93:8f:ce:27:2a:7e:8e:b2:5e:a4:e1:ba:0a:2c:9e:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:78:0E:1B:57:8D:AC:A3:CC:FD:03:BC:39:1F:57:A3:D4:66:BD
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/2fF4DhtXjayjzP0DvDkfV6PUZr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.113.0/24
Signature Algorithm: sha256WithRSAEncryption
96:75:d7:be:a8:e7:57:08:d2:9b:2e:23:1f:dc:48:31:ba:83:
f7:4b:6e:c3:62:d6:98:64:47:d3:3a:a0:ca:0a:fc:86:10:8f:
54:a0:b8:b9:6f:16:53:f2:0a:3d:93:e7:99:2a:0c:79:fb:2b:
1e:87:f8:f6:27:12:bc:59:8d:54:28:28:77:0b:43:3c:36:b8:
b5:0a:89:3d:cd:81:8b:ff:4f:4b:c9:f0:b7:3d:bd:da:42:79:
89:40:fa:e5:a7:44:2e:3d:70:5e:b0:cb:b7:f5:40:1e:57:c3:
eb:fb:3b:f8:18:f1:eb:c9:5b:4f:6d:7c:bb:14:04:5a:e6:41:
e7:55:e5:47:69:72:af:2f:43:2b:64:6d:08:f7:c4:84:b8:5f:
1c:0d:83:64:ee:79:bc:f9:82:6f:26:04:78:a9:52:f3:bb:5a:
25:eb:1e:d9:67:6a:d4:08:18:da:ef:ec:2d:35:af:0f:78:58:
b8:3d:13:05:45:d5:6c:30:54:d0:bf:11:84:7e:2d:ed:ea:5e:
d7:4d:5f:a8:c1:01:6f:d0:d1:73:6d:12:80:2e:5b:4a:30:83:
6b:01:b4:1a:b6:84:be:02:91:f9:54:a4:42:1d:c3:06:45:3b:
31:e9:7f:4b:ea:61:6b:64:75:ea:6b:38:46:49:ad:20:b2:01:
55:28:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org