Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KuA__Yk8a-VzOmAijRsELURSoFo.roa
File: KuA__Yk8a-VzOmAijRsELURSoFo.roa (raw, json)
Hash identifier: rMLJTPsKwcIqT8MsEcyJmPUIcwCMF4f8fthw3NY7JEI=
Subject key identifier: 2A:E0:3F:FD:89:3C:6B:E5:73:3A:60:22:8D:1B:04:2D:44:52:A0:5A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AFBC000
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KuA__Yk8a-VzOmAijRsELURSoFo.roa
Signing time: Sat 01 Jan 2022 13:57:58 +0000
ROA not before: Sat 01 Jan 2022 13:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198489
IP address blocks: 178.16.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721141760 (0x2afbc000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ae03ffd893c6be5733a60228d1b042d4452a05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:97:b0:da:4e:de:b4:f6:e4:7e:de:38:b9:
53:f5:1d:1a:8d:58:f8:23:47:bc:54:de:77:53:89:
ac:db:2d:9d:d5:d2:0f:d5:bd:61:89:5d:7c:e4:8b:
e6:92:a1:80:e9:6b:89:d9:42:4e:a1:14:77:e1:15:
82:95:28:8a:b9:7d:48:68:f5:53:ec:26:99:5c:a7:
70:94:dd:84:74:bc:81:eb:b9:29:d1:6e:8a:51:2b:
f4:1f:3a:73:b1:6e:67:94:3f:13:ca:c0:78:ce:a5:
6b:88:95:f4:95:3e:17:d9:04:13:a8:d8:e4:30:7e:
e1:6a:9a:10:e4:5d:44:45:fe:a9:aa:65:bf:64:c9:
78:a2:83:a1:39:47:15:3c:d5:2a:c0:7b:99:2d:9c:
c9:38:38:46:99:d9:2b:ee:1f:78:e4:11:92:10:ff:
a3:0e:06:bd:e7:a9:2d:9e:5a:85:37:99:c0:a7:ec:
8c:fa:e2:9c:20:ff:2b:bb:0f:3a:7d:07:86:25:44:
ea:8d:33:18:d1:16:aa:f5:d3:25:21:e1:86:1e:7a:
4d:27:ab:e3:a5:b6:74:5c:5d:1a:10:d1:ae:d0:f4:
b3:ac:19:9c:39:df:78:28:0a:ff:72:31:61:5d:c0:
36:77:a4:1d:46:54:07:c7:da:81:75:c9:ca:9d:69:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E0:3F:FD:89:3C:6B:E5:73:3A:60:22:8D:1B:04:2D:44:52:A0:5A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KuA__Yk8a-VzOmAijRsELURSoFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bb:b7:cd:ea:1c:da:41:7b:d8:73:d0:4b:12:03:a1:ca:24:
e0:7b:01:70:c1:55:11:f6:eb:0f:f8:fe:cc:52:30:a1:76:e5:
09:8c:4d:9a:c4:d1:df:a0:0e:b1:da:53:08:c6:a7:b6:58:91:
77:a2:1f:57:98:45:22:1f:2d:c3:41:1e:05:99:a6:89:5c:94:
18:fe:0e:0f:19:81:a2:ed:41:b8:dd:79:5c:0a:a9:e3:be:86:
d2:c4:14:23:9e:77:d1:9e:66:e5:6e:19:68:a9:4d:1d:a9:70:
80:31:1a:71:e6:ba:e5:00:cf:87:97:d1:dd:b6:a3:8c:6a:f0:
f8:a4:a5:31:f3:14:72:ba:79:3c:c9:ee:6b:f1:f4:db:fc:5a:
81:c8:9e:ec:32:29:e9:52:e8:9e:91:ff:21:39:20:45:7d:68:
b5:75:5e:86:61:ef:03:01:1d:ec:98:9e:82:2a:f1:d9:a7:5d:
cd:00:f2:37:52:da:85:cf:d7:50:df:23:e1:18:5b:10:19:4c:
1a:44:87:57:05:12:bd:c7:87:e4:1a:a1:5e:91:7a:e0:f9:b4:
c0:2c:11:4c:98:fa:a5:5a:a4:f5:93:e4:42:e2:f7:27:4f:7e:
2e:63:8d:ca:ad:fc:d6:b0:45:00:ed:c8:12:ba:d4:49:f7:38:
09:f1:bc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org