Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/V-bJkbFUffrZzX0t93jufUZdCfg.roa
File: V-bJkbFUffrZzX0t93jufUZdCfg.roa (raw, json)
Hash identifier: UJdWK1T9rPoxDqvB/jI9Gc/ZcB4RjJevu5T3chC84yg=
Subject key identifier: 57:E6:C9:91:B1:54:7D:FA:D9:CD:7D:2D:F7:78:EE:7D:46:5D:09:F8
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AEF0BCB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/V-bJkbFUffrZzX0t93jufUZdCfg.roa
Signing time: Sat 01 Jan 2022 13:57:51 +0000
ROA not before: Sat 01 Jan 2022 13:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33895
IP address blocks: 178.16.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720309195 (0x2aef0bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57e6c991b1547dfad9cd7d2df778ee7d465d09f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:5a:24:71:de:f2:d9:f8:7a:26:b2:52:47:
89:e5:d2:c0:58:a2:d1:3c:4c:cf:b1:05:78:5b:02:
a9:dc:df:6b:50:cb:78:21:bc:68:6e:b8:37:17:d7:
56:82:5e:9c:5c:81:ba:48:c6:4e:43:41:21:fa:c5:
7b:83:24:65:41:cd:58:63:60:65:eb:07:97:6a:e8:
4c:33:ae:24:03:2f:fb:5f:cf:50:bb:ac:2e:6b:2b:
39:38:70:22:dd:e4:4b:e5:b5:ec:3c:df:3c:d2:3d:
71:97:15:ca:61:7b:40:ff:12:c5:f3:32:a9:6e:a8:
c0:a7:0b:0a:bf:dd:81:02:8c:d2:69:35:8b:ca:d3:
00:98:15:04:1c:6f:2c:71:72:e3:a8:c9:7d:9f:6c:
9a:52:4a:10:fe:64:ac:d8:ee:63:ad:2c:e7:98:11:
49:fa:7b:a6:b2:dc:61:fe:1d:4e:00:13:77:e3:73:
af:c2:55:19:15:1d:02:c4:a8:b9:d3:ff:e4:59:59:
a5:7b:25:d4:3c:2b:fc:eb:ec:28:4e:3e:04:5d:29:
b9:41:b0:93:77:c3:64:b3:f2:3d:d4:45:0a:14:49:
e9:a6:71:4e:09:60:88:ba:b8:23:70:04:7d:61:27:
5a:ff:1f:7d:46:74:a4:f7:8e:c8:ea:32:03:78:d4:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E6:C9:91:B1:54:7D:FA:D9:CD:7D:2D:F7:78:EE:7D:46:5D:09:F8
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/V-bJkbFUffrZzX0t93jufUZdCfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.112.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f5:6c:f4:5c:31:d7:d2:4d:e5:67:35:3b:ec:48:6e:ae:9a:
ed:0a:42:0c:65:b3:cd:ae:53:9b:ea:84:82:b9:82:f1:6d:f7:
0d:02:2a:b5:9e:5d:42:2c:b5:94:89:56:fd:aa:4e:e1:82:12:
3c:9b:21:14:bc:d2:cb:ea:96:4f:2a:89:be:e4:a3:1f:d8:de:
21:b3:8d:a7:a6:a6:b7:b1:f9:40:7b:fe:cf:9d:0d:7b:2e:d3:
9b:01:da:2e:6c:21:e4:79:ee:7c:a9:a7:e8:84:b1:34:2a:ed:
22:9e:63:50:1b:1c:40:ef:be:64:d3:80:1d:9f:08:66:e8:70:
9d:dd:dc:22:56:c6:00:a5:31:5a:15:f8:05:ea:db:52:b1:82:
81:ad:5d:11:9f:cf:76:0c:3c:50:b6:ff:df:1f:71:25:dd:a7:
08:df:9e:ad:2c:41:8d:c7:32:9f:ad:16:fd:01:71:63:e3:c0:
bd:71:e3:1d:0d:92:4c:30:e1:81:10:a4:e8:6a:34:fb:5e:ae:
d4:e1:6e:c7:78:38:1a:a4:da:84:0a:27:af:1e:9a:e4:5d:e2:
7f:38:35:e9:97:aa:a8:e5:1e:3c:08:c1:67:82:15:07:cb:8c:
b0:e9:14:e3:00:23:a5:8b:83:ec:b2:ed:65:ab:6b:35:b9:6c:
91:63:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org