Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/8r7vf33rlaH3uDKOf2eV4kP9sGQ.roa
File: 8r7vf33rlaH3uDKOf2eV4kP9sGQ.roa (raw, json)
Hash identifier: agzsaJ8PdJ/wklYM0eemGZG/Ilif8HyZ7IJY/oC+1o0=
Subject key identifier: F2:BE:EF:7F:7D:EB:95:A1:F7:B8:32:8E:7F:67:95:E2:43:FD:B0:64
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: C8FC0F
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/8r7vf33rlaH3uDKOf2eV4kP9sGQ.roa
Signing time: Tue 25 Jan 2022 19:35:17 +0000
ROA not before: Tue 25 Jan 2022 19:35:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202505
IP address blocks: 178.23.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13171727 (0xc8fc0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Jan 25 19:35:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2beef7f7deb95a1f7b8328e7f6795e243fdb064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:9c:bb:d2:73:f9:59:d0:ff:68:65:3d:b2:
12:e3:33:0f:4c:1f:02:2f:3d:d4:8c:6e:c9:3e:16:
d4:35:7a:4a:d0:02:28:3c:77:bb:09:24:55:36:0f:
b7:6a:f4:6e:5e:59:39:bf:41:f8:e2:0d:d9:51:b8:
79:bb:40:a8:56:a7:c6:a5:69:0d:35:3c:03:56:74:
3a:9a:c9:27:ab:9c:fc:62:63:ba:46:26:92:69:5a:
61:00:ba:89:2c:2a:7d:07:25:76:3e:30:ec:07:37:
a9:d9:1f:9b:9b:da:6f:ca:0f:c4:d9:59:e7:e0:7e:
7f:5f:0c:7a:df:97:60:ea:80:25:7a:7e:a8:25:83:
e3:2e:6b:4a:e2:52:93:d3:e4:42:79:e6:e2:bc:eb:
92:1d:f5:92:31:20:51:84:da:9f:9c:f1:32:ca:e3:
e6:1a:f6:3b:5c:54:6c:1b:4b:87:56:45:c0:c3:bb:
a7:20:9a:53:6b:eb:f9:24:f4:cf:ad:dc:69:45:dc:
36:11:4e:8b:e0:a8:36:d1:83:a2:0f:21:92:0f:4d:
ef:48:24:3b:8d:05:5c:9e:9a:47:7a:1a:1e:38:a7:
1d:01:c3:b9:4a:e8:07:2a:ef:53:11:c4:22:dd:b2:
e5:7e:06:86:a0:58:8d:e5:ce:42:ef:fd:44:f2:76:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BE:EF:7F:7D:EB:95:A1:F7:B8:32:8E:7F:67:95:E2:43:FD:B0:64
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/8r7vf33rlaH3uDKOf2eV4kP9sGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:90:2a:01:18:d0:2b:a9:49:1a:ff:75:49:30:58:a6:6c:7e:
4f:7b:a6:cc:4a:d7:da:7e:55:70:c7:4c:29:e2:10:8c:c5:f8:
15:dd:03:34:6f:67:f0:2c:66:59:a2:d8:64:3f:ee:60:0d:15:
a5:6b:2f:40:e6:75:2d:0c:a3:0d:42:95:7e:6e:a0:d4:57:fc:
3c:e0:fa:5b:25:e6:d5:df:7a:67:1d:a2:a3:73:25:77:fa:78:
d7:28:5c:99:2f:a1:58:62:6d:ad:e5:3d:74:75:30:73:aa:33:
fb:26:71:57:c3:35:2e:90:28:cf:da:41:f2:a3:f8:cc:9a:d1:
11:52:76:7b:5e:21:ab:f6:5c:65:87:25:6d:9b:dd:6b:51:31:
79:7e:03:d9:ec:aa:fc:51:0e:b2:1e:77:c4:52:99:2b:bf:03:
4f:cf:58:e8:0d:67:3f:9b:d8:d8:87:e2:a7:7a:9f:e0:4a:0f:
32:07:ad:c6:9b:5d:61:bd:2a:a6:bd:8a:e7:29:ef:bc:2e:5a:
e4:11:16:ad:6e:62:f0:b7:7f:73:98:21:ca:f6:c9:f9:76:8a:
4f:71:da:3f:cb:aa:17:95:1a:6d:77:dc:3a:ea:f1:bc:d0:94:
01:fe:ff:bd:03:51:11:78:13:0b:0c:b5:25:75:6a:4d:2a:7a:
e0:75:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:58 2024 by rpki-client on console-fra.rpki-client.org