Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/jgFLNquj3g9ZXwWjg1tGQaRJ8V4.roa
File: jgFLNquj3g9ZXwWjg1tGQaRJ8V4.roa (raw, json)
Hash identifier: XdPciCiKcM+ZVcZGeVFQDSHjuXRKDiFbFYfxDUKBa2M=
Subject key identifier: 8E:01:4B:36:AB:A3:DE:0F:59:5F:05:A3:83:5B:46:41:A4:49:F1:5E
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 01849C2190E8ACBBA8BA8A365EEB486A18B8
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/jgFLNquj3g9ZXwWjg1tGQaRJ8V4.roa
Signing time: Mon 21 Nov 2022 21:39:16 +0000
ROA not before: Mon 21 Nov 2022 21:39:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197494
IP address blocks: 178.218.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:21:90:e8:ac:bb:a8:ba:8a:36:5e:eb:48:6a:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: Nov 21 21:39:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e014b36aba3de0f595f05a3835b4641a449f15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:e2:cb:a8:48:3d:05:e3:a7:6f:d8:53:72:
e1:0d:82:e9:23:16:2e:75:ff:fb:3a:10:5e:af:ef:
55:0a:36:eb:bb:c1:3f:aa:61:83:56:99:7b:f2:1f:
b4:c4:86:b1:39:40:ea:2f:e7:31:aa:2f:94:fc:4e:
94:ed:a4:b6:7d:cd:72:85:c2:d8:d1:71:c7:ab:ca:
5b:31:93:a2:4b:87:c2:08:32:3b:17:af:01:13:f9:
e6:b4:8a:f3:1a:1d:40:55:7c:6f:d2:94:d9:d6:7c:
df:75:35:63:69:35:a7:dd:0a:5a:18:59:d7:f3:86:
b6:f2:5d:f5:39:79:76:c7:4a:c4:d8:04:2a:01:dd:
69:b7:f3:ce:d3:c4:7a:eb:01:7f:67:7c:a3:8d:ab:
14:aa:bb:cb:ad:05:60:9b:2a:2e:95:e6:83:5d:10:
93:84:84:3a:32:75:2b:12:bc:83:44:eb:a1:c3:02:
46:7e:8c:0c:12:69:1d:32:c3:55:92:c5:7d:0c:b0:
c0:71:0d:1a:78:45:5a:d9:a1:91:ec:5e:9f:7f:6a:
fc:33:a0:80:21:ae:16:af:3e:64:5e:56:7c:ec:a3:
45:ff:d2:ce:f3:71:74:d9:3e:eb:87:76:8a:7f:0b:
11:90:e4:8b:7f:e3:0d:ae:0b:50:97:b4:19:bb:a7:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:4B:36:AB:A3:DE:0F:59:5F:05:A3:83:5B:46:41:A4:49:F1:5E
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/jgFLNquj3g9ZXwWjg1tGQaRJ8V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.247.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e1:52:fc:84:7d:0c:0f:b3:ff:3c:32:80:8c:8a:59:e8:e6:
2d:37:bc:dc:e6:1f:ea:00:88:47:af:0c:c2:2c:c6:1f:19:24:
d4:65:7c:a7:4d:2d:dd:2e:59:1e:92:7f:5b:f8:46:e5:3b:f3:
2f:72:1f:1c:9b:bd:84:18:70:7e:35:94:0d:12:d2:d0:d3:56:
32:f3:43:dd:26:8b:1f:71:0f:80:1f:b4:ae:1c:36:57:26:62:
01:d0:8a:6a:80:f8:9c:70:b6:71:a2:77:98:8f:d8:93:2b:6e:
59:ef:0a:1a:e3:9f:55:a8:0e:8c:74:03:d6:6f:28:f6:4b:05:
3f:57:7d:2a:bd:63:b9:76:b3:57:40:a6:b4:df:f2:b9:63:a3:
49:4a:42:49:22:f0:d1:8a:66:16:36:a6:bb:ad:78:7b:43:f8:
ae:d0:0b:a9:a7:ad:57:d8:39:e9:96:31:a5:12:c6:5b:2a:48:
b3:94:74:1d:6c:56:d6:2c:e2:47:f2:55:e8:82:fb:08:f4:00:
75:b0:9a:f6:08:58:26:04:11:69:91:cb:70:a6:64:5d:5c:11:
c0:45:18:10:91:40:32:be:b2:e4:d9:d3:e3:5a:0c:06:3f:cb:
f1:d1:2e:e1:3d:0e:a2:37:7b:26:60:dc:54:ff:15:0b:89:a2:
ff:fa:80:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org