Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_R2jehiUvs86NewKdbP7BVzCIJw.roa
File: _R2jehiUvs86NewKdbP7BVzCIJw.roa (raw, json)
Hash identifier: ezyPLUdjtB5UesBnIqUInheMErepYCaMJyvzOgjYfa4=
Subject key identifier: FD:1D:A3:7A:18:94:BE:CF:3A:35:EC:0A:75:B3:FB:05:5C:C2:20:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182B65C95BB7E7F36CFD1BA2878486B9776
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_R2jehiUvs86NewKdbP7BVzCIJw.roa
Signing time: Fri 19 Aug 2022 13:48:17 +0000
ROA not before: Fri 19 Aug 2022 13:48:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 178.215.237.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:5c:95:bb:7e:7f:36:cf:d1:ba:28:78:48:6b:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 13:48:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd1da37a1894becf3a35ec0a75b3fb055cc2209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e1:96:53:49:ce:56:27:b9:9e:2a:42:c8:7f:
32:f9:e6:53:be:a6:7e:b5:37:96:0e:ce:94:49:56:
0d:b5:1d:d2:df:5e:a0:4e:35:21:ab:2d:ec:3b:da:
8f:01:b6:a4:55:76:ff:bd:2a:c0:00:d8:76:53:39:
27:10:5c:64:73:ea:8a:56:88:fc:52:50:f7:55:c1:
5d:0c:12:0c:77:3c:e0:4e:e7:ec:2d:81:76:81:cb:
52:cf:c9:2a:e1:79:df:f6:33:af:60:9a:ff:53:9c:
3b:c1:21:fc:de:6f:c9:d5:f0:bc:51:fa:b0:a4:bb:
38:9a:74:fb:74:f0:de:ed:b9:dd:05:82:d5:b6:62:
70:b4:2f:83:83:ab:10:6b:e8:39:c2:dd:ee:c2:82:
42:cc:51:3f:ab:a5:84:a1:30:75:3d:db:fe:3a:15:
49:61:5a:ee:7b:26:2c:5e:4c:33:3c:62:c5:d9:f6:
95:fd:f9:03:91:fd:d3:57:be:41:64:14:83:ae:9d:
aa:d5:1d:87:a0:29:03:9c:6b:36:8d:f9:b4:e7:d3:
39:46:55:bb:26:dd:cd:cd:28:4f:91:0a:99:24:49:
96:b6:dd:42:fc:cf:cf:f8:f0:65:a8:fc:39:91:bc:
1d:fe:cf:f2:ce:39:18:e6:a9:e4:f5:12:a1:18:c3:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:A3:7A:18:94:BE:CF:3A:35:EC:0A:75:B3:FB:05:5C:C2:20:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_R2jehiUvs86NewKdbP7BVzCIJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.237.0-178.215.238.255
Signature Algorithm: sha256WithRSAEncryption
58:7f:02:bb:a5:c6:7a:7a:16:03:8b:c1:30:cd:2c:41:ab:10:
b6:68:52:69:bf:d3:da:d6:cf:66:3e:bd:3b:00:bb:8b:9a:35:
64:20:c8:d2:6c:ed:ec:17:90:d3:01:84:16:8b:39:8f:d8:09:
c8:49:cc:4a:92:af:13:eb:95:91:d1:9e:6e:43:c1:f9:fb:13:
92:ef:fc:57:f4:f5:4e:fe:08:0d:8f:92:6d:22:06:97:fa:d6:
05:59:55:a6:10:e5:42:43:58:3f:95:80:e0:fa:37:5b:95:b1:
db:ba:2b:2d:14:1a:03:8c:98:51:bc:92:27:ba:ce:ed:98:f0:
70:fc:6d:0b:cf:5b:bd:0c:f1:8a:29:e9:d1:1a:c9:ad:f9:d2:
d0:29:98:ba:b9:02:33:d8:a5:7f:e9:80:c1:d0:a9:dc:15:a8:
72:38:90:11:b3:99:9a:47:39:d7:8c:f9:f9:0c:15:fd:12:4b:
b5:90:98:fc:82:fa:50:f7:5a:ca:a4:e9:cf:a7:16:e3:53:d1:
93:a1:48:e5:37:e3:57:a9:14:f6:57:ed:db:cb:8c:51:1c:54:
2c:fa:63:81:e3:ab:a5:1a:a5:72:88:11:55:fc:56:bf:35:21:
40:59:c5:ae:65:db:58:e8:60:42:9d:cf:f6:f7:0f:09:21:29:
73:29:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org