Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/yFwINwZynpMwWZKKHlfSg6a4iew.roa
File: yFwINwZynpMwWZKKHlfSg6a4iew.roa (raw, json)
Hash identifier: DM0Sr6JFasKTRUmTTKTIhQgRXvd/OPROlNSK4Z8X3tw=
Subject key identifier: C8:5C:08:37:06:72:9E:93:30:59:92:8A:1E:57:D2:83:A6:B8:89:EC
Certificate issuer: /CN=4e259d806139f953e47c350904aaceec6cc39a1f
Certificate serial: 015D167C
Authority key identifier: 4E:25:9D:80:61:39:F9:53:E4:7C:35:09:04:AA:CE:EC:6C:C3:9A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiWdgGE5-VPkfDUJBKrO7GzDmh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/yFwINwZynpMwWZKKHlfSg6a4iew.roa
Signing time: Tue 08 Feb 2022 07:40:14 +0000
ROA not before: Tue 08 Feb 2022 07:40:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 178.255.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22877820 (0x15d167c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e259d806139f953e47c350904aaceec6cc39a1f
Validity
Not Before: Feb 8 07:40:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c85c083706729e933059928a1e57d283a6b889ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:dd:ea:89:c1:a0:b6:0a:03:a2:5f:93:20:
3b:a6:56:fc:ba:c5:3e:0d:79:a4:cf:13:d0:07:74:
18:ea:ce:d7:4d:47:bb:da:50:d3:67:4c:96:03:58:
d4:54:10:e0:a3:fa:be:15:f3:b3:d0:b2:70:9d:03:
e3:92:6e:27:25:78:57:d1:bc:1d:a3:2a:37:cf:82:
d7:ff:b4:2f:ea:ce:cd:89:80:04:15:a1:90:a1:4e:
dc:f5:65:4b:2a:d3:9f:9a:77:7a:48:c4:79:22:90:
4c:b3:0a:62:4f:1c:31:1f:dd:00:ff:76:a1:82:0f:
fc:40:e9:8c:5a:c5:4d:84:13:80:14:b8:1f:9e:f0:
d1:38:55:ff:7f:33:b1:0e:4d:70:ab:1d:4a:a9:d1:
8c:c3:5c:ba:26:19:44:2b:18:c0:2b:ed:16:02:36:
09:76:59:b0:c5:ac:8c:8a:bb:32:06:b7:c0:11:49:
97:34:5b:3f:90:ce:bb:42:0f:1a:03:69:6d:65:84:
31:76:9c:2a:c0:f6:c5:b4:4b:68:99:53:69:9b:ef:
8c:f0:dc:ac:58:0f:4b:8f:58:ea:4f:b3:90:32:fa:
50:d8:47:a9:91:96:83:f2:25:d6:7e:cb:fc:a2:c7:
6b:eb:0e:46:ec:a5:90:a0:20:1c:53:a3:13:3e:2c:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5C:08:37:06:72:9E:93:30:59:92:8A:1E:57:D2:83:A6:B8:89:EC
X509v3 Authority Key Identifier:
keyid:4E:25:9D:80:61:39:F9:53:E4:7C:35:09:04:AA:CE:EC:6C:C3:9A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiWdgGE5-VPkfDUJBKrO7GzDmh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/yFwINwZynpMwWZKKHlfSg6a4iew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/TiWdgGE5-VPkfDUJBKrO7GzDmh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:92:ce:f9:4a:a2:d1:21:cb:6c:5f:8e:cf:fd:f7:0b:28:c3:
11:77:1d:78:68:85:7d:5c:09:99:d0:11:cf:62:3f:21:4a:ba:
53:b6:63:56:61:1c:30:e8:f9:8a:8c:ce:85:38:b6:43:19:56:
a7:0e:91:3b:c5:11:97:41:bd:de:d3:d7:08:54:1d:76:7a:b6:
11:88:e7:8b:39:6b:77:ac:2f:b3:87:1c:79:c5:84:55:58:46:
67:6b:f5:29:12:5f:6d:f2:b0:55:56:19:12:17:96:ae:92:cb:
38:6f:bb:6a:6a:1b:3c:7e:b0:0d:94:83:37:3b:a5:e9:f4:16:
b3:ad:99:49:bd:53:81:07:ae:ef:43:b1:24:19:1a:8b:e0:3e:
ae:f2:9c:34:49:a1:be:0c:32:a9:a1:0a:5a:17:4d:25:16:0d:
b2:69:f7:26:70:37:db:96:63:60:eb:b5:53:28:2a:fd:13:1b:
7c:ea:db:2c:ae:8a:84:b2:68:45:7b:ca:24:c4:b3:87:a2:bc:
d5:f7:03:b1:38:74:85:6f:dc:aa:00:a6:7d:75:e2:1f:96:6c:
97:80:b4:7b:61:ff:02:db:9f:8e:ef:c8:00:99:ed:02:6f:e8:
89:91:7f:6f:81:d0:f9:ec:6a:9f:83:25:c1:42:03:c6:f6:c0:
3c:e1:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:59 2023 by rpki-client on console-ams.rpki-client.org