Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/iHsdbuJSTgB6NfegiUH3xXpkpoQ.roa
File: iHsdbuJSTgB6NfegiUH3xXpkpoQ.roa (raw, json)
Hash identifier: kU/acPvejrdKP00iP4ttsKC7Drg58c2hFJXBPu+don4=
Subject key identifier: 88:7B:1D:6E:E2:52:4E:00:7A:35:F7:A0:89:41:F7:C5:7A:64:A6:84
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 044106A0
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/iHsdbuJSTgB6NfegiUH3xXpkpoQ.roa
Signing time: Sat 01 Jan 2022 11:58:56 +0000
ROA not before: Sat 01 Jan 2022 11:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48506
IP address blocks: 178.76.64.0/21 maxlen: 32
178.76.72.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71370400 (0x44106a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Jan 1 11:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=887b1d6ee2524e007a35f7a08941f7c57a64a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:d7:9f:de:bb:d8:c5:13:87:9f:75:47:48:
5a:45:29:60:3a:eb:f8:e5:09:b0:89:d3:3e:c8:a6:
49:e4:e8:b8:b6:48:b2:2f:2c:df:b3:97:1e:7e:58:
8b:3c:ab:1c:39:df:8d:5b:dd:95:ba:97:ad:93:d3:
ec:18:f1:7d:d6:7d:a1:67:1f:61:aa:59:e4:04:24:
a4:0e:e8:4d:94:69:64:da:3d:a4:b4:c4:e4:5f:38:
33:f1:c8:d9:67:e1:a6:7b:88:bd:b2:38:95:02:32:
1b:40:1a:9e:87:fd:6c:13:13:87:fe:2b:09:15:9e:
95:a1:6f:99:83:3b:6e:2f:20:22:80:e3:c3:56:3a:
a5:05:bf:79:83:44:4a:71:74:7e:3b:e9:44:4c:62:
fd:45:7b:ea:0d:86:83:fe:0c:c8:1c:04:7c:4c:b9:
69:f2:0b:a5:87:59:52:da:61:58:aa:5c:a3:6c:f4:
c0:82:f7:fc:87:8e:d0:29:29:c3:d4:33:9a:f8:66:
fa:c6:b8:44:3f:4d:5a:bb:3d:99:ac:15:ab:aa:9c:
69:66:f8:18:ee:2d:41:80:34:e4:fb:5c:88:7b:66:
68:9d:81:d3:0a:2f:56:40:08:83:e5:72:4b:d2:a9:
17:14:b3:8a:e0:36:42:b2:d9:ee:79:44:d0:77:57:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:1D:6E:E2:52:4E:00:7A:35:F7:A0:89:41:F7:C5:7A:64:A6:84
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/iHsdbuJSTgB6NfegiUH3xXpkpoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.76.64.0-178.76.75.255
Signature Algorithm: sha256WithRSAEncryption
26:0a:b5:03:be:10:90:cf:45:4a:d2:68:18:f3:42:8d:8d:c3:
e5:dd:dc:e4:e4:15:14:7b:f3:7e:11:1b:8e:45:2e:2c:8a:39:
06:04:2f:28:62:2e:99:15:d0:4a:f5:a4:bb:04:43:ea:09:b2:
c7:19:54:73:f2:34:e6:8f:56:71:72:97:f2:e1:6d:2e:1e:53:
02:58:df:b5:de:de:d1:ff:8c:81:13:59:57:db:45:fa:04:78:
cb:fd:e9:2b:70:94:f9:7a:9e:c0:e6:ab:14:c9:23:f7:46:d6:
0f:50:ce:42:1a:6e:01:51:8a:a1:93:72:ec:68:b2:9a:da:3a:
49:e1:f7:27:74:0e:b0:ff:ca:f6:57:5a:95:4a:bb:8c:16:04:
62:ff:cc:1c:39:f4:26:70:35:c3:e3:9d:e4:7f:cf:ca:d4:40:
3e:46:43:06:3a:38:d8:7d:ed:d6:e3:ef:4f:b8:dd:e3:ac:41:
49:c7:d0:e4:bc:36:a9:f1:40:a3:b9:32:1b:fe:6d:f6:58:ba:
5a:a0:0b:fc:e6:9d:53:cf:3c:91:c6:24:c1:bc:8e:ea:0c:fb:
04:cb:25:ef:2a:3f:43:19:18:5e:9d:91:53:d5:42:30:c6:57:
ee:12:1a:bf:6b:1f:a1:20:8e:5b:c6:e7:ba:25:7b:a9:8d:df:
cb:21:5a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:32 2024 by rpki-client on console-ams.rpki-client.org