Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/trw9aa18bQvBMHTVOUETTDfv61M.roa
File: trw9aa18bQvBMHTVOUETTDfv61M.roa (raw, json)
Hash identifier: SfhOv0fzl66yVUxNa+gEuqHj84faXBoHOgbLpaZLsyE=
Subject key identifier: B6:BC:3D:69:AD:7C:6D:0B:C1:30:74:D5:39:41:13:4C:37:EF:EB:53
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 381778DC
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/trw9aa18bQvBMHTVOUETTDfv61M.roa
Signing time: Sat 01 Jan 2022 09:59:23 +0000
ROA not before: Sat 01 Jan 2022 09:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 178.175.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941062364 (0x381778dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 09:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6bc3d69ad7c6d0bc13074d53941134c37efeb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:67:4f:30:db:bd:87:d4:20:08:45:94:5d:
35:33:a0:b9:d0:bf:1f:94:dc:31:12:7a:cd:23:c3:
e3:3b:ad:a3:f3:bd:e5:be:5a:20:74:74:b8:3b:c5:
ea:09:07:d5:f0:20:fd:32:69:45:55:47:81:81:a7:
01:2f:f0:0d:ad:23:86:40:ba:ee:b1:ca:2e:49:08:
45:09:19:8e:05:35:4b:8e:9f:7f:8b:57:d1:3f:7d:
da:5a:23:c0:0e:87:22:7a:98:84:9e:3a:ee:d9:50:
1a:ec:c2:d8:06:03:be:88:1f:bc:45:47:76:27:77:
a8:f0:35:ec:df:63:cf:3b:d2:24:92:b0:1a:93:91:
a5:81:32:ea:5f:2e:f0:22:bd:4e:94:7d:8c:e0:0a:
33:07:f1:7e:2d:07:88:76:66:2e:5f:11:f2:18:9c:
98:b5:43:0f:1f:ac:87:51:b0:64:47:17:43:f7:9f:
b9:3f:28:e8:be:19:74:ad:1c:fc:6d:e8:35:a7:7e:
12:0a:2b:44:91:2f:e3:21:33:d3:d2:e8:40:65:14:
6f:c6:98:81:0e:25:d6:a7:14:d7:df:f1:76:82:b9:
29:87:c5:d0:be:b4:58:44:3d:b8:17:29:7d:0b:13:
53:79:dd:ca:67:49:e0:b2:34:c5:dc:24:f3:11:89:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:3D:69:AD:7C:6D:0B:C1:30:74:D5:39:41:13:4C:37:EF:EB:53
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/trw9aa18bQvBMHTVOUETTDfv61M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.160.0/22
Signature Algorithm: sha256WithRSAEncryption
06:b7:1b:7a:9e:35:bf:4c:e2:f3:4f:9a:bb:fc:1f:6d:6a:33:
8a:8e:99:f7:ba:05:00:d3:44:df:2c:f8:ee:df:cb:73:f7:2f:
9c:56:3a:3e:fe:42:96:2f:79:4d:19:2e:7d:2f:49:41:7a:e9:
b6:70:fb:90:4e:f0:59:93:e7:47:90:e7:ba:f3:b1:05:85:23:
93:f1:07:8a:9d:1f:9f:b7:8f:c6:7e:e3:16:e0:5c:55:ac:8c:
4a:58:93:11:f8:f0:26:cf:4d:74:64:54:61:76:ba:b0:a6:9f:
d6:18:7c:da:2c:dd:4b:6f:d9:96:c3:15:f2:15:03:b6:30:09:
af:a7:d4:ea:b2:e8:01:28:9d:56:b6:10:f6:e9:c1:31:89:63:
96:a8:e4:ee:2e:64:1d:c7:6f:60:1d:5a:d9:c7:87:09:24:c1:
22:84:44:ea:2b:63:0d:7f:3c:3c:4b:5b:d9:19:8b:90:81:cb:
05:8c:f4:8b:29:ac:47:48:b1:6d:55:32:7e:7e:3e:ce:01:5d:
51:bd:34:20:47:0a:9c:34:b7:12:ef:81:4c:48:29:36:28:64:
2d:11:80:24:46:de:ea:b9:b4:70:a0:b6:9b:ab:7a:cc:36:d7:
e5:fb:1e:88:b9:dc:b6:71:e6:cb:1b:cd:fb:9b:d0:4b:ed:82:
99:6e:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org