Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9k0DsZLkvI6CvXWVOazYwtdFcQc.roa
File: 9k0DsZLkvI6CvXWVOazYwtdFcQc.roa (raw, json)
Hash identifier: fhaRynCvaEQuaQHfm7EPbhuIzlchbDtgd1NXA61ae7Q=
Subject key identifier: F6:4D:03:B1:92:E4:BC:8E:82:BD:75:95:39:AC:D8:C2:D7:45:71:07
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F07860
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9k0DsZLkvI6CvXWVOazYwtdFcQc.roa
Signing time: Sat 01 Jan 2022 15:59:59 +0000
ROA not before: Sat 01 Jan 2022 15:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 178.218.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149977184 (0x8f07860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 15:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f64d03b192e4bc8e82bd759539acd8c2d7457107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:f2:02:2f:ec:bc:bb:01:87:78:f9:65:7e:
92:3a:e4:43:ea:34:8c:eb:9a:b8:71:da:2f:f6:03:
06:91:7c:c3:3e:05:49:28:c0:e6:11:57:ae:c1:b8:
be:30:ad:4a:90:8d:af:2e:a5:e1:eb:4e:ca:73:51:
4c:b8:a1:bc:b8:1a:3d:21:a1:ac:94:d3:56:24:6a:
23:d1:f3:f9:e9:6f:74:3a:4c:32:5a:bc:fa:2b:fe:
39:47:fb:a2:aa:50:12:78:22:d7:18:fd:a6:b2:97:
98:eb:08:3d:36:a6:d6:44:76:cb:52:f5:84:ff:40:
75:3e:69:fc:30:f5:65:33:bc:71:0c:68:e0:d2:ce:
4a:ae:c1:42:12:64:69:3c:bb:7c:a1:22:8c:a4:af:
e2:66:3e:67:b6:c0:56:eb:b1:be:35:51:71:b4:97:
67:97:3c:98:e7:55:5a:fa:ec:18:88:04:45:f6:e6:
ac:ca:7d:8c:c8:1d:15:ee:c2:6e:23:f4:00:94:6e:
67:ec:43:9f:1e:ae:43:22:56:07:bd:c4:0b:bb:f4:
91:ce:98:ea:9f:22:54:a0:24:f0:77:51:5c:6f:1c:
70:bd:63:a3:f2:bd:f5:ab:ab:2b:1e:21:81:49:25:
db:e1:58:a4:fa:11:74:e3:01:65:86:da:b7:4c:c8:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:03:B1:92:E4:BC:8E:82:BD:75:95:39:AC:D8:C2:D7:45:71:07
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9k0DsZLkvI6CvXWVOazYwtdFcQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.145.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:4e:3e:0b:76:e9:41:6f:ca:52:a7:9f:07:d2:17:62:a9:79:
b5:19:66:24:a7:d1:53:1c:f0:da:fe:06:5a:8e:a2:6c:f8:1f:
8d:4d:ec:2d:21:a9:dd:f2:99:68:d3:1e:52:ab:22:9a:13:d0:
ae:da:e6:fe:6d:b3:12:13:9d:29:64:a9:16:b1:e8:80:b6:03:
32:b9:42:5c:bb:65:6a:8f:b0:87:e5:33:cc:d0:15:7f:50:81:
14:3c:de:70:49:4a:3f:a4:75:50:81:0b:1d:2d:1d:30:46:2d:
10:26:50:2d:63:80:72:04:80:14:06:f2:00:87:cf:dd:20:ba:
65:c7:98:ca:c4:18:aa:c1:d8:b2:2e:a9:61:8d:0e:4d:98:1b:
c9:85:30:b8:ab:86:46:de:0f:47:6f:4a:47:b8:6f:9e:00:86:
de:c1:9e:55:d3:95:c7:cc:75:8d:9d:ab:63:e9:ba:8f:53:fe:
6f:ce:c2:b4:07:86:c3:73:40:09:09:56:73:a0:0e:22:62:d6:
ec:dc:6f:72:2a:ac:b5:d7:40:16:a1:ea:68:8a:58:e5:3e:e5:
69:ad:fc:24:4e:5f:6f:d4:75:71:d6:4c:cf:3b:d3:bf:74:10:
a3:a4:cf:0c:05:4f:35:16:ac:8f:fb:70:d8:e4:1d:b1:25:df:
3b:5b:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org