Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UkTYpToCeWMJvANt3KZ0tInFQIw.roa
File: UkTYpToCeWMJvANt3KZ0tInFQIw.roa (raw, json)
Hash identifier: O0RNZY8YIqA6+x03gdo5tIenp+beBZ0y2Eireg/qqHg=
Subject key identifier: 52:44:D8:A5:3A:02:79:63:09:BC:03:6D:DC:A6:74:B4:89:C5:40:8C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0935F38F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UkTYpToCeWMJvANt3KZ0tInFQIw.roa
Signing time: Sat 01 Jan 2022 16:00:59 +0000
ROA not before: Sat 01 Jan 2022 16:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212508
IP address blocks: 178.218.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154530703 (0x935f38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5244d8a53a02796309bc036ddca674b489c5408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:ae:f4:af:f9:f7:12:6b:55:75:ea:9e:97:
9b:f8:c4:af:de:9e:0f:75:6e:82:3c:3c:51:59:8e:
1a:64:32:b1:f1:0d:01:5b:4e:89:33:83:ca:09:56:
5e:be:d7:c0:48:46:0e:bd:bf:02:ff:b8:7c:ba:f0:
6d:08:bb:9d:b9:59:0c:ad:d8:7f:8c:8d:78:ac:e7:
2c:a9:55:78:67:79:0c:5e:86:f9:c8:17:94:e5:ad:
c5:0f:2d:da:b8:db:3c:0b:0c:14:ee:49:21:72:da:
85:03:8f:02:f8:ce:a8:6b:a0:6b:2f:09:c5:6b:b6:
f2:ad:c6:d6:fd:e5:5f:bc:3b:5a:a6:c0:b6:99:50:
2b:81:bf:75:87:72:40:66:97:5a:96:da:ab:00:b8:
ad:33:29:1d:cd:1e:e5:3a:a5:7e:65:63:ab:d7:be:
40:7a:12:b3:08:c0:6b:19:df:ac:6f:de:0d:70:fe:
e6:4c:b9:7e:67:9e:69:e8:f4:70:d1:68:99:db:36:
ab:5b:29:8e:90:a2:1b:f5:3e:f7:06:56:40:f5:7a:
0c:81:da:a7:fe:f1:08:08:53:d7:84:be:5f:a9:8c:
3d:3c:49:1a:8b:5f:35:e3:ea:a0:43:7e:20:c5:41:
a2:63:5f:3e:88:b2:fd:4a:92:04:8b:aa:eb:56:74:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:D8:A5:3A:02:79:63:09:BC:03:6D:DC:A6:74:B4:89:C5:40:8C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UkTYpToCeWMJvANt3KZ0tInFQIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.144.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b9:52:96:26:06:b3:cb:a5:b0:d5:28:f4:7f:84:ba:e8:be:
3e:72:68:6b:c4:42:75:d3:8f:91:28:41:30:2b:0b:29:85:4c:
50:32:83:33:5d:09:e1:09:d9:39:c1:bc:85:4d:c2:06:4f:0c:
23:bb:be:43:ff:23:86:6f:2f:03:af:25:4b:39:f4:9c:d5:f7:
6e:c8:11:5b:84:83:23:a3:2b:a5:94:35:3a:86:e7:04:ed:04:
b2:1a:33:19:bf:aa:d4:0c:fd:90:a6:57:e2:57:70:42:9d:65:
ed:56:d2:d3:c5:8e:1e:6f:e7:f3:d9:63:c8:bd:c6:33:50:f5:
bf:d4:df:ee:82:2e:5e:74:cb:f7:39:c6:c6:53:04:61:fc:c4:
4e:39:0d:57:85:4d:94:72:dd:02:9d:15:63:02:4c:f7:3d:ab:
fc:0d:1b:96:a9:d4:6f:d2:a0:db:cc:c6:33:70:b3:fa:28:c0:
97:92:d1:32:d7:a0:d6:b2:55:2e:ee:05:f9:3f:58:98:b4:f8:
bf:85:ee:a7:3e:3a:8d:d4:74:19:32:0a:11:bd:f0:35:70:6f:
08:65:ed:83:40:23:11:b3:cb:ae:29:82:14:37:3c:b3:f4:5c:
7c:a6:91:d6:1d:62:54:c9:0d:ea:99:51:18:f3:34:8b:4c:7f:
c7:ae:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org