Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xbkAQMyCuTQH2GVDKILzBC_WEOc.roa
File: xbkAQMyCuTQH2GVDKILzBC_WEOc.roa (raw, json)
Hash identifier: 04l8ofofVmFb8gnhKI5lW/+6uM1dD5AKvKQ8/o3dGyo=
Subject key identifier: C5:B9:00:40:CC:82:B9:34:07:D8:65:43:28:82:F3:04:2F:D6:10:E7
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09041AA8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xbkAQMyCuTQH2GVDKILzBC_WEOc.roa
Signing time: Sat 01 Jan 2022 16:00:26 +0000
ROA not before: Sat 01 Jan 2022 16:00:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43233
IP address blocks: 178.218.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151263912 (0x9041aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5b90040cc82b93407d865432882f3042fd610e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:60:7b:a5:06:7d:fd:5a:b6:fb:06:9b:69:
89:09:f5:18:74:f5:42:6e:66:92:39:43:f9:43:ab:
06:ea:b1:ed:d2:70:a3:54:f5:76:67:a8:cb:65:df:
0d:ae:c1:97:1e:7c:ee:72:72:2b:0c:17:ff:24:45:
d6:7c:31:b0:11:7b:a6:98:66:24:04:42:d1:06:79:
8d:bb:db:fe:f5:5e:59:98:69:4b:1d:a7:d4:f3:83:
bb:cd:51:62:ae:45:eb:b8:8c:aa:f2:6a:a1:f9:5d:
88:46:52:50:86:1e:66:66:dc:fa:05:6f:fb:c1:08:
b3:9b:f7:f1:c5:11:d9:aa:a0:49:c4:06:6a:57:05:
32:17:0a:bd:28:ac:7d:08:6a:0d:52:e1:52:6c:08:
d8:0c:46:a1:82:6b:32:3c:22:14:26:ac:36:0a:8c:
d2:f0:62:7b:5a:d6:fb:7b:1e:38:ad:aa:66:5f:e5:
22:88:2c:7b:f1:44:62:2c:69:e6:2c:36:e2:d8:17:
e0:91:5e:70:91:a8:52:bf:e1:25:c2:1f:1b:52:c6:
19:4f:b8:ed:d0:85:9f:25:08:da:2e:10:4e:fa:89:
dd:61:20:62:bb:ff:02:c4:df:62:b2:e8:6f:ae:08:
b4:cc:37:ab:f8:11:13:0e:dc:aa:11:23:97:9b:82:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:00:40:CC:82:B9:34:07:D8:65:43:28:82:F3:04:2F:D6:10:E7
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xbkAQMyCuTQH2GVDKILzBC_WEOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.145.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0e:2e:01:0b:76:17:5e:5c:4d:73:18:dd:ee:ab:77:b6:0c:
70:e8:b3:08:53:1b:5b:d4:a0:27:5b:bf:27:52:f3:6f:43:69:
3e:7e:3f:d2:5d:c8:31:4f:1f:72:65:d9:27:ef:97:c1:d8:85:
08:4d:e3:3d:4d:f9:c4:7b:08:d3:83:e5:6f:1f:89:ab:f3:85:
eb:40:ce:82:66:19:4b:01:a5:dd:71:67:66:c5:30:9c:e8:b3:
80:11:59:2f:b1:41:98:b2:13:05:09:2a:0e:2c:6a:a2:d2:81:
8f:09:1c:04:42:15:88:90:20:a6:62:42:ba:b1:83:f4:96:a3:
d0:58:e3:12:47:c6:15:d1:eb:ba:97:f7:16:11:43:9c:98:eb:
2e:a0:85:50:60:e2:7b:7e:b1:62:ff:48:81:50:45:bc:30:2c:
bb:94:ca:a2:20:9f:e1:56:3e:0a:7e:14:e7:69:db:26:f1:27:
83:7e:83:50:10:51:83:d7:a4:58:7f:6e:43:aa:73:cb:e3:f9:
68:d7:6b:d3:80:09:20:aa:7e:8a:fc:7b:42:56:b9:41:a1:cf:
0e:23:ed:49:83:9e:a6:ab:69:5e:1e:d2:0c:28:f4:89:29:9f:
04:1b:51:9e:a1:03:8a:8f:5a:94:3b:18:33:e0:6d:d0:de:4d:
f9:49:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org