Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f9XSmmZyyaOoxBpu241QULiMhMg.roa
File: f9XSmmZyyaOoxBpu241QULiMhMg.roa (raw, json)
Hash identifier: 5P1kkXImuI6vo05B3oEXHFpSLyM3Ye84LPymK5eIWoc=
Subject key identifier: 7F:D5:D2:9A:66:72:C9:A3:A8:C4:1A:6E:DB:8D:50:50:B8:8C:84:C8
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0185552A6E6C7FE31AF6C8AD25F4FFD19642
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f9XSmmZyyaOoxBpu241QULiMhMg.roa
Signing time: Tue 27 Dec 2022 19:58:42 +0000
ROA not before: Tue 27 Dec 2022 19:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209311
IP address blocks: 178.219.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:2a:6e:6c:7f:e3:1a:f6:c8:ad:25:f4:ff:d1:96:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Dec 27 19:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fd5d29a6672c9a3a8c41a6edb8d5050b88c84c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:97:f0:c1:41:7f:84:53:31:14:95:e0:fa:
dc:8c:21:c4:d5:c9:f2:7e:60:21:90:6a:07:df:21:
b3:38:bc:cd:54:b1:b6:33:95:37:bc:20:de:b2:26:
db:4c:56:43:ec:f5:85:de:63:9a:52:6d:3f:53:08:
b0:74:ca:01:e1:20:f2:45:ee:a8:56:93:c5:75:43:
58:13:3b:fd:f4:bc:2d:65:da:c7:8f:0b:08:12:80:
bc:f1:f1:70:82:07:c2:29:de:eb:86:e4:d6:f3:0c:
4c:5e:a6:18:9d:dd:75:6d:2f:7a:de:69:04:4b:84:
77:fb:28:44:fc:0c:18:b3:d2:b5:fd:02:a5:08:de:
40:78:87:73:e8:2f:34:85:94:d6:6f:3a:b7:41:ef:
01:29:57:3c:5b:43:7d:fa:90:f3:e9:73:b1:a5:f4:
8e:3e:e8:79:57:50:fe:d3:61:ad:51:20:c1:59:34:
54:02:cc:ea:1b:8e:e3:d2:b0:2b:b6:67:37:be:2d:
81:81:59:e5:6f:90:47:6c:a3:f4:18:47:25:8b:c3:
3a:22:a6:1b:91:b7:04:2e:9b:3e:09:5e:89:ad:00:
82:47:f0:19:88:fa:b4:81:e4:ad:a9:8f:31:f2:c3:
1f:cc:96:66:93:c6:33:e2:64:07:ca:07:52:46:28:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D5:D2:9A:66:72:C9:A3:A8:C4:1A:6E:DB:8D:50:50:B8:8C:84:C8
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f9XSmmZyyaOoxBpu241QULiMhMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:95:58:16:6d:ab:78:40:a7:0c:89:22:e3:3e:aa:bf:d4:6d:
32:b6:fd:e9:31:0b:a2:92:b8:d3:7f:79:80:d4:1e:08:fa:b9:
cf:b0:27:9f:5d:da:b1:5b:89:16:9d:6d:db:48:66:1d:06:b9:
cc:0a:ee:2d:be:26:d5:14:20:84:a7:af:3a:dc:8c:76:a4:16:
8f:08:d1:32:b6:d2:96:db:0e:26:df:ab:4a:98:0d:92:84:11:
6b:cc:7f:2b:1d:20:fc:ad:d5:a6:a9:41:29:e0:0e:fb:55:e7:
9c:88:f7:3d:53:a5:f0:fa:eb:c2:f4:73:f0:69:78:a0:06:2f:
ff:95:c2:aa:ce:0f:f2:87:ce:e8:4e:42:57:67:83:5e:d3:80:
9c:f2:ce:b1:b9:73:9f:e3:49:31:10:0f:d2:03:65:cf:a0:ce:
9f:f2:c7:2e:b7:f2:98:f6:bf:b4:01:5d:b3:99:c0:d4:18:c2:
fe:b4:4b:ef:9f:c4:23:12:31:84:e0:f6:b0:6b:ff:d0:11:50:
bd:cd:1b:f9:98:ba:45:aa:c5:72:ed:94:ef:b8:56:24:6e:df:
94:eb:3c:ba:b9:c5:96:76:44:ee:97:8b:bc:37:c4:cd:8a:df:
64:59:30:a4:cc:40:cb:8e:73:d9:fc:ab:8e:40:6d:6d:77:0a:
2e:94:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org