Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/ea57JJiSngQE3h2pfHDYBgOcXYA.roa
File: ea57JJiSngQE3h2pfHDYBgOcXYA.roa (raw, json)
Hash identifier: sxYJybUbVZNapOaCu1qSvjY0sdCjsEkIuxTKTH5VKTY=
Subject key identifier: 79:AE:7B:24:98:92:9E:04:04:DE:1D:A9:7C:70:D8:06:03:9C:5D:80
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 018562573A6C766DE719553D69DE24BE7DCB
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/ea57JJiSngQE3h2pfHDYBgOcXYA.roa
Signing time: Fri 30 Dec 2022 09:22:41 +0000
ROA not before: Fri 30 Dec 2022 09:22:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25445
IP address blocks: 193.178.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:57:3a:6c:76:6d:e7:19:55:3d:69:de:24:be:7d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Dec 30 09:22:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79ae7b2498929e0404de1da97c70d806039c5d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:5a:0b:22:6a:f3:e1:b4:2a:ba:cb:4a:67:
98:71:8e:c8:b2:79:c5:ee:de:8d:1c:97:98:da:7c:
e7:bf:1e:4e:0e:51:0e:6b:fa:16:66:67:2c:56:99:
76:1c:34:79:f2:24:9f:c4:f2:83:3b:97:c1:8e:c1:
57:df:f3:cf:47:56:13:7d:53:1d:c7:99:ef:4b:17:
e5:37:5d:ee:b7:02:5f:9e:9c:37:a5:26:91:d0:c9:
21:ee:32:01:08:cc:d4:34:d1:8c:cc:da:69:86:dc:
c2:74:ef:c3:e7:b8:55:7c:e5:b7:ce:14:8b:52:63:
aa:27:02:9c:47:74:b9:c2:f2:f3:cf:f8:f2:6a:f2:
b4:47:29:b9:97:1c:11:e7:0d:8a:22:08:53:54:d4:
f6:3b:47:1d:36:69:c4:46:da:ec:2b:7a:52:87:cd:
a8:f3:88:10:87:6b:94:dd:72:8e:c1:19:a0:14:d8:
4f:19:40:f9:ff:49:8c:47:9d:24:fa:6f:7e:c9:7b:
5c:f7:98:19:e7:1f:2f:8f:42:70:3d:fc:e6:0c:e3:
40:bd:15:c0:4e:ce:8f:6b:ae:c9:b7:ec:21:53:ba:
5c:1f:3d:d5:0e:40:d0:ef:6e:af:95:72:73:f4:a7:
9e:40:15:25:24:55:8c:f6:e7:27:28:72:cf:83:23:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AE:7B:24:98:92:9E:04:04:DE:1D:A9:7C:70:D8:06:03:9C:5D:80
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/ea57JJiSngQE3h2pfHDYBgOcXYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:26:5e:ec:51:5d:d1:00:bb:fc:34:66:f8:68:eb:06:72:bb:
a9:e5:8c:02:0e:74:14:3e:7b:dd:7a:58:46:8a:4f:33:12:da:
0c:8b:7b:9d:bf:a4:3d:fc:a3:c3:46:5b:ab:e0:f9:b8:3e:2d:
e6:b5:2c:fe:b0:0a:f7:24:4e:db:fa:03:16:dd:3a:77:0f:7e:
74:f3:b2:e8:31:9c:87:08:07:63:ce:e6:a9:88:e0:ab:52:b2:
17:97:73:ad:92:ce:83:f7:86:04:08:90:cb:b7:37:ce:32:01:
b8:61:03:db:40:86:aa:f6:32:8e:9f:91:29:1b:17:a9:6b:0c:
e1:6e:77:2e:bb:18:b2:1a:54:14:84:96:fd:52:f1:dc:4c:cf:
10:e8:c7:a4:01:c1:66:0e:f9:98:35:f9:37:aa:6e:63:9d:83:
32:bc:b9:4c:8a:50:7d:e2:10:8c:dc:7d:f9:d2:e6:45:6d:84:
b4:fe:f7:86:aa:de:6d:f7:fc:8a:ec:af:a7:04:91:81:07:73:
ab:2b:eb:bf:94:de:54:32:19:58:6b:af:58:61:8d:9a:0e:b3:
7d:15:67:73:7a:c1:67:e8:e0:c0:53:08:5e:55:10:13:83:cd:
02:b6:72:68:14:65:5e:2b:bb:97:58:56:c8:69:30:09:2f:62:
43:f1:3d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:45 2024 by rpki-client on console-ams.rpki-client.org