Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/7d0YA6pWJfhHvN7FMTErT3SnsPo.roa
File: 7d0YA6pWJfhHvN7FMTErT3SnsPo.roa (raw, json)
Hash identifier: HozNyhJkdNYzYg2gaCFkfL1i+Xd1xAIlic/bddrwpYs=
Subject key identifier: ED:DD:18:03:AA:56:25:F8:47:BC:DE:C5:31:31:2B:4F:74:A7:B0:FA
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 0183466DD7207F99F0AA7B135A559974E946
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/7d0YA6pWJfhHvN7FMTErT3SnsPo.roa
Signing time: Fri 16 Sep 2022 13:12:27 +0000
ROA not before: Fri 16 Sep 2022 13:12:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211347
IP address blocks: 178.237.201.0/24 maxlen: 24
178.237.207.0/24 maxlen: 24
2a04:7e00::/48 maxlen: 48
2a04:7e00:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:46:6d:d7:20:7f:99:f0:aa:7b:13:5a:55:99:74:e9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Sep 16 13:12:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eddd1803aa5625f847bcdec531312b4f74a7b0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:51:5f:06:dc:c0:a1:49:90:66:e0:ae:ce:
f8:f2:6d:65:76:0c:ab:74:46:36:bd:74:26:e5:4d:
0b:a8:bb:2a:44:fc:6c:b2:c6:2d:06:a2:bc:d7:37:
7d:c2:0d:07:a1:68:65:aa:cb:98:7b:00:97:36:f8:
73:42:ef:bb:88:2d:c4:ae:27:c0:c7:a1:76:31:5c:
29:61:43:07:96:c8:ba:0f:b3:4d:ca:89:db:dc:db:
50:88:39:1d:d3:7f:43:36:dd:55:6c:c6:f7:24:57:
8e:0e:24:4e:82:82:38:b4:f6:f3:c4:e6:40:8c:d0:
e7:69:31:fa:e0:f1:c5:5d:a8:8c:9f:ef:bb:a0:16:
8e:36:6f:9b:59:76:0d:4e:b9:c9:c9:66:d9:71:e0:
99:f4:a1:3f:93:bc:95:3e:0c:31:53:e7:5b:29:8c:
62:26:47:e3:f5:56:ce:ef:fd:0f:c6:94:70:96:17:
d2:27:5d:ef:98:96:26:c7:19:3a:55:49:a8:de:fb:
bd:da:87:aa:f4:a1:1d:7a:b5:7e:cd:fa:f8:28:3e:
74:37:15:a5:0d:9b:8d:5e:24:00:f8:e5:1e:44:56:
41:ce:31:8a:e8:f3:f6:d3:e3:ed:1b:1d:a6:78:4e:
c6:c5:8c:5d:b1:a1:6e:f2:35:dd:eb:64:c8:17:c5:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:18:03:AA:56:25:F8:47:BC:DE:C5:31:31:2B:4F:74:A7:B0:FA
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/7d0YA6pWJfhHvN7FMTErT3SnsPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.201.0/24
178.237.207.0/24
IPv6:
2a04:7e00::/47
Signature Algorithm: sha256WithRSAEncryption
69:b9:c5:1a:6f:a8:8e:b3:ed:c1:e3:ac:29:87:c5:f9:c6:8f:
5b:98:53:17:8f:bd:0d:9b:cb:99:09:bd:d7:4e:da:44:e8:6a:
b3:65:f3:f2:fe:c9:d8:31:e2:d3:d9:5b:27:44:7c:4f:35:35:
24:f6:1f:77:7b:91:22:83:bc:8d:01:b2:09:73:51:5a:5c:fd:
f2:6b:b0:ce:dd:91:7d:d2:54:51:33:e4:ea:3f:88:38:c5:98:
d5:ee:b0:8d:1b:73:bf:8e:08:6f:df:09:4a:53:ec:d4:dc:d3:
e8:3a:ef:fc:32:fc:5d:b1:20:35:e4:85:f1:9e:ac:49:e1:89:
f0:b7:f7:b7:c9:57:e9:eb:e4:d8:e8:33:5f:17:6d:ad:bc:53:
ad:db:07:1c:34:63:3c:4c:2a:e5:fe:dc:c2:7d:0f:00:7d:71:
06:b5:61:7c:7a:fb:4b:2b:1f:32:2a:fb:06:7a:7c:51:c8:2b:
e5:89:3c:de:d7:02:aa:86:e9:3a:f9:b9:c6:ec:4e:0a:3c:a0:
75:84:98:0c:f0:69:67:10:47:86:51:28:68:a2:e0:5b:4d:3d:
75:44:68:a7:09:b7:2b:4b:2c:db:8c:05:f9:b3:a2:06:9c:77:
54:25:c3:71:1c:4d:ec:bb:fb:b6:b2:a5:e8:69:f7:69:2a:50:
85:ca:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:06 2023 by rpki-client on console-ams.rpki-client.org