Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Lq2z1-FYr9rh2xO4fDzv6PgTr1s.roa
File: Lq2z1-FYr9rh2xO4fDzv6PgTr1s.roa (raw, json)
Hash identifier: NKnBqPbiy7rtCkBLFsLJcUWd50UN1JpwYNkWu/wGbCA=
Subject key identifier: 2E:AD:B3:D7:E1:58:AF:DA:E1:DB:13:B8:7C:3C:EF:E8:F8:13:AF:5B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09C2605A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Lq2z1-FYr9rh2xO4fDzv6PgTr1s.roa
Signing time: Tue 28 Jun 2022 17:26:02 +0000
ROA not before: Tue 28 Jun 2022 17:26:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 178.253.215.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163733594 (0x9c2605a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 28 17:26:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2eadb3d7e158afdae1db13b87c3cefe8f813af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:dd:6b:35:eb:22:51:6e:51:7c:d0:64:86:
6e:a6:11:1f:e6:a8:8f:5d:e1:ce:07:8f:9b:c4:e6:
64:1b:87:e0:b9:e2:0a:2a:49:72:ff:f1:c9:00:46:
9f:7f:18:e7:53:55:f2:2e:19:88:ec:d7:b0:57:f5:
d9:c3:6a:44:87:ec:0f:5b:5f:ac:e1:33:0d:57:39:
eb:7a:88:09:0a:7f:86:e9:d8:0e:43:09:a5:01:03:
dd:f8:ce:24:65:1b:df:9f:5d:dc:4b:da:99:95:fd:
1f:a5:ef:88:5f:ab:39:68:06:20:56:27:ad:42:c5:
4f:35:b1:b9:32:48:dc:99:b1:23:74:9e:a2:43:74:
f5:92:6f:dd:fe:43:ac:da:3a:99:b0:59:b8:0b:da:
e9:d9:8c:14:5b:86:b6:c3:62:b8:f5:78:ed:28:ac:
08:24:ee:3f:a4:32:a3:fe:a5:82:ba:a7:f8:ea:e3:
8e:ba:38:e2:58:54:c0:ab:32:bc:88:60:5e:12:88:
6b:af:3a:75:b4:68:5a:86:f9:eb:22:59:e6:ef:ff:
5d:3b:80:72:ad:dc:5b:7e:d1:c6:5f:57:61:bf:5c:
4c:5b:b3:25:45:ec:45:cb:9b:45:09:1f:68:2f:78:
54:23:d7:f2:50:44:00:ef:39:42:73:21:94:ae:bc:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:B3:D7:E1:58:AF:DA:E1:DB:13:B8:7C:3C:EF:E8:F8:13:AF:5B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Lq2z1-FYr9rh2xO4fDzv6PgTr1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.215.0/24
178.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e7:a0:41:23:eb:46:a6:bd:df:6f:d9:63:1f:6b:3a:57:da:
28:e2:fb:85:79:32:84:2f:8d:db:49:62:a1:83:aa:c9:0e:bb:
1f:6b:bd:cb:21:e6:cf:5a:a8:55:ba:f6:4a:9d:57:07:55:2d:
c0:5d:38:e4:e1:0f:21:2d:e6:47:28:73:a2:06:bc:87:38:c2:
b8:3c:e6:44:9b:b3:85:9c:a0:72:c4:24:d9:db:ca:f8:e8:df:
1d:d9:ef:49:e5:21:fa:ad:62:95:1c:96:8b:0d:89:1f:bf:53:
2a:ed:77:3e:f2:3b:d3:69:5a:8f:82:f7:9f:ef:dd:e3:3a:1a:
90:e5:e3:3d:64:53:8c:28:f9:cd:5d:9a:ff:64:2d:56:1b:04:
73:b2:df:b7:df:3f:4e:d3:6c:1a:38:33:18:22:6f:90:80:f7:
e0:39:77:1d:73:ba:4c:e3:d2:41:1b:ed:28:7b:79:f3:8e:5e:
47:48:a3:d9:1b:6d:37:57:53:02:0f:3c:29:e9:ed:f4:15:27:
fd:1b:f7:5b:d3:45:c1:55:00:71:a4:3c:c4:ce:9f:2c:79:60:
0d:7d:00:3e:b3:fc:cb:3e:c8:f4:3b:68:6f:c5:48:9b:60:b2:
78:05:9b:45:a8:46:f0:5c:fc:1c:19:b8:6b:00:ae:dd:49:f0:
3b:60:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org