Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ywSdByyPJNpVWfVwGriwy_GQ-a4.roa
File: ywSdByyPJNpVWfVwGriwy_GQ-a4.roa (raw, json)
Hash identifier: W28gkMWJbT8JaIpT7ab/CL2QGw+KfpEOOP6UluPUo2M=
Subject key identifier: CB:04:9D:07:2C:8F:24:DA:55:59:F5:70:1A:B8:B0:CB:F1:90:F9:AE
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018288EA709DB072C74FAFACC5C609DA9262
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ywSdByyPJNpVWfVwGriwy_GQ-a4.roa
Signing time: Wed 10 Aug 2022 18:00:41 +0000
ROA not before: Wed 10 Aug 2022 18:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47823
IP address blocks: 178.253.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:ea:70:9d:b0:72:c7:4f:af:ac:c5:c6:09:da:92:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 10 18:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb049d072c8f24da5559f5701ab8b0cbf190f9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:59:4a:3b:69:76:31:60:9e:db:04:b5:f4:
43:32:f4:7d:bb:2c:f5:1e:69:40:39:43:c1:72:3d:
1d:be:93:df:67:54:eb:a0:f9:9e:e8:0e:db:b7:3e:
cc:68:d6:26:ef:16:b4:2b:fe:ab:0b:6c:c0:df:56:
b2:06:3d:d9:1e:d5:67:6e:e6:bb:1c:e2:82:4c:50:
0b:ac:96:45:7e:1a:90:22:72:62:32:65:83:18:f1:
5d:49:22:cb:1f:be:f9:05:64:59:ea:b6:fe:f5:ca:
45:e9:2a:21:81:91:6c:f0:d7:90:3d:49:8d:fc:fc:
e1:71:ee:21:7e:06:e8:64:2c:60:f2:80:12:c0:bb:
3e:a5:f9:be:8b:a0:50:1b:65:2c:53:50:57:d1:41:
b0:28:45:d9:c8:b5:cc:20:61:2f:79:db:39:85:7f:
5f:9c:b8:95:19:68:e6:1e:11:6a:26:23:e4:4e:8e:
31:b8:23:71:40:a2:03:c6:43:81:46:ba:e6:d2:d6:
c2:cd:50:07:f3:2f:42:e9:a2:72:3f:47:50:8d:7e:
2d:47:4d:b1:f7:34:a8:5f:a5:84:33:87:6c:b1:13:
ad:ee:73:60:3f:d6:f7:fa:1e:e9:29:31:d8:21:48:
b7:6b:8f:34:89:d7:74:fb:b6:41:1f:41:85:20:4c:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:9D:07:2C:8F:24:DA:55:59:F5:70:1A:B8:B0:CB:F1:90:F9:AE
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ywSdByyPJNpVWfVwGriwy_GQ-a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0e:88:9b:7d:9f:3d:b2:a3:39:09:a8:69:67:98:86:3f:4e:
f3:ed:d4:bd:f1:95:21:68:7b:fe:dd:cb:b1:9d:79:56:a2:ab:
93:ec:c1:4e:fa:1e:a3:9e:1b:b9:d4:e9:3a:e6:1a:e7:4e:89:
32:f3:04:6b:c2:99:ef:5f:b8:92:9a:57:df:f9:4d:d5:0d:a7:
93:29:f8:53:87:62:75:18:1c:0d:14:5c:2e:d5:17:47:de:5f:
04:62:5b:4f:a7:52:a7:ce:03:cb:46:d9:f7:70:46:df:91:15:
ff:42:6d:a9:a9:7f:f0:3d:65:e6:72:b1:6d:e8:e2:95:7a:f0:
aa:f5:66:a5:79:7a:cd:38:06:01:97:18:dc:fa:e5:9c:ef:08:
b4:91:e3:35:78:54:39:5f:38:62:c5:6a:6e:3c:25:89:be:2e:
5b:55:d5:87:0d:a6:44:8c:54:58:42:61:2e:db:bd:24:f2:bd:
7a:5a:80:00:5f:a8:15:70:4c:f1:10:0b:bc:d7:7f:54:95:54:
44:87:36:e1:4b:ab:7d:69:db:63:c9:67:c3:4e:5f:62:8c:21:
aa:c1:88:2f:18:88:fe:4e:0f:ce:24:83:4c:56:c4:73:97:61:
f0:35:f4:9d:c4:d9:ae:25:e8:62:8c:f0:ea:3f:e0:6b:c8:70:
e9:55:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org