Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/wHCzw862pgoXBHRMcrEUrMMHGVI.roa
File: wHCzw862pgoXBHRMcrEUrMMHGVI.roa (raw, json)
Hash identifier: azwFkK5eG9tA3wKoJunUFas9jYZQ6L+ogKxjpzz7oQE=
Subject key identifier: C0:70:B3:C3:CE:B6:A6:0A:17:04:74:4C:72:B1:14:AC:C3:07:19:52
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 0A2C3F1A
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/wHCzw862pgoXBHRMcrEUrMMHGVI.roa
Signing time: Sat 01 Jan 2022 13:00:45 +0000
ROA not before: Sat 01 Jan 2022 13:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35454
IP address blocks: 178.21.56.0/21 maxlen: 21
178.21.57.0/24 maxlen: 24
178.21.56.0/24 maxlen: 24
178.21.58.0/24 maxlen: 24
178.21.61.0/24 maxlen: 24
178.21.60.0/24 maxlen: 24
178.21.59.0/24 maxlen: 24
178.21.63.0/24 maxlen: 24
178.21.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170671898 (0xa2c3f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Jan 1 13:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c070b3c3ceb6a60a1704744c72b114acc3071952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:c8:4d:0b:88:cf:31:a2:27:7f:35:3e:53:
96:ab:41:b2:e9:2b:38:c9:03:9f:0d:ee:5e:75:16:
bb:d1:41:ad:b6:b8:2b:23:ce:df:a8:3d:c1:50:26:
c3:b4:72:f4:c2:ca:a1:15:e5:29:ad:4b:13:7f:17:
0a:3e:0d:af:b7:43:af:f9:7c:9b:af:f4:31:27:a4:
06:6a:52:81:18:2d:cb:97:6b:1d:3b:7f:ce:1b:7f:
49:22:e0:1c:84:98:6d:8f:b0:a4:79:6a:48:56:11:
6e:da:c5:26:d7:91:0d:b6:49:f3:4c:6b:03:f9:9f:
6e:a8:bf:12:74:32:f7:59:0b:ce:c0:ee:48:c0:97:
ec:79:d0:08:0b:36:62:9b:37:5b:4d:0d:4a:a1:37:
b5:ea:70:de:4b:c8:d2:0f:f7:52:21:09:76:d3:23:
c6:49:9f:8f:37:5d:54:77:c9:43:01:d1:bc:31:51:
ce:55:ea:ff:71:ef:1d:47:f3:5a:e9:fa:e1:99:43:
3b:f0:38:d3:32:e6:a7:53:fa:b8:a1:c2:97:14:ba:
34:75:74:43:3a:1c:5e:b8:93:29:71:35:3d:fb:b1:
6b:92:4c:7b:70:f3:a7:d7:b6:c3:fc:04:91:ab:be:
46:66:02:86:e7:b1:cf:38:df:72:af:a4:25:0e:86:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:B3:C3:CE:B6:A6:0A:17:04:74:4C:72:B1:14:AC:C3:07:19:52
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/wHCzw862pgoXBHRMcrEUrMMHGVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.56.0/21
Signature Algorithm: sha256WithRSAEncryption
86:ff:a8:5b:02:9a:18:33:65:9b:9d:3c:b0:e6:4a:f7:52:13:
3d:e0:ee:b3:68:2e:d6:f1:60:ed:08:62:42:fa:b8:44:0d:12:
5c:57:74:79:c8:cc:52:57:d3:1c:e4:e5:da:c6:19:be:0f:27:
fe:89:ab:2e:ca:d5:3e:9d:09:7f:e8:0d:fe:2a:ac:6a:24:0c:
16:a8:09:fc:89:0b:c2:48:bc:44:11:a5:2a:00:71:3c:fd:ec:
c1:f3:28:f9:99:bb:2f:b2:1e:28:91:01:0a:d0:6e:69:87:36:
dc:13:9c:9b:76:9d:4d:b1:e5:1c:6b:a6:8a:08:e1:10:a4:52:
52:7a:fe:48:ad:11:28:f1:eb:1d:bb:65:68:3c:30:1e:2e:fd:
03:ff:66:b4:16:74:68:64:a9:76:1c:61:65:d3:f0:e8:0b:b0:
62:ae:46:be:27:a4:41:c2:a9:19:db:dd:93:71:8e:68:5b:4a:
98:02:fc:8a:92:6c:1f:e4:e2:02:d3:f0:51:9d:df:1f:99:27:
5f:1b:68:70:b9:f6:ca:ed:d0:c3:a9:6b:6e:1a:42:bd:41:c6:
7e:20:1c:1c:07:92:f0:f0:1e:94:5e:6b:89:b9:6f:86:10:43:
13:b8:e9:b4:38:7f:fc:c0:38:b7:33:0a:26:bf:c8:a5:cc:b0:
2f:a4:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:23 2024 by rpki-client on console-ams.rpki-client.org