Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/1-NIz_2_uWQziiv1lvG1AhrVxrWM.roa
File: 1-NIz_2_uWQziiv1lvG1AhrVxrWM.roa (raw, json)
Hash identifier: 5HBGi6paZi/aaOC7jT41JBedxXQZcAPEprpmSgMSqlY=
Subject key identifier: F8:D2:33:FF:6F:EE:59:0C:E2:8A:FD:65:BC:6D:40:86:B5:71:AD:63
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 05951EB6
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/1-NIz_2_uWQziiv1lvG1AhrVxrWM.roa
Signing time: Sat 01 Jan 2022 12:06:18 +0000
ROA not before: Sat 01 Jan 2022 12:06:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 158.46.251.0/24 maxlen: 24
158.46.250.0/24 maxlen: 24
178.171.69.0/24 maxlen: 24
178.171.88.0/23 maxlen: 23
178.171.100.0/24 maxlen: 24
178.171.104.0/24 maxlen: 24
158.46.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93658806 (0x5951eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 1 12:06:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8d233ff6fee590ce28afd65bc6d4086b571ad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:4e:89:93:40:a3:9a:6e:24:45:da:0a:3d:
8a:33:55:d0:52:1c:da:1f:f7:fe:60:23:3f:36:33:
4e:e7:af:e8:d2:ac:74:b0:1c:58:70:8b:ab:50:c5:
94:e6:7c:f6:61:2d:06:36:b7:a7:43:36:04:8e:25:
ed:7e:f8:b5:85:c8:a3:39:43:c8:49:c3:31:6f:c9:
e5:d1:cc:3b:44:a6:a2:05:28:0f:c9:78:fc:b0:da:
e2:2f:4b:ce:38:80:ec:e1:41:33:ad:29:2f:db:a3:
16:89:2e:5e:05:aa:62:a0:04:a6:8c:d3:cc:c3:e9:
14:45:dd:14:19:3a:23:60:55:21:c5:cd:fd:32:78:
9d:32:9a:b1:30:38:d1:ea:77:a7:6f:6b:14:2a:86:
f0:f5:c1:ab:e3:a3:8c:cb:17:eb:65:8f:df:d5:35:
74:91:bf:c1:02:6a:11:f5:6a:f7:32:f5:ec:14:9b:
14:79:ed:0d:fb:5b:31:b5:a0:4a:0f:c4:29:94:1b:
5a:db:4d:ef:1e:da:d0:90:45:39:05:e1:a3:c6:8b:
35:00:22:02:3f:ce:b7:98:d6:07:2e:ca:b2:8e:74:
3a:fc:75:a6:2f:f3:9e:0e:9e:6f:8d:e9:92:17:8f:
c9:7e:1c:c6:57:fe:04:2d:17:fd:c5:55:f2:4a:cd:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D2:33:FF:6F:EE:59:0C:E2:8A:FD:65:BC:6D:40:86:B5:71:AD:63
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/1-NIz_2_uWQziiv1lvG1AhrVxrWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.200.0/21
158.46.250.0/23
178.171.69.0/24
178.171.88.0/23
178.171.100.0/24
178.171.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6c:d9:4f:dd:10:66:59:c6:fd:80:dd:8c:7e:10:82:49:8a:
09:aa:b2:45:26:7a:cb:4c:c0:73:7f:fb:b3:5a:3b:22:6b:f9:
b9:75:6c:4d:15:25:e7:de:ce:06:2a:03:97:de:23:a7:93:a2:
91:2d:ae:7d:e3:c8:c8:6c:f4:59:0e:4a:90:83:e1:f0:52:0f:
8e:c9:67:66:9c:fd:a9:be:e1:4a:bc:47:74:09:51:66:c7:1b:
07:73:a3:7b:99:79:3c:6d:54:f5:5f:e4:b8:04:8e:44:1c:b0:
ca:42:21:5d:e5:b4:c1:a3:73:85:d3:a0:9d:c0:7b:f8:15:6e:
3b:4e:9f:db:7b:66:48:9a:55:ca:65:1f:36:a9:0a:13:4c:b6:
ce:7b:9b:94:35:69:75:5b:10:cf:2b:00:86:89:c0:23:91:34:
2f:9c:43:14:f8:06:d0:e1:c3:14:27:f8:36:4f:a2:63:d7:43:
16:c8:68:ef:5e:e4:8b:5c:46:25:53:aa:04:6a:86:3c:4f:1b:
4a:78:92:6d:14:c5:04:fe:f0:59:1f:e7:98:03:49:98:70:63:
fd:fb:3e:2e:d4:27:38:36:b5:60:72:9f:3b:4b:a3:6b:be:94:
12:80:da:aa:46:7a:ad:ae:06:68:ba:de:44:7e:2c:84:31:f9:
f9:f8:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:09 2024 by rpki-client on console-ams.rpki-client.org