Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/GZwsDaD1qsBFfXPkFi4rkv-9ymU.roa
File: GZwsDaD1qsBFfXPkFi4rkv-9ymU.roa (raw, json)
Hash identifier: 9SOfdRc4yBc+BDwk+FHfVhg8Eq1R45sXAz8V9IhxZB4=
Subject key identifier: 19:9C:2C:0D:A0:F5:AA:C0:45:7D:73:E4:16:2E:2B:92:FF:BD:CA:65
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0182215044B9E1957FA40C4ED4EC807550A5
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/GZwsDaD1qsBFfXPkFi4rkv-9ymU.roa
Signing time: Thu 21 Jul 2022 15:11:24 +0000
ROA not before: Thu 21 Jul 2022 15:11:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 178.171.50.0/23 maxlen: 23
178.171.48.0/23 maxlen: 23
178.171.62.0/23 maxlen: 23
178.171.60.0/23 maxlen: 23
158.46.176.0/22 maxlen: 22
178.171.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:50:44:b9:e1:95:7f:a4:0c:4e:d4:ec:80:75:50:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jul 21 15:11:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=199c2c0da0f5aac0457d73e4162e2b92ffbdca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:e3:2c:85:44:c9:c0:ad:23:ec:37:c0:21:
77:58:0b:30:c6:72:cc:e9:ff:c1:43:94:80:71:02:
c2:46:b6:22:dc:9a:1d:28:a0:0d:75:ad:20:ef:32:
57:aa:0b:d8:54:eb:32:76:09:ed:cc:a4:94:50:05:
a9:97:32:99:bd:79:0e:d6:1a:31:2f:eb:d2:8e:e1:
02:3e:d2:2d:86:98:7b:83:90:d3:7f:1a:c9:0a:84:
30:19:4b:75:af:14:12:9a:36:72:4c:49:f5:ee:e3:
28:71:2f:82:87:ec:1e:15:90:c3:bb:0c:b1:19:2f:
70:97:59:b9:32:67:9c:13:5b:17:38:d8:fd:7a:50:
35:98:53:6e:c0:81:10:16:ef:dd:a5:d5:36:51:1e:
6c:06:28:02:cb:c8:e8:64:c3:61:64:58:d7:1b:31:
f6:9d:e8:68:40:83:90:64:fe:73:cf:10:18:bc:3c:
f5:f2:8d:8c:d4:de:00:b1:85:c8:82:af:f9:7e:21:
2b:a2:26:a9:db:36:59:7d:66:b3:07:10:7a:cf:52:
06:d1:49:0a:fa:ed:1f:13:4a:80:7e:3e:38:f4:df:
a3:4c:16:d1:4e:e3:82:6f:ea:13:7b:70:d5:79:d8:
91:d3:30:d3:6f:96:bb:8c:00:d1:f1:11:cd:57:23:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:2C:0D:A0:F5:AA:C0:45:7D:73:E4:16:2E:2B:92:FF:BD:CA:65
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/GZwsDaD1qsBFfXPkFi4rkv-9ymU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.176.0/22
178.171.32.0/22
178.171.48.0/22
178.171.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:e9:15:ae:c7:a2:f4:81:0c:5c:ed:43:af:eb:5b:05:6d:18:
f2:f4:16:6f:a7:72:82:6f:da:a0:ea:14:e5:10:52:e8:b9:2b:
f5:b5:7e:3e:d7:06:f6:c9:f9:d1:45:25:d7:73:6d:2f:2a:9d:
ba:6f:42:b9:e2:3a:3c:54:89:7a:67:d9:97:4f:84:f8:6d:f1:
1d:f7:f3:78:6c:08:5e:7e:50:47:58:e0:0b:fa:2e:25:81:be:
1c:e7:6e:59:07:e3:aa:10:98:09:4d:3e:cf:93:99:0d:d2:ff:
0f:c4:f2:7b:91:ce:f0:b3:5d:8f:f2:63:4e:b7:8d:09:e4:81:
a6:81:2b:e4:bd:5d:5f:6f:28:96:e7:04:da:c4:af:31:a6:40:
cc:a0:fc:73:ff:a0:48:aa:16:dc:b0:d6:c8:25:25:a6:05:3c:
bb:0b:a2:ad:ca:ea:48:f8:61:83:b9:11:28:af:f3:c2:33:76:
cf:fe:20:90:98:42:21:98:54:01:ed:8a:69:4a:d0:1d:59:f6:
23:7a:d4:3e:cb:7d:4f:a2:4a:a6:03:e6:a5:c3:30:85:d2:e2:
b8:3a:f0:41:55:42:54:29:65:63:81:66:95:f6:72:56:d7:14:
f2:b4:af:f5:6b:d4:6f:c0:ce:ab:57:3d:fe:61:20:43:e4:10:
3b:39:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:04 2023 by rpki-client on console-ams.rpki-client.org