Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/LdmiVZkbalfkjFh_0ZQzWV3h2IE.roa
File: LdmiVZkbalfkjFh_0ZQzWV3h2IE.roa (raw, json)
Hash identifier: 7e8C9v4AhNSeYkZmSLF9shwNrncIA0tLic1ZKFYA8Yc=
Subject key identifier: 2D:D9:A2:55:99:1B:6A:57:E4:8C:58:7F:D1:94:33:59:5D:E1:D8:81
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0182A97C0E6FB81C266BCE85F3AFEBED42B2
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/LdmiVZkbalfkjFh_0ZQzWV3h2IE.roa
Signing time: Wed 17 Aug 2022 01:47:35 +0000
ROA not before: Wed 17 Aug 2022 01:47:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 178.171.50.0/23 maxlen: 23
178.171.48.0/23 maxlen: 23
178.171.62.0/23 maxlen: 23
178.171.60.0/23 maxlen: 23
158.46.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a9:7c:0e:6f:b8:1c:26:6b:ce:85:f3:af:eb:ed:42:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Aug 17 01:47:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dd9a255991b6a57e48c587fd19433595de1d881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:b7:05:8c:41:c6:0a:e0:0f:76:aa:62:bb:
af:fd:be:e2:d6:32:85:70:64:d0:54:42:2b:05:75:
53:ec:57:0f:25:f9:14:83:5c:b8:9b:9d:61:23:9a:
3f:fd:b2:c6:41:08:7b:dd:61:9e:96:39:86:43:8b:
85:cc:f3:81:39:77:59:44:13:70:68:c5:41:96:ca:
26:c7:4d:2c:fa:90:0e:43:56:8a:fc:17:37:7d:1e:
74:27:a8:40:a8:62:ac:7d:b4:ed:61:d8:9e:ef:ef:
a7:80:65:b6:2b:af:e9:33:cc:30:8c:50:2e:d8:34:
ed:5b:a0:ed:55:53:4d:b7:fc:b2:95:7c:3b:7b:30:
7b:a3:cc:da:72:91:23:7b:fd:be:28:aa:f5:df:eb:
e1:9f:04:59:ba:3a:fb:1e:96:fc:4c:b3:25:c4:e5:
d5:a4:1a:50:27:6f:13:d6:43:0e:24:5d:b4:31:78:
95:6b:25:01:73:24:c6:3d:c1:68:e8:67:6b:e4:61:
86:76:14:f5:f3:16:bc:55:34:b2:2f:1e:d3:98:83:
97:fc:74:30:92:92:6a:7b:e4:78:31:75:3c:ae:0b:
26:d1:34:67:09:93:6e:2b:a2:06:ba:2e:2a:55:0f:
43:f1:ff:f1:0c:75:2b:d4:57:13:2b:19:4a:ad:e9:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:A2:55:99:1B:6A:57:E4:8C:58:7F:D1:94:33:59:5D:E1:D8:81
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/LdmiVZkbalfkjFh_0ZQzWV3h2IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.176.0/22
178.171.48.0/22
178.171.60.0/22
Signature Algorithm: sha256WithRSAEncryption
96:7a:b3:95:47:43:f2:2f:50:25:43:64:33:eb:de:fd:05:99:
6a:38:25:67:9f:65:5a:6d:f2:6a:c0:77:df:6d:a8:ff:56:2d:
65:f1:35:be:c5:1a:80:a7:2b:c3:4d:ef:4c:bf:3d:c5:cd:a2:
1f:40:32:0a:84:43:c2:7a:5f:ba:bc:44:63:10:12:79:02:87:
30:84:0c:3e:c0:b1:3c:2b:04:6f:c3:9c:18:b4:02:0b:f2:89:
64:ca:79:5d:ba:d3:57:08:42:f4:82:1f:42:dc:56:51:30:0f:
68:5a:6f:6f:16:61:df:b6:d2:fa:57:75:6e:2d:ba:43:b0:19:
46:88:68:e9:83:c4:88:99:60:b6:84:03:75:b8:d5:10:be:4a:
7a:d9:06:03:fd:b7:ed:e3:ed:ba:31:02:1f:1d:c1:7d:7f:ac:
ef:62:27:94:ac:a1:4b:fd:c7:e3:c7:a9:94:da:b2:f5:07:8c:
c4:0d:e7:89:40:93:f5:38:11:75:3d:bd:ad:7f:97:13:f5:0c:
d4:12:75:1c:b4:65:da:31:a6:99:36:e6:80:53:f8:a9:ec:53:
0f:94:6a:b8:cf:27:cd:dc:33:90:bd:f1:1e:95:25:8f:0f:33:
5e:12:9e:15:14:1a:fd:00:f9:6f:f1:16:e0:98:c9:59:7a:c2:
1f:76:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:04 2023 by rpki-client on console-ams.rpki-client.org