Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/V_kg_RQffmuU-wQjNXhuKAczx2o.roa
File: V_kg_RQffmuU-wQjNXhuKAczx2o.roa (raw, json)
Hash identifier: PM2iLxjw12JdX8YR1dUNyBgCnCxaFxXFHi5AQP7uUcw=
Subject key identifier: 57:F9:20:FD:14:1F:7E:6B:94:FB:04:23:35:78:6E:28:07:33:C7:6A
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 059384F5
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/V_kg_RQffmuU-wQjNXhuKAczx2o.roa
Signing time: Sat 01 Jan 2022 12:06:18 +0000
ROA not before: Sat 01 Jan 2022 12:06:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197328
IP address blocks: 178.171.48.0/22 maxlen: 22
178.171.54.0/23 maxlen: 23
178.171.60.0/22 maxlen: 22
158.46.176.0/22 maxlen: 22
158.46.188.0/22 maxlen: 22
178.171.110.0/23 maxlen: 23
178.171.119.0/24 maxlen: 24
178.171.36.0/23 maxlen: 23
178.171.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93553909 (0x59384f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 1 12:06:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57f920fd141f7e6b94fb042335786e280733c76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:1b:ba:23:77:9f:af:f6:46:1d:d4:44:22:
d8:67:9d:9b:8f:a8:15:57:e8:5b:ae:3a:4b:d0:94:
38:dd:43:29:46:61:82:e5:d9:77:a1:f0:92:a3:e8:
71:02:a0:51:e9:9b:db:81:e6:ed:d8:3d:aa:33:70:
b7:60:b1:98:37:e3:a3:7e:12:b0:5e:12:c3:a2:77:
87:2d:8a:00:0b:09:94:af:03:16:11:27:56:d9:ed:
09:6d:a5:d7:e3:a5:a4:78:78:3b:3a:c8:80:ab:21:
05:04:fc:e3:f1:3f:07:90:05:ed:9f:4c:b9:5a:57:
53:e4:23:76:e5:7f:18:a4:e1:04:ff:b9:f9:0d:fb:
07:3c:7f:5c:58:2e:8a:ff:95:e0:70:b9:72:c9:3d:
3b:33:46:4a:9b:43:10:7f:11:d1:fd:e9:2f:82:1e:
4b:3c:59:73:89:c5:16:0d:3f:ee:dc:16:bd:94:60:
16:4b:b0:9d:6e:63:08:ee:c1:f2:60:2e:46:0f:2b:
7c:3a:d8:a2:e9:05:9c:db:a6:61:dd:6a:af:f9:68:
f5:91:71:c6:05:d6:9a:7b:ea:cf:a3:7b:f5:7a:c4:
73:f3:0d:fa:6e:2b:db:d5:8d:10:58:eb:f3:53:c2:
95:bf:5e:69:cf:aa:9a:89:51:b5:61:ef:fc:5e:b2:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:20:FD:14:1F:7E:6B:94:FB:04:23:35:78:6E:28:07:33:C7:6A
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/V_kg_RQffmuU-wQjNXhuKAczx2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.176.0/22
158.46.188.0/22
178.171.32.0-178.171.37.255
178.171.48.0/22
178.171.54.0/23
178.171.60.0/22
178.171.110.0/23
178.171.119.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f9:e0:db:02:ed:67:ae:f8:4c:ac:56:31:b7:03:b2:e2:bd:
c8:0b:55:c5:11:2a:f0:48:10:60:fe:7b:d9:54:1b:e2:77:7d:
8e:a9:28:c4:95:8c:e3:3b:3d:a8:31:9a:8f:12:39:1a:76:20:
6d:34:0c:18:21:4f:a4:11:a9:08:10:32:58:27:f9:6b:e4:3b:
76:dc:30:5b:25:ea:b9:3a:21:58:cb:96:06:39:ed:88:ee:a3:
2b:3d:6c:9e:1f:c6:60:cf:e4:74:0f:03:b7:29:74:97:26:34:
47:01:89:bf:95:ec:49:54:0b:94:dc:d7:65:22:30:55:4e:79:
68:86:34:8e:f1:71:e4:31:9d:d5:46:ee:a0:94:58:bf:92:e4:
ec:71:b1:49:e0:b8:db:4a:55:51:61:94:55:8f:68:b0:5b:a4:
e9:43:44:ed:58:eb:aa:27:9f:ae:c8:c1:27:0b:e0:ff:66:66:
aa:43:6a:c6:b5:11:ca:2b:a2:32:77:71:99:87:1c:59:ac:aa:
be:54:52:cf:03:0a:ee:d4:73:78:11:f7:28:d1:4a:54:72:06:
84:8f:aa:bb:7e:19:a6:22:1a:6b:69:fe:27:9c:c0:9e:bb:ec:
cb:f3:0e:b6:07:2e:2d:52:f0:55:a6:c5:54:7f:d0:ac:0d:78:
cb:5f:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org