Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/dB2lMo4D5ti64IsfzyuSOPjlW0E.roa
File: dB2lMo4D5ti64IsfzyuSOPjlW0E.roa (raw, json)
Hash identifier: BaLTShTLgaJh22yqjPHM6G+InTN9rxXsgKYMHM3JXkg=
Subject key identifier: 74:1D:A5:32:8E:03:E6:D8:BA:E0:8B:1F:CF:2B:92:38:F8:E5:5B:41
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0592D5CD
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/dB2lMo4D5ti64IsfzyuSOPjlW0E.roa
Signing time: Sat 01 Jan 2022 12:06:17 +0000
ROA not before: Sat 01 Jan 2022 12:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 158.46.136.0/21 maxlen: 21
158.46.144.0/20 maxlen: 20
158.46.152.0/24 maxlen: 24
158.46.156.0/24 maxlen: 24
158.46.158.0/24 maxlen: 24
158.46.164.0/22 maxlen: 22
158.46.162.0/23 maxlen: 23
158.46.160.0/23 maxlen: 23
158.46.168.0/21 maxlen: 21
158.46.186.0/23 maxlen: 23
158.46.184.0/23 maxlen: 23
158.46.132.0/22 maxlen: 22
178.171.36.0/23 maxlen: 23
178.171.103.0/24 maxlen: 24
178.171.105.0/24 maxlen: 24
178.171.101.0/24 maxlen: 24
178.171.112.0/23 maxlen: 23
178.171.108.0/23 maxlen: 23
178.171.106.0/23 maxlen: 23
178.171.114.0/23 maxlen: 23
178.171.116.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93509069 (0x592d5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 1 12:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=741da5328e03e6d8bae08b1fcf2b9238f8e55b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:a2:f2:b9:3a:58:02:db:9a:05:a0:1a:40:
03:e6:15:26:40:b6:cd:0d:29:3e:7a:00:24:2a:57:
65:f5:22:9f:dd:2d:64:22:7b:49:09:9d:f7:3d:3a:
36:e5:0f:31:ab:a3:e2:bb:c5:db:5b:b4:20:82:87:
3d:40:94:66:05:55:5b:e6:bf:99:5c:b8:2c:35:ae:
a8:5e:d9:4c:82:34:1a:28:71:f4:d3:38:ee:2f:1d:
5f:2d:61:c7:5b:b6:b5:e8:61:52:0b:6f:f8:36:1c:
af:75:a9:2f:82:e3:e1:bb:2b:52:1e:8b:aa:1c:9c:
d6:7c:29:1e:6a:82:be:31:25:4f:b1:96:b8:a8:36:
91:1e:44:1f:c0:ef:ad:a9:38:2d:57:cf:f0:c6:1d:
82:28:d0:a9:40:88:28:31:2e:c0:e7:e2:58:f6:56:
75:81:10:77:79:ba:6b:68:8a:87:6c:42:fb:1c:73:
9f:8b:cd:10:e2:9b:14:96:64:10:c8:b2:ab:d4:fa:
02:51:dc:65:a6:bb:f2:ac:81:62:0d:36:9f:69:03:
1c:2b:09:99:65:4d:58:6d:f2:c4:27:fc:47:ae:3d:
6f:70:94:ed:6f:4b:5d:58:1c:52:3e:af:c5:a0:2a:
47:bb:32:60:83:ac:6a:35:9b:c8:6c:b0:e8:53:8d:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1D:A5:32:8E:03:E6:D8:BA:E0:8B:1F:CF:2B:92:38:F8:E5:5B:41
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/dB2lMo4D5ti64IsfzyuSOPjlW0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.132.0-158.46.175.255
158.46.184.0/22
178.171.36.0/23
178.171.101.0/24
178.171.103.0/24
178.171.105.0-178.171.109.255
178.171.112.0-178.171.117.255
Signature Algorithm: sha256WithRSAEncryption
29:8d:fa:87:9a:13:b7:b8:ac:6d:d2:92:23:b2:cc:11:c5:fe:
0d:94:5c:da:43:51:0b:94:b5:fb:24:68:d9:d7:26:b5:5d:28:
9d:48:3e:56:d9:65:4b:2e:b2:ce:00:d4:7b:0c:8e:7e:05:9e:
8b:6e:16:c0:8e:ed:e7:a3:65:a4:37:01:e8:a0:dc:99:e8:c6:
99:24:e2:31:01:4d:2e:42:33:99:58:31:42:13:47:bd:41:24:
29:e5:5f:67:e6:07:fd:85:bb:5d:b1:55:b2:ce:26:d7:97:19:
f6:05:b6:17:f1:38:f7:88:a9:f2:75:4b:d0:6b:32:7c:69:44:
90:8e:cd:8b:b5:5f:6d:63:2a:61:62:a7:cc:c3:d8:65:ab:c4:
02:a6:6e:76:e2:1b:95:22:7a:0c:cc:a2:99:24:01:bd:0a:e7:
a8:8d:f2:e7:8b:88:a4:e5:39:c2:76:49:ee:d2:d1:1e:ff:e5:
9b:91:88:0f:b6:97:c2:4b:0e:33:28:d3:a3:fe:62:1a:51:c8:
bf:cb:b9:92:51:b3:a6:a8:6c:83:00:e1:93:73:50:d6:06:43:
86:d1:95:9d:ff:66:12:87:a5:d4:4f:16:78:b2:3f:5d:1b:09:
aa:d5:7d:7b:1f:e1:42:33:96:d3:69:21:19:97:97:f5:78:a0:
76:c5:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:39 2024 by rpki-client on console-fra.rpki-client.org