Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/dSCoG1bhLgsGq1rujNVUXHWSno8.roa
File: dSCoG1bhLgsGq1rujNVUXHWSno8.roa (raw, json)
Hash identifier: rJ34jNC5vK0xfarQOlyIbUmK88MKh+lRMHRJo0U0gqE=
Subject key identifier: 75:20:A8:1B:56:E1:2E:0B:06:AB:5A:EE:8C:D5:54:5C:75:92:9E:8F
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0601EFE4
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/dSCoG1bhLgsGq1rujNVUXHWSno8.roa
Signing time: Mon 14 Feb 2022 13:21:47 +0000
ROA not before: Mon 14 Feb 2022 13:21:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197328
IP address blocks: 178.171.54.0/23 maxlen: 23
158.46.176.0/22 maxlen: 22
178.171.110.0/23 maxlen: 23
178.171.119.0/24 maxlen: 24
178.171.36.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100790244 (0x601efe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Feb 14 13:21:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7520a81b56e12e0b06ab5aee8cd5545c75929e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:7f:47:ae:56:f1:6a:87:c1:22:66:f9:ab:
ad:c5:05:03:19:82:76:5f:68:af:e1:f3:ab:1a:20:
11:a5:c6:be:07:1e:cd:64:e6:77:e3:18:0a:52:ce:
cc:6d:b6:22:47:72:c9:8f:d0:ac:54:44:78:6c:ff:
0e:1b:19:0a:dd:36:44:bb:2a:5a:b3:46:44:a8:1a:
9b:20:d2:ba:67:5a:4c:e5:17:1e:71:88:20:80:8b:
4e:89:f4:04:fb:b4:25:79:80:60:19:bb:15:1f:fa:
05:ee:cf:99:0e:f8:b5:08:ba:f8:f8:0a:95:d1:6f:
f7:41:16:df:bb:be:dd:02:ac:8c:f7:96:0f:af:0f:
a7:7e:c1:9e:6a:7c:a0:63:cc:79:fb:8e:ca:80:bb:
f3:e0:32:dc:2f:6f:d8:a1:f2:ba:42:f5:ba:4d:c1:
2a:27:5d:2c:fc:de:44:79:6d:18:af:33:d7:a6:22:
4b:25:8f:ea:2d:2c:a0:21:31:7e:0e:25:f8:6e:ba:
e0:01:31:b3:1e:68:b9:8d:92:be:a5:6c:0d:78:f3:
47:5e:ca:91:ef:0c:9c:8a:35:28:1d:fa:95:88:50:
ef:d0:ad:d6:d8:c9:c0:b2:4f:c9:68:b5:da:73:e4:
fa:a2:84:a6:9f:ab:16:f6:33:fc:05:03:a8:c1:72:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:20:A8:1B:56:E1:2E:0B:06:AB:5A:EE:8C:D5:54:5C:75:92:9E:8F
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/dSCoG1bhLgsGq1rujNVUXHWSno8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.176.0/22
178.171.36.0/23
178.171.54.0/23
178.171.110.0/23
178.171.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a9:ab:83:bd:0e:53:de:72:46:37:d0:29:02:01:f7:f9:aa:
df:8c:0c:87:fb:be:b3:ec:b9:63:07:64:7c:5f:a0:fe:c4:c1:
61:78:bd:60:ca:bc:ba:f3:a2:68:aa:6c:c8:6c:d6:a8:77:9d:
0d:42:89:e6:28:eb:1b:84:ae:47:8d:02:81:ec:77:93:64:0c:
c5:db:17:53:f4:6e:82:d8:52:ab:52:b8:bb:96:ab:c3:8f:d5:
8b:c8:3d:3b:09:54:db:d7:4a:2a:bb:9f:9f:2c:45:cb:39:31:
56:da:c1:ba:13:48:35:35:c5:98:c7:01:6c:9c:f7:f4:66:cd:
2f:bb:62:14:ff:fa:50:3d:68:af:4d:a3:85:c6:89:1b:91:5d:
1f:11:45:0f:ca:98:56:5e:e9:0c:23:e6:d7:dc:ae:b3:d7:6d:
f1:3d:93:8a:b5:c3:ee:e9:88:01:b3:4d:9b:cb:f7:14:dd:97:
38:f7:95:73:a0:3d:05:51:c1:ed:c1:f2:9d:cf:5f:01:f4:cb:
dd:07:e3:26:77:be:98:1a:c2:d2:62:f7:56:27:ce:f2:92:8f:
19:d2:6c:a2:ca:52:e3:2c:14:b5:ec:9f:44:77:ec:2c:a0:24:
c9:e7:e0:b1:19:15:56:b9:a1:5b:ea:10:23:37:c2:9d:4e:46:
2f:49:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:04 2023 by rpki-client on console-ams.rpki-client.org