Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/l7bSst_pbzHA0hY14wh4-YQsfdo.roa
File: l7bSst_pbzHA0hY14wh4-YQsfdo.roa (raw, json)
Hash identifier: xys0/KJlGNfSl7LVIx9OpYmyS6u5dQ9owSwwLL+syCI=
Subject key identifier: 97:B6:D2:B2:DF:E9:6F:31:C0:D2:16:35:E3:08:78:F9:84:2C:7D:DA
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 03C03175
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/l7bSst_pbzHA0hY14wh4-YQsfdo.roa
Signing time: Wed 09 Mar 2022 17:12:27 +0000
ROA not before: Wed 09 Mar 2022 17:12:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 178.159.100.0/24 maxlen: 24
178.159.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62927221 (0x3c03175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Mar 9 17:12:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97b6d2b2dfe96f31c0d21635e30878f9842c7dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:e4:03:32:c6:27:26:f0:2e:2a:f9:bc:10:
5c:a5:f0:32:44:8e:4d:7d:cc:fb:88:6b:c0:1b:de:
cd:e2:93:e9:3b:ab:3c:93:10:5b:11:65:a1:d3:5d:
38:d1:bb:15:28:fe:42:28:e3:14:39:1a:da:13:3f:
46:f0:df:fe:ee:a5:d5:73:47:3a:b3:de:79:b5:98:
b0:21:bb:14:b9:68:a7:c8:d0:4f:1d:99:62:68:75:
45:50:b2:cc:de:2b:44:1f:14:ca:1e:03:1b:25:37:
50:31:37:eb:d8:b7:f3:a7:73:38:62:c2:63:86:f6:
a5:bc:e5:34:dd:77:4c:68:54:44:0a:c3:bf:df:1e:
8d:b1:a9:37:08:03:83:4e:22:18:f7:d2:4f:7b:6e:
14:96:7f:80:c5:68:a3:fc:47:5e:60:70:74:be:08:
91:8c:a9:a2:1f:f9:6f:72:a9:aa:44:55:95:08:bd:
00:b1:67:12:fe:ff:fe:0d:d8:f2:62:06:3d:e0:b4:
b9:c4:fa:c0:74:a7:d6:e5:06:96:1e:13:37:8d:af:
da:ec:1b:e7:42:60:04:f3:51:be:63:66:df:53:da:
23:49:c3:0d:c7:cd:e3:92:e6:99:27:26:f3:5c:db:
5e:88:c2:51:15:c2:0f:fa:48:a3:b2:57:d5:1d:57:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:D2:B2:DF:E9:6F:31:C0:D2:16:35:E3:08:78:F9:84:2C:7D:DA
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/l7bSst_pbzHA0hY14wh4-YQsfdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.100.0/24
178.159.107.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6a:9a:5b:4c:51:b3:8f:74:ac:84:db:cf:0f:c7:01:e3:14:
03:da:2c:64:b7:95:d1:2b:55:2e:69:47:52:62:1d:82:18:00:
80:16:51:fd:08:41:2b:f1:92:a8:f9:d7:63:a1:7d:1f:6c:03:
6e:5d:ac:c4:33:69:91:e0:72:88:00:e0:3a:34:6f:27:82:2a:
1d:12:6b:3c:25:bb:ae:8b:51:3a:31:df:37:8b:24:92:c2:c4:
ca:d4:0c:6a:14:36:90:08:3a:1f:b5:d1:3d:07:45:c9:64:29:
45:69:da:86:85:24:c7:86:cc:37:e4:eb:7f:73:cc:0b:54:a4:
4d:b8:6e:47:31:cd:19:d1:93:4d:3f:bc:9d:23:5d:af:48:76:
90:d3:2f:c6:c4:49:45:35:0c:7f:b4:12:0a:78:f4:73:9e:79:
77:76:35:63:da:f9:1c:10:0e:1d:4e:d3:c1:96:a2:34:fc:56:
83:1b:9d:43:6c:ad:21:36:75:e1:9c:82:c6:95:2b:9a:37:d9:
3e:ee:c8:b9:2e:be:ba:52:9b:81:7c:04:61:4f:cb:3d:05:ca:
86:9a:e1:fb:46:55:e4:41:19:e4:26:34:58:da:11:d1:d4:98:
63:48:05:0c:f7:84:f6:f8:97:a8:69:f4:ac:c7:e6:d4:a0:c4:
72:94:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:44 2024 by rpki-client on console-fra.rpki-client.org