Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kt4yv9v2QtmXixD3Odokz3y0mCw.roa
File: kt4yv9v2QtmXixD3Odokz3y0mCw.roa (raw, json)
Hash identifier: LGkXxlW7ldZEI13lKoQVo7+dQWMBQowmNprAasdXP6A=
Subject key identifier: 92:DE:32:BF:DB:F6:42:D9:97:8B:10:F7:39:DA:24:CF:7C:B4:98:2C
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B00D365
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kt4yv9v2QtmXixD3Odokz3y0mCw.roa
Signing time: Sat 01 Jan 2022 13:58:00 +0000
ROA not before: Sat 01 Jan 2022 13:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199442
IP address blocks: 178.16.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721474405 (0x2b00d365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92de32bfdbf642d9978b10f739da24cf7cb4982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:67:e3:ea:3b:b3:4c:1e:fc:9a:0c:d0:38:
4f:46:4d:24:1d:37:c2:c0:d1:85:91:89:38:99:91:
38:48:ae:63:fe:3e:44:65:7c:56:af:6f:f4:39:a5:
24:db:a2:83:23:35:a3:64:3d:2c:20:35:fa:3b:ff:
08:79:75:d7:4f:1f:f2:41:87:d8:f6:1e:06:1f:ae:
16:b1:f0:f3:6a:30:63:74:09:6a:e4:58:7b:cc:45:
6f:ee:5e:d1:41:ac:7a:48:7f:7f:d0:8e:5e:f4:7c:
55:58:30:8e:ed:cf:e8:bd:fb:94:76:6b:1f:e2:50:
f2:af:95:68:e9:92:8e:07:53:3f:cd:93:c5:69:89:
41:89:d3:e1:06:a5:47:70:10:49:4d:ef:a8:c6:25:
7f:38:26:72:e2:23:b3:fc:c3:d9:ed:92:57:aa:2a:
54:7c:9f:d0:19:46:13:f7:d4:d3:ac:8d:db:5d:30:
87:98:d3:d2:52:d7:94:dd:6e:f6:3f:e2:47:bc:ec:
de:4b:68:76:50:bf:ee:db:c6:bf:fa:8c:9c:2d:51:
e6:8e:25:70:80:f7:93:bd:46:1b:72:bd:0b:64:cb:
6b:fb:00:20:f8:88:60:d5:77:ca:78:b1:d6:02:1f:
f6:47:c5:ff:a3:8d:c0:40:c9:3f:29:49:fa:19:fb:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:32:BF:DB:F6:42:D9:97:8B:10:F7:39:DA:24:CF:7C:B4:98:2C
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kt4yv9v2QtmXixD3Odokz3y0mCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0b:5c:d6:71:7c:b3:ca:32:23:44:ce:dc:4a:79:db:9a:3e:
89:92:84:ff:d4:a7:9e:3a:23:0f:b6:9a:4a:dc:3e:e2:95:79:
df:91:90:af:b4:9c:a7:84:8f:3a:c7:a9:1f:69:b3:e0:5b:e0:
6e:56:6e:78:95:d7:ba:6b:3c:34:21:fa:48:1e:8c:eb:ea:7d:
b1:ac:81:9d:8b:56:54:6e:9e:d9:4d:d1:36:45:3e:02:d4:74:
81:56:4d:9f:b0:14:13:57:f0:11:40:a7:6b:fa:1b:18:64:aa:
84:6c:b8:1e:73:bd:28:d1:6e:e6:df:8e:35:ee:25:c1:f1:cf:
74:a4:a3:4f:63:cc:06:f1:e6:57:01:65:c0:d8:74:c5:a5:b7:
14:b4:c4:40:a2:e4:3a:7f:b3:99:b8:51:6c:17:c8:71:d1:a8:
d8:11:16:24:91:d8:4b:cc:e1:b4:5a:74:da:91:ea:e0:ae:28:
a1:ba:c2:e7:e2:0d:29:10:b3:96:f5:e0:72:ef:ad:03:f2:4c:
ff:cd:55:9c:bf:f7:14:07:e7:6a:81:ca:9e:38:5b:ff:df:a0:
43:17:e6:b3:d3:a0:76:60:98:17:e4:7a:71:aa:2c:aa:bd:2b:
3b:b6:02:16:a8:66:82:00:13:ef:fe:fa:bc:ae:39:d7:ff:82:
5b:4a:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org