Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/YRHehj5LiTNtJr0ryWhg47Gyj_4.roa
File: YRHehj5LiTNtJr0ryWhg47Gyj_4.roa (raw, json)
Hash identifier: 9McHJ9lrE3HG9kRT7uICaiS3/RX9MuoeJkZfoVJerdQ=
Subject key identifier: 61:11:DE:86:3E:4B:89:33:6D:26:BD:2B:C9:68:60:E3:B1:B2:8F:FE
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 0183C24C346038B905A8FBB0293AB1F5AB17
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/YRHehj5LiTNtJr0ryWhg47Gyj_4.roa
Signing time: Mon 10 Oct 2022 14:28:37 +0000
ROA not before: Mon 10 Oct 2022 14:28:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212451
IP address blocks: 178.213.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:4c:34:60:38:b9:05:a8:fb:b0:29:3a:b1:f5:ab:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Oct 10 14:28:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6111de863e4b89336d26bd2bc96860e3b1b28ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:c8:b5:ff:28:d4:fb:d5:7d:73:ed:b3:71:
2d:c2:8b:ae:f3:9f:6f:ad:d1:08:96:0f:ce:b1:0c:
c0:5f:3b:56:a8:83:80:bd:8d:c1:47:58:25:54:8c:
a0:7c:87:33:f0:61:e2:d8:f2:03:a3:38:eb:17:7f:
01:68:b8:e1:0a:93:71:d8:28:8d:f6:83:61:88:e7:
dd:01:54:88:85:95:24:c0:0d:f6:1f:82:7e:16:d6:
99:db:93:a9:34:fc:a1:40:73:e8:f5:f5:13:d1:61:
93:6e:37:93:5f:57:c6:c8:15:7b:24:7b:75:be:c9:
9e:8b:cd:37:d9:8c:0c:55:e6:02:f8:9b:9e:fa:83:
88:6d:26:a1:41:7e:eb:9a:4b:db:56:d7:e0:c4:7d:
fe:6a:76:22:50:eb:bb:e1:6f:04:67:b3:34:14:a3:
a2:ba:5b:ca:50:02:61:b0:36:e3:8f:bd:9b:19:22:
aa:5d:d2:67:66:c4:c1:1e:66:e6:b4:28:16:ef:59:
1c:06:d2:48:62:9a:ec:75:90:00:1e:b5:d4:a8:db:
56:d5:bf:cf:72:09:b9:29:6f:d2:3d:53:75:cc:b9:
6f:5e:6d:f2:f0:8b:b7:fc:f1:c2:61:0c:dc:76:87:
56:f4:8a:c2:5e:78:3f:5b:d6:f2:a6:03:a8:9d:37:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:DE:86:3E:4B:89:33:6D:26:BD:2B:C9:68:60:E3:B1:B2:8F:FE
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/YRHehj5LiTNtJr0ryWhg47Gyj_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:e3:b0:c5:78:c1:06:fd:9b:04:28:72:b9:c9:07:84:99:94:
27:9c:d6:de:7d:98:7a:ec:4f:ca:ea:16:23:5f:1b:c6:5a:ab:
b8:e8:0d:ea:f2:ae:30:5a:cb:38:8c:77:a3:17:f9:f9:64:4a:
9e:ae:c2:ad:d8:02:85:50:2b:2d:de:41:2c:f5:19:95:cf:b4:
5e:fa:c2:18:d1:bf:cb:f0:4e:05:87:58:b8:5a:0c:cd:bf:56:
f6:18:63:f6:e7:a7:01:05:24:07:e9:7d:12:08:a0:e9:ad:e0:
15:20:f3:2a:f7:28:e5:06:91:49:d7:0e:80:b5:d0:91:3b:30:
79:01:28:d7:dd:f6:8a:07:ba:76:70:64:b9:8e:04:ba:66:43:
fa:87:e1:b2:a3:d1:7e:02:ea:9d:3c:48:92:1a:27:39:ea:c4:
d5:65:47:59:23:0f:92:1d:0f:f1:28:85:2d:72:fd:2c:14:d5:
61:ac:ca:7c:bc:5f:b8:79:ac:ce:39:6c:5f:5f:ee:38:32:7e:
64:e7:f4:2d:c5:56:20:59:7d:5e:b1:27:7d:db:d2:a1:2e:91:
55:92:a6:23:5e:06:38:80:cd:8b:14:b0:8d:7f:11:86:32:b6:
89:25:06:31:4c:75:a4:82:8a:5f:7d:21:51:8d:fc:ec:33:48:
25:17:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:41 2024 by rpki-client on console-fra.rpki-client.org