Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/e6iUXP-TtS_p1g5M_pwV8eQjEyU.roa
File: e6iUXP-TtS_p1g5M_pwV8eQjEyU.roa (raw, json)
Hash identifier: duKQxtDilAPc8lsN2JGlAh5AuQFtuAkJhd59fpJ8j+U=
Subject key identifier: 7B:A8:94:5C:FF:93:B5:2F:E9:D6:0E:4C:FE:9C:15:F1:E4:23:13:25
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: A61EAB
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/e6iUXP-TtS_p1g5M_pwV8eQjEyU.roa
Signing time: Tue 01 Mar 2022 19:03:25 +0000
ROA not before: Tue 01 Mar 2022 19:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 178.20.212.0/24 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10886827 (0xa61eab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Mar 1 19:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ba8945cff93b52fe9d60e4cfe9c15f1e4231325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:d2:da:76:4e:7e:7b:98:6c:c3:ef:33:86:
ff:f7:51:20:8c:b1:59:ae:00:82:6f:4f:7d:7b:5f:
e1:04:af:c6:ea:34:1c:57:16:e1:b2:b8:cd:4b:76:
9a:98:b0:02:70:6f:20:38:b9:02:6a:e9:6e:9d:b5:
16:94:3f:84:88:e5:1d:87:d0:4f:07:56:2d:71:a2:
c0:16:6d:82:5c:79:84:5e:92:8c:e6:ce:8b:08:03:
c3:57:eb:98:35:45:b1:b1:87:f6:9e:fd:27:86:82:
e4:68:db:2b:91:d9:10:de:b3:77:52:5b:41:ec:3c:
b8:a2:0d:6d:df:48:a5:ce:ee:53:52:b0:7d:b6:4a:
aa:b4:56:34:50:99:86:99:92:f0:5d:7e:c9:be:32:
f0:60:fc:c2:9b:45:44:6c:e9:b2:b3:b3:6e:06:9a:
02:ec:ce:ae:56:b1:83:34:5d:d8:fd:ae:70:f9:17:
42:9b:4a:e1:2f:2e:dc:6c:48:04:dc:01:38:61:48:
c9:7e:eb:64:69:e8:8a:b5:c3:99:b2:1e:13:84:4e:
ec:f3:f8:e3:64:d3:43:65:2d:05:3a:bf:82:1c:07:
98:7d:fb:db:f1:bb:46:f7:b0:8f:a4:6d:e8:c4:10:
b7:a4:25:55:49:1c:82:0b:13:c4:67:8c:8d:3d:96:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A8:94:5C:FF:93:B5:2F:E9:D6:0E:4C:FE:9C:15:F1:E4:23:13:25
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/e6iUXP-TtS_p1g5M_pwV8eQjEyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e4:c7:c1:99:94:bc:02:b1:09:1a:97:05:4c:e2:ef:da:a8:
a5:51:5c:28:a2:a7:0c:44:43:32:e3:95:dd:41:4d:bb:c0:a0:
f1:c0:36:a9:72:6d:7e:53:5d:c4:bd:6a:7e:77:c8:cc:28:ab:
dc:63:a5:b5:3c:8a:05:d2:8a:ee:48:82:a5:ce:7a:58:65:dd:
a7:4c:e9:83:05:4e:56:3a:6e:fd:e4:c1:94:7e:f6:96:4e:f1:
b4:60:60:4a:68:70:6f:e0:60:28:93:b2:c9:f4:d7:0e:21:5a:
78:98:7f:5a:14:ee:f1:0e:e2:58:33:90:9b:fa:1a:7c:c6:31:
a7:b6:f5:2a:cd:d3:bf:c7:47:13:bc:74:d4:37:48:5a:33:0e:
35:cd:9d:68:88:84:4b:93:b4:87:45:03:0d:81:37:8d:4c:b0:
56:84:82:8f:b6:45:9e:ed:d6:99:ed:b6:0f:0b:bf:19:6f:1c:
67:0d:be:e1:aa:e8:75:b8:72:bf:96:39:c9:f4:0f:83:9e:27:
56:1c:d2:c8:1a:f9:3a:69:0f:00:02:e0:37:8e:eb:ae:54:2f:
e7:02:49:2a:52:fa:ea:eb:0c:42:cd:76:72:3e:94:65:4a:0b:
ac:fe:d8:d0:39:e7:80:f9:b1:88:4d:96:94:04:44:4a:de:fb:
6b:ee:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:57 2024 by rpki-client on console-ams.rpki-client.org