Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/EHQDvYZbN-CTDcLDsUAH1wXWZMs.roa
File: EHQDvYZbN-CTDcLDsUAH1wXWZMs.roa (raw, json)
Hash identifier: MI/uz9RtEKv583RT+u674eQpuccxpKAfzWYOFXPg6Oo=
Subject key identifier: 10:74:03:BD:86:5B:37:E0:93:0D:C2:C3:B1:40:07:D7:05:D6:64:CB
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0446E908
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/EHQDvYZbN-CTDcLDsUAH1wXWZMs.roa
Signing time: Wed 02 Mar 2022 00:45:59 +0000
ROA not before: Wed 02 Mar 2022 00:45:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12912
IP address blocks: 178.183.0.0/18 maxlen: 18
178.183.224.0/19 maxlen: 19
178.183.32.0/24 maxlen: 24
2001:1b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71756040 (0x446e908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Mar 2 00:45:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=107403bd865b37e0930dc2c3b14007d705d664cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:6f:43:43:c8:a6:ca:3f:ce:e3:73:da:9d:
64:c1:83:31:3a:57:3f:10:5b:24:7a:fe:e8:66:f8:
a0:9a:5b:bc:05:e3:81:d4:25:36:09:4c:e9:02:f0:
2a:c3:27:8e:82:ae:74:82:ae:ed:9e:d7:85:65:2d:
da:8e:c8:da:1b:aa:53:d1:a8:e1:e7:aa:ca:3d:39:
f2:13:31:08:60:e5:b0:8e:85:99:86:18:d0:6c:6c:
11:56:13:ce:1e:32:c5:67:06:f3:ff:f8:e0:88:04:
65:6e:52:f8:4c:65:89:34:f6:d1:f8:b9:61:bc:1d:
ea:17:f1:9f:e8:08:15:a8:2f:85:37:f3:1d:1b:16:
35:fe:47:19:5e:29:78:22:89:15:4c:82:61:20:71:
01:9b:be:1e:d3:4e:16:42:85:22:72:46:de:c0:b0:
ba:63:0e:47:10:4f:4e:f2:5e:6a:f4:96:c7:64:c4:
e2:45:3c:cf:0b:f0:95:f9:ec:2e:21:8c:c9:d6:78:
c4:22:38:5d:81:69:db:af:64:be:fb:1d:62:35:1d:
57:c9:cf:4c:17:be:05:67:8a:67:1b:39:4d:c2:cd:
67:d0:86:84:55:7e:ed:26:9a:6c:94:ad:93:7f:bf:
84:9d:f9:45:8c:f0:11:ff:4e:83:52:28:aa:38:25:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:03:BD:86:5B:37:E0:93:0D:C2:C3:B1:40:07:D7:05:D6:64:CB
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/EHQDvYZbN-CTDcLDsUAH1wXWZMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.183.0.0/18
178.183.224.0/19
IPv6:
2001:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:e9:25:32:e9:13:1b:4c:bf:4e:b7:22:f5:fc:89:f5:29:43:
31:55:7f:36:b1:75:15:74:a8:ca:f6:43:47:8e:2a:2e:1e:a9:
e9:26:1a:bd:08:f0:ae:12:d9:ed:f1:41:39:3d:94:d8:7b:8c:
b5:36:25:00:99:29:fe:3e:de:9f:ab:ae:b0:0f:83:bb:5d:45:
9c:22:71:11:3c:fa:92:3e:c7:7f:c5:35:0f:43:2f:60:7f:1b:
87:13:83:ee:18:ec:0c:bd:73:96:1c:7a:8d:09:dd:14:8b:35:
25:18:bc:ff:ab:f5:f5:3a:ab:04:35:6e:21:d0:82:cd:ea:5a:
3e:04:14:12:d1:77:14:b1:27:82:c9:cc:c9:d3:47:4d:bd:22:
0a:78:d5:17:60:0a:cf:81:e7:e0:29:63:52:44:aa:6d:d7:42:
67:90:f5:d4:a2:1b:f8:c0:6e:b1:b1:76:09:76:57:34:de:cb:
16:f6:61:07:66:05:36:99:ab:50:ac:75:5e:18:73:80:cc:35:
6b:60:00:53:06:52:ff:ff:2e:60:10:8f:30:b3:c4:a9:f4:af:
b9:21:ed:2c:c8:0f:f3:e6:81:3e:03:32:3a:55:3d:a1:5d:de:
85:21:6f:3e:72:d7:2a:73:f3:4b:78:f4:10:35:c3:5d:da:14:
cc:5b:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:43 2023 by rpki-client on console-ams.rpki-client.org