Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/TvE8hh0wt_aYqS88Xcbq_fwx8X0.roa
File: TvE8hh0wt_aYqS88Xcbq_fwx8X0.roa (raw, json)
Hash identifier: 2EOWhZtLEiBkGKZ7LF2EM8cPsc2mWslbhEZQtECuZKQ=
Subject key identifier: 4E:F1:3C:86:1D:30:B7:F6:98:A9:2F:3C:5D:C6:EA:FD:FC:31:F1:7D
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01824EF1752670CAE4F854572297BBC87850
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/TvE8hh0wt_aYqS88Xcbq_fwx8X0.roa
Signing time: Sat 30 Jul 2022 11:50:23 +0000
ROA not before: Sat 30 Jul 2022 11:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43343
IP address blocks: 78.158.169.0/24 maxlen: 24
78.158.167.0/24 maxlen: 24
78.158.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4e:f1:75:26:70:ca:e4:f8:54:57:22:97:bb:c8:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jul 30 11:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ef13c861d30b7f698a92f3c5dc6eafdfc31f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:67:d1:df:29:33:e7:fa:5d:ee:6c:3f:29:
1d:3c:0b:83:6e:1f:05:e6:9b:1b:8d:3c:4d:a2:9d:
5d:44:ba:68:70:fd:a5:60:c5:11:3f:60:a7:ae:90:
1d:53:fc:5e:8c:54:37:33:bd:a1:27:9d:23:b6:61:
97:07:6c:9e:64:03:af:6c:27:8e:5c:82:1f:7d:59:
ca:44:4c:50:da:e4:d0:8c:76:77:39:0d:fa:e6:ec:
7d:fb:17:f8:bc:8d:40:ad:10:07:69:f1:df:73:06:
d3:21:22:5e:86:b0:8d:44:f2:ff:57:8f:1e:1d:22:
13:79:a8:1d:3e:c1:c1:85:f0:01:4c:69:7e:a0:78:
fc:b0:5a:96:8f:75:1a:17:2b:43:2b:4f:72:9e:36:
c0:f2:ff:b6:19:c0:7b:fb:c1:52:5b:18:68:68:f1:
0d:73:aa:0a:88:05:d9:b8:3c:6b:22:1b:06:6c:1b:
93:63:3f:81:09:31:b6:ca:48:0d:fd:1b:2e:e5:4c:
c6:e2:4c:4f:06:74:97:4e:5b:e5:7d:fb:b8:4f:6b:
15:86:37:26:32:df:bb:9f:20:6f:77:24:f4:c8:fb:
06:5c:67:7c:c2:d2:a7:ac:ca:e2:34:4a:6b:4b:b7:
0e:6d:02:5c:74:4e:cc:a3:6e:40:58:11:ee:f3:5c:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F1:3C:86:1D:30:B7:F6:98:A9:2F:3C:5D:C6:EA:FD:FC:31:F1:7D
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/TvE8hh0wt_aYqS88Xcbq_fwx8X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.167.0/24
78.158.169.0/24
78.158.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fe:b8:6a:b8:50:f6:d8:84:5f:33:87:b7:63:fa:fd:0b:d7:
ca:4d:2c:cf:2d:2e:f7:4e:a2:42:63:b3:16:b3:c6:af:8a:a8:
6b:0e:3f:aa:d7:a6:5c:03:6f:96:37:be:31:5c:e4:40:4d:e4:
af:57:0e:84:79:33:ab:8c:06:ba:ff:82:d5:d2:a6:d1:5a:09:
89:98:a8:2b:e6:03:4d:0e:cc:f2:0b:f2:53:d7:c5:f1:bb:d2:
21:3c:d7:a3:94:16:85:42:c2:7a:8c:c3:1c:be:31:81:f5:ff:
29:c7:06:1c:ba:f3:59:83:3a:8a:4d:c4:1d:00:6d:c2:eb:63:
9c:64:a4:a4:cf:e4:f9:5e:b0:f3:63:6b:80:26:81:3e:60:5d:
59:64:21:4a:3f:45:05:9c:bc:9e:8d:29:b0:75:64:aa:fa:b6:
d5:d5:45:4f:dc:da:54:74:94:af:69:74:7d:ed:2f:ac:fe:34:
2b:83:b0:12:b5:be:74:5b:fe:3a:d0:fe:23:1c:04:ce:38:43:
11:0d:12:4b:a9:f1:fb:95:6b:d1:0b:80:93:08:53:3a:75:a1:
7a:06:9c:20:30:8d:71:cb:fa:2e:05:82:c1:f1:e2:7b:02:7b:
ed:b9:4b:54:e8:89:2b:c8:d6:62:48:01:b0:5d:2d:ea:2a:1a:
93:d7:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org