Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/oU9sjWAPim_IMAcg9VwV7KR07p0.roa
File: oU9sjWAPim_IMAcg9VwV7KR07p0.roa (raw, json)
Hash identifier: KkB1tG1gmmlTZI9z7T+f4Q3+8nG5gTikeh8/JlWvFHU=
Subject key identifier: A1:4F:6C:8D:60:0F:8A:6F:C8:30:07:20:F5:5C:15:EC:A4:74:EE:9D
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01827294B0202E5A5C3FFCC4C99668BB9303
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/oU9sjWAPim_IMAcg9VwV7KR07p0.roa
Signing time: Sat 06 Aug 2022 09:55:23 +0000
ROA not before: Sat 06 Aug 2022 09:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43343
IP address blocks: 78.158.169.0/24 maxlen: 24
78.158.167.0/24 maxlen: 24
78.158.179.0/24 maxlen: 24
37.114.243.0/24 maxlen: 24
37.114.244.0/23 maxlen: 24
37.114.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:72:94:b0:20:2e:5a:5c:3f:fc:c4:c9:96:68:bb:93:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Aug 6 09:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a14f6c8d600f8a6fc8300720f55c15eca474ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:29:61:a2:8a:52:a3:64:81:b7:e2:15:d8:
7c:93:5d:9a:e7:bd:86:a1:d6:cd:d7:51:37:94:a5:
92:89:dd:dd:7d:05:ba:18:85:b9:f2:a8:67:44:07:
2f:f1:cb:44:65:c1:7f:02:66:03:bf:da:9a:78:60:
69:e6:c8:d0:ee:82:36:f6:6a:5b:12:91:f0:be:86:
db:19:ec:74:40:c0:29:23:13:6c:f9:45:c6:0b:f0:
65:c0:d4:7b:80:06:e1:a7:d8:b0:39:fa:37:38:c4:
e3:b2:c9:e5:88:0c:ad:a5:64:9c:34:1c:75:0e:bf:
42:2b:4c:f1:e2:69:e5:9f:55:b1:12:9c:f6:04:08:
f4:58:60:1d:ca:23:2e:ef:db:af:5d:22:2a:d9:64:
08:27:14:23:86:ec:1e:43:00:15:62:01:13:3a:0a:
c7:09:a4:d2:0c:f7:c9:90:64:0a:19:36:c6:67:c3:
47:d0:1c:7c:b9:09:58:5f:db:7e:76:fd:f4:8a:f1:
f3:fc:f3:9b:a9:c0:26:99:ed:c4:41:6b:59:ff:65:
cd:aa:e0:f9:cf:89:a4:66:6f:f5:da:ef:d7:2b:a7:
33:46:a6:31:25:2b:d6:04:51:0e:2c:84:1d:92:42:
f7:85:db:9a:bd:45:68:6b:26:ba:29:68:1e:bf:4e:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:6C:8D:60:0F:8A:6F:C8:30:07:20:F5:5C:15:EC:A4:74:EE:9D
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/oU9sjWAPim_IMAcg9VwV7KR07p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.243.0-37.114.245.255
37.114.252.0/22
78.158.167.0/24
78.158.169.0/24
78.158.179.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fa:dc:18:5d:63:b4:00:f0:a6:7d:ff:78:56:30:9a:2f:10:
67:85:f5:36:bd:55:26:06:01:48:e7:8c:9d:00:6c:18:0c:82:
2f:eb:2c:72:71:d7:23:11:e1:6b:49:b8:0e:e7:e5:b0:d4:90:
97:e4:a2:ec:ff:f6:69:16:9b:a3:72:ad:49:48:e8:f7:c6:bb:
f2:54:b3:a7:82:7c:10:53:40:a4:ad:39:d2:ba:6f:e4:d2:a7:
fb:87:a0:e1:a7:09:30:e4:01:19:57:9d:aa:c1:f1:ed:f0:68:
cf:ce:53:04:94:10:6f:ad:7d:a5:8e:64:d7:5e:7c:d6:c9:35:
76:d6:62:31:db:7c:07:c5:9c:23:60:53:33:c9:2e:72:51:8c:
0a:25:5b:a7:3c:6b:32:18:20:27:94:3e:f9:19:19:8b:2d:16:
1a:89:4c:8c:a2:c8:84:1d:62:13:4f:df:c3:0a:de:a3:14:2f:
22:40:1a:9d:8d:57:95:14:8c:c0:b6:fe:be:a6:bf:49:02:68:
ae:47:e3:81:4f:1a:81:0a:d7:0d:2c:63:36:b6:27:da:c4:68:
c7:0e:1e:8a:65:2d:39:49:06:1d:1c:7e:0e:5b:1e:d1:4f:6d:
b6:54:6c:9d:7c:c2:1d:f5:3b:ae:96:e9:ac:87:4d:04:09:a5:
d0:78:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org