Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/tspH0WvHyTnkx24VdEoHLqv58t8.roa
File: tspH0WvHyTnkx24VdEoHLqv58t8.roa (raw, json)
Hash identifier: Ixt1iK7w2nnZDTCCq1pacRO7w6uPsjj2SjMrjTYE/3Q=
Subject key identifier: B6:CA:47:D1:6B:C7:C9:39:E4:C7:6E:15:74:4A:07:2E:AB:F9:F2:DF
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0182C607818107002A6BA22FD07770F60A9A
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/tspH0WvHyTnkx24VdEoHLqv58t8.roa
Signing time: Mon 22 Aug 2022 14:49:16 +0000
ROA not before: Mon 22 Aug 2022 14:49:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43343
IP address blocks: 78.158.169.0/24 maxlen: 24
78.158.179.0/24 maxlen: 24
213.195.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:07:81:81:07:00:2a:6b:a2:2f:d0:77:70:f6:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Aug 22 14:49:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6ca47d16bc7c939e4c76e15744a072eabf9f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:a4:86:81:2b:de:fd:8a:ec:d4:be:90:f5:
6c:b7:c6:72:92:f8:91:28:7b:9f:ec:c4:3d:05:f6:
4e:86:32:c9:96:b4:42:fc:e9:05:f2:fa:ef:de:a5:
4d:65:bd:4d:ba:4a:12:d0:7c:6a:ab:89:80:67:95:
2f:89:5b:86:b0:6b:2f:2e:17:05:c6:17:b4:33:58:
07:e6:0a:9d:31:9b:63:a5:5d:97:04:37:11:bf:17:
ff:0d:a9:0f:f7:f0:cd:5b:b1:88:ca:6e:0c:33:72:
5c:1c:b6:4f:00:88:fa:c7:d5:75:2a:b5:23:a8:03:
67:6a:8e:83:36:86:6d:bd:09:35:d1:08:72:3c:8d:
72:ec:3a:38:cc:f0:72:7a:69:f0:02:ae:9b:04:d9:
ee:f4:88:00:14:bf:c8:bc:da:7b:b6:98:11:d7:99:
db:6a:f1:27:50:13:7a:dd:b2:d7:94:dc:fa:4b:11:
0c:ac:d9:e7:41:80:66:c6:7d:d1:fb:20:15:e7:26:
09:e1:1b:19:32:49:ec:00:00:d7:bb:cc:48:d9:01:
31:b6:61:46:9b:ef:38:63:1f:af:e6:81:45:c4:71:
00:a2:7c:8b:32:47:50:cd:17:ff:e3:2c:b6:46:75:
4f:8f:95:4a:b9:c4:6d:83:08:48:a0:53:23:06:48:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:47:D1:6B:C7:C9:39:E4:C7:6E:15:74:4A:07:2E:AB:F9:F2:DF
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/tspH0WvHyTnkx24VdEoHLqv58t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.169.0/24
78.158.179.0/24
213.195.16.0/21
Signature Algorithm: sha256WithRSAEncryption
07:63:b6:ac:a5:cb:7f:e3:d4:ad:a1:23:7e:1e:b5:d5:4c:ea:
6e:da:08:be:69:25:fd:2c:20:a6:e5:43:c7:d9:92:87:2e:b7:
70:03:db:a9:07:6e:0c:75:b8:25:59:13:ec:bf:ff:df:53:1b:
31:ef:9b:a4:08:b6:45:d9:0a:2d:97:1f:d7:70:b3:64:ea:1b:
d0:7d:52:db:26:af:de:f7:bc:64:e2:28:9f:45:2b:76:2f:e3:
02:cf:b6:b8:16:cd:4a:0d:29:b8:28:db:31:70:bc:a8:97:72:
97:8b:08:99:93:38:1d:e8:fe:4e:31:b7:b9:c5:9d:4b:c8:f2:
57:d6:c2:82:a9:e3:38:d7:63:17:ab:68:86:f3:81:cf:71:80:
08:18:59:13:22:b4:13:84:cd:7d:fc:91:d8:89:dd:83:67:e0:
94:5d:c0:ed:ef:25:23:65:d1:8a:43:af:02:1d:0d:e5:66:5c:
6c:b2:a2:a9:81:af:06:1b:24:9c:de:65:cb:00:4a:4b:71:46:
e7:99:ea:48:c9:96:dc:aa:18:0f:19:a3:8a:0b:3c:bc:65:b2:
07:51:c1:d2:e5:15:29:a4:22:ee:20:54:4e:b9:a2:54:02:24:
c6:d2:b8:47:82:0b:74:dd:62:d3:f2:5e:a9:d6:7e:67:d9:11:
33:60:ea:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org