Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wIlpMFEQzmNR2ATbKO1w7_omyWc.roa
File: wIlpMFEQzmNR2ATbKO1w7_omyWc.roa (raw, json)
Hash identifier: FxsXinhiF5Hpf4/ZVlpVjpl8tsF+UK3f2QgIIBAu+wY=
Subject key identifier: C0:89:69:30:51:10:CE:63:51:D8:04:DB:28:ED:70:EF:FA:26:C9:67
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01820AAF806006BA4E4B4548E516F95B350F
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wIlpMFEQzmNR2ATbKO1w7_omyWc.roa
Signing time: Sun 17 Jul 2022 05:44:09 +0000
ROA not before: Sun 17 Jul 2022 05:44:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43343
IP address blocks: 78.158.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0a:af:80:60:06:ba:4e:4b:45:48:e5:16:f9:5b:35:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jul 17 05:44:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c08969305110ce6351d804db28ed70effa26c967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:1b:3e:f1:c2:36:51:e0:bf:39:18:cd:5e:
56:c5:a5:04:46:7a:9c:74:fe:04:d5:1c:a0:1e:73:
ed:a6:33:da:37:05:4e:ad:0e:ab:17:0f:35:a1:54:
80:7d:11:bd:52:70:7f:7a:04:af:d3:bd:00:87:57:
2b:a4:e6:c8:50:44:bf:c3:6d:56:c2:d6:8e:b5:a7:
d6:ec:7a:a3:d8:47:c4:ae:59:8c:2c:17:95:64:3d:
ed:df:ac:b4:1c:fa:3c:95:f1:23:19:aa:5a:da:28:
d7:55:ea:61:b9:b9:38:0e:8b:21:5d:a6:f7:b8:86:
4f:40:f2:a4:09:f5:88:66:00:e4:38:15:f7:ca:3a:
ef:b9:8e:51:84:8a:df:b7:f9:ea:8a:c0:1b:96:ce:
27:e8:5e:b9:10:70:58:21:27:94:51:b8:98:ba:c6:
da:23:08:c1:12:df:8a:a6:9d:c2:c4:71:52:37:67:
a2:d6:7d:eb:b1:54:f1:f4:60:c4:6f:54:f0:30:21:
39:6e:87:5a:fa:b7:43:84:f6:21:73:2f:38:25:6a:
5f:e3:d7:24:81:0f:fd:27:70:16:e0:a8:78:43:44:
2a:69:c3:85:07:bb:d0:6a:3b:6c:41:75:95:4e:05:
d6:b1:61:13:b5:b2:89:4f:d6:ad:18:4b:c2:21:6f:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:69:30:51:10:CE:63:51:D8:04:DB:28:ED:70:EF:FA:26:C9:67
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/wIlpMFEQzmNR2ATbKO1w7_omyWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.167.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4f:67:12:cd:32:3a:d4:26:d3:80:f9:bd:d1:37:f6:e7:e6:
15:17:67:8b:af:81:a6:8e:21:4a:76:74:95:48:95:44:2a:0c:
17:bc:91:f0:33:2f:ef:e8:4b:80:d2:d4:1d:c7:9d:ff:69:69:
cb:bd:29:bd:7a:9d:c0:96:85:c0:a6:2a:f0:bd:3e:cf:54:f2:
67:6f:59:87:11:e7:bc:81:c1:11:26:49:ef:f3:cb:04:39:aa:
17:39:b3:72:f0:50:b3:20:b3:a3:d1:4b:44:34:96:f8:c1:ea:
25:90:a6:8b:95:93:23:a4:1a:36:2b:d4:f0:45:f6:47:c5:30:
d4:dc:59:13:de:c8:dc:97:70:1f:c0:ab:2a:85:7f:c3:05:c1:
21:c9:84:cb:13:e7:21:82:75:50:3d:15:3b:c0:ea:69:31:b4:
ac:bb:72:b0:61:04:de:f7:ae:e9:0f:1b:c3:4c:c1:06:80:d0:
0e:c7:73:56:9f:c0:c6:46:dc:d5:2f:9d:8c:e3:23:3b:75:f9:
e4:f3:17:d1:a0:87:21:f4:44:d1:94:db:d1:78:ce:dd:fd:04:
54:da:51:13:cc:51:7b:8d:58:f4:3f:3d:00:3b:4e:ea:df:5c:
c6:34:f9:be:cf:13:50:bb:0f:31:56:d9:95:3a:92:05:7d:b7:
79:ef:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org