Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/p070w7JPfppos76q7Kr34T_G4JQ.roa
File: p070w7JPfppos76q7Kr34T_G4JQ.roa (raw, json)
Hash identifier: XAjAW1uRjY4jwAS/TmeDJzhqSK89fDpavTOYQxFag34=
Subject key identifier: A7:4E:F4:C3:B2:4F:7E:9A:68:B3:BE:AA:EC:AA:F7:E1:3F:C6:E0:94
Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial: 038E9FA3
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/p070w7JPfppos76q7Kr34T_G4JQ.roa
Signing time: Sat 01 Jan 2022 01:51:16 +0000
ROA not before: Sat 01 Jan 2022 01:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51379
IP address blocks: 178.212.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59678627 (0x38e9fa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Validity
Not Before: Jan 1 01:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a74ef4c3b24f7e9a68b3beaaecaaf7e13fc6e094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:e3:94:6e:7c:ac:91:c0:df:25:86:fe:b4:
1a:1d:b6:b1:6a:6c:36:80:73:8b:8d:7c:dc:7d:01:
f8:a2:ef:33:c6:9e:45:40:cb:2b:c5:b2:73:54:8d:
0f:8d:cf:09:b6:3a:98:02:1a:4a:77:65:b9:f7:f8:
24:4f:fe:2d:1d:26:14:e4:d1:ed:37:3c:f4:02:75:
6c:83:76:2e:05:fe:b7:03:f3:66:91:ad:79:02:1a:
46:4e:88:77:0c:fe:0c:a9:49:74:7f:e7:4e:6f:51:
ea:af:fd:40:8a:d3:87:df:8b:a8:96:38:53:a2:3c:
3a:45:9d:e2:ea:36:33:6d:8a:3e:26:07:8a:30:eb:
c7:87:75:d3:8f:2c:f6:47:29:59:b4:42:a2:f9:70:
25:a7:ae:33:f8:dc:16:71:65:11:a4:b3:e4:d3:9b:
36:1f:a6:6b:a7:83:1c:5a:db:4b:b8:60:c9:62:54:
ea:92:8e:83:3a:de:35:e5:d1:e6:b9:fa:28:6b:52:
92:83:49:59:89:ec:b4:a6:c1:79:cb:2d:23:80:f5:
3e:4f:49:d4:12:2d:3a:b6:2e:02:14:36:4b:5f:90:
6d:f0:aa:ae:63:3d:af:eb:9e:82:f1:87:e5:fa:5e:
7d:9e:26:67:ef:69:30:13:72:cd:58:20:32:71:7d:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4E:F4:C3:B2:4F:7E:9A:68:B3:BE:AA:EC:AA:F7:E1:3F:C6:E0:94
X509v3 Authority Key Identifier:
keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/p070w7JPfppos76q7Kr34T_G4JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.112.0/21
Signature Algorithm: sha256WithRSAEncryption
75:0f:50:e1:58:df:65:fe:47:de:48:e2:08:d7:d1:26:44:fc:
5d:c1:2a:1d:3d:dc:d8:07:2f:7f:40:b9:88:35:1a:1e:ce:dd:
13:95:ed:7c:84:2a:56:a0:86:26:75:b0:16:25:74:43:c8:11:
db:58:18:4d:53:72:c9:1b:85:3c:69:73:d0:88:1e:75:30:3b:
d1:78:db:ed:72:27:0c:da:96:b5:ec:55:fc:6f:13:1f:31:ac:
df:ae:c5:38:e5:41:da:d8:cf:dd:15:cf:5d:76:76:2b:77:d5:
4a:5c:d5:b1:aa:e2:3a:78:3f:36:6e:47:ff:93:68:ce:96:e5:
f0:98:c8:87:ee:70:27:d8:f6:b2:98:c8:b1:bb:38:1a:31:0d:
7f:36:61:78:a5:6e:97:8c:0b:61:a2:c9:25:25:85:21:7f:5c:
a3:bb:10:f5:fa:95:5f:bd:a0:40:28:fb:14:c6:fd:ab:27:98:
3a:0d:d1:0e:64:41:89:ba:e7:a6:54:bf:5e:fd:7e:4b:af:f5:
16:81:c1:b3:0d:54:b7:55:4d:4e:fa:31:d6:ef:70:f9:56:89:
cb:e8:e4:37:14:e9:3a:5c:35:8b:a6:e3:3a:43:e2:e7:f8:42:
91:00:d4:06:e1:0b:44:8c:7f:b0:56:c6:ca:57:83:f8:ee:58:
e5:ec:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:03 2024 by rpki-client on console-fra.rpki-client.org