Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wt1dm61vjvE4b6G0i3p8BH3Xsuo.roa
File: wt1dm61vjvE4b6G0i3p8BH3Xsuo.roa (raw, json)
Hash identifier: nL972Dn1cMcftjOJEYTpo+yOF2YO2ABz28mVTvXmKOA=
Subject key identifier: C2:DD:5D:9B:AD:6F:8E:F1:38:6F:A1:B4:8B:7A:7C:04:7D:D7:B2:EA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 133CE22F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wt1dm61vjvE4b6G0i3p8BH3Xsuo.roa
Signing time: Sat 01 Jan 2022 04:03:08 +0000
ROA not before: Sat 01 Jan 2022 04:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 178.236.36.0/23 maxlen: 23
178.236.38.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322757167 (0x133ce22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2dd5d9bad6f8ef1386fa1b48b7a7c047dd7b2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:49:04:e0:64:e0:eb:5b:07:a6:4d:7d:d2:f6:
02:fe:68:26:b3:d8:16:e9:bc:10:03:c0:ad:45:b1:
2e:be:27:46:ee:fe:ac:ee:1a:6b:ad:24:8f:21:2a:
be:5c:3e:c5:fc:a8:0d:7b:cb:eb:f1:4d:74:fa:cc:
8c:93:c6:d0:50:6e:db:47:40:29:53:5d:77:fe:12:
cc:7d:0f:4a:e7:5c:04:f0:4a:93:bb:76:f7:99:a9:
c9:40:dd:71:1c:5f:16:c1:e8:5c:8d:91:db:3c:65:
b3:95:97:c5:f5:4a:d2:b4:13:4f:ce:fe:7e:79:54:
70:dd:45:5f:f1:79:37:d0:f3:cd:88:3c:f2:3f:5e:
50:ed:73:59:27:bd:d7:26:51:72:51:db:f9:e8:72:
ce:67:9d:fd:bc:ce:a2:0f:b8:ad:ae:d0:29:6e:bf:
a8:c7:fd:c6:d0:e7:3a:8e:bb:e0:79:57:0e:7f:8c:
77:93:1b:24:6c:90:1b:4b:24:19:58:e9:48:e1:a2:
27:12:c3:1c:e3:fd:21:5c:be:93:55:e1:89:93:6e:
e2:69:e0:23:df:0e:f0:37:da:01:30:17:cf:25:04:
93:43:27:79:a4:39:45:a4:6d:22:cb:61:43:cb:d6:
8a:02:30:83:33:d4:14:5a:9e:5b:39:63:de:09:0a:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:5D:9B:AD:6F:8E:F1:38:6F:A1:B4:8B:7A:7C:04:7D:D7:B2:EA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wt1dm61vjvE4b6G0i3p8BH3Xsuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.36.0/22
Signature Algorithm: sha256WithRSAEncryption
56:8a:68:bd:49:59:3a:97:e4:c2:f3:e1:5b:cb:7b:0c:e8:a7:
51:2b:e1:c5:2e:c1:72:42:b5:53:62:b0:0f:7a:15:d6:10:a9:
32:17:6c:18:b2:19:37:ab:7f:14:f1:2b:fd:40:f9:89:26:b8:
ad:f9:bd:4b:10:4e:d4:d8:c0:97:54:37:55:3e:bd:e9:df:8a:
90:00:83:18:ad:b7:bf:62:42:90:80:f3:f8:4f:f9:88:4c:d5:
1d:48:27:8d:b6:94:51:b6:d6:b7:e5:3e:6c:9f:01:d9:40:29:
e5:8b:80:a4:fc:2e:a2:26:40:7f:0e:00:44:6d:42:0f:cb:18:
77:ed:9d:40:47:5b:bd:58:ab:13:3f:f3:e8:3d:7c:2e:be:3e:
e4:e7:89:24:8d:a7:e6:dd:1c:8f:c8:c7:ad:ea:6a:0a:7d:a5:
10:45:08:1f:f7:a1:4a:06:86:a1:90:f7:ed:04:18:72:b1:d8:
13:a4:0b:87:80:dc:f9:e5:21:3b:6a:5a:55:d5:4b:ad:17:e4:
2e:4e:89:ff:81:24:82:dc:99:6d:f2:9b:4e:38:e1:e5:2a:99:
70:a3:c9:76:d2:de:c2:8f:8a:ed:53:ba:19:db:96:0c:51:50:
ab:50:f3:c7:df:47:2e:9c:f6:21:93:d1:11:a5:bb:41:ee:5f:
dd:08:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org