Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/aTOMrOO1exuMPt7traxlg-DjHQg.roa
File: aTOMrOO1exuMPt7traxlg-DjHQg.roa (raw, json)
Hash identifier: 5EViS4GZZezg+gvsrVWBFhseid74xBruQxfJNhtx7Jk=
Subject key identifier: 69:33:8C:AC:E3:B5:7B:1B:8C:3E:DE:ED:AD:AC:65:83:E0:E3:1D:08
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 018524C205A4466533F8626F680AE8F4963F
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/aTOMrOO1exuMPt7traxlg-DjHQg.roa
Signing time: Sun 18 Dec 2022 10:22:53 +0000
ROA not before: Sun 18 Dec 2022 10:22:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 178.21.144.0/24 maxlen: 24
178.21.145.0/24 maxlen: 24
178.21.147.0/24 maxlen: 24
178.21.146.0/24 maxlen: 24
2a02:2c0:1::/48 maxlen: 48
2a02:2c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:24:c2:05:a4:46:65:33:f8:62:6f:68:0a:e8:f4:96:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Dec 18 10:22:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69338cace3b57b1b8c3edeedadac6583e0e31d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:08:77:fd:e2:55:cc:65:ee:c2:a1:3b:f4:
f3:d8:1e:bf:ac:38:63:22:44:d0:36:2d:df:61:03:
a7:19:02:0c:c1:ac:24:2a:e3:1f:a5:04:9c:06:79:
fe:a0:04:05:ff:5b:8f:bd:2d:cd:82:41:91:23:31:
f9:fa:ab:ba:0e:c1:07:d8:6c:28:9c:61:04:2b:2d:
7c:53:f7:da:49:6b:b9:fd:01:47:c2:59:f8:a5:b5:
32:ae:e4:ff:f5:99:67:07:79:4a:26:ec:0c:6f:68:
4a:fb:99:3e:e0:c2:9e:22:7c:ae:2e:77:fe:e0:e8:
74:ee:f9:9b:2e:ca:ea:a2:87:b6:bf:62:b9:81:71:
73:bf:55:78:68:95:46:91:5a:6d:fb:e9:44:63:8b:
89:82:e5:d2:ab:24:16:c1:eb:63:09:f1:db:f1:5a:
5d:ac:96:67:87:a0:4b:75:1f:92:e9:de:a7:bd:29:
67:07:66:61:f1:a8:fd:e7:ae:c4:11:79:de:08:81:
cb:04:b8:f0:d0:4d:9a:38:f2:fc:93:f7:1e:fa:b8:
3f:a0:6c:23:a5:aa:9f:88:c2:70:58:68:9a:da:d9:
c1:3b:a3:eb:24:7c:4e:8b:5a:d1:7d:9d:62:85:0f:
2a:45:2b:a6:46:88:94:6c:73:dc:e9:c5:9f:aa:5a:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:33:8C:AC:E3:B5:7B:1B:8C:3E:DE:ED:AD:AC:65:83:E0:E3:1D:08
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/aTOMrOO1exuMPt7traxlg-DjHQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0/22
IPv6:
2a02:2c0::/47
Signature Algorithm: sha256WithRSAEncryption
0e:b8:50:ca:c3:2d:3e:a0:5c:09:fc:75:4e:81:21:f8:0e:c6:
d0:02:25:5f:3d:56:cf:d2:4f:56:8d:f8:b1:d5:49:a0:0e:b4:
10:97:e4:74:ce:3e:7d:83:4b:e4:ba:ad:a5:55:c6:74:2d:63:
a7:f4:b9:6c:2a:20:fe:ba:b7:aa:34:90:69:30:b2:fc:8f:b4:
85:3b:ca:c9:57:62:cf:ef:9c:c0:ed:d1:0e:2a:a0:9f:24:ed:
c0:cb:bf:d5:71:9c:48:44:f0:84:7e:ad:0a:43:95:02:9d:99:
a9:83:51:9a:e6:96:77:98:8d:d1:e0:91:45:d4:7f:a8:f0:66:
df:9c:e6:20:9e:89:18:4a:6b:50:b9:62:c5:5a:72:fb:4c:bb:
c6:dc:3a:33:ba:28:19:c3:a0:c8:8a:01:40:0e:fa:c2:eb:4b:
70:1e:ac:86:49:a9:91:2d:ba:9a:97:71:72:d8:1d:54:ab:2d:
4e:17:cc:fa:9a:ea:0b:f2:e9:12:71:ea:5c:42:2d:78:95:08:
04:9f:45:91:46:66:ac:83:e3:7d:d4:e1:92:77:a7:4e:27:bf:
39:74:d5:28:6d:ed:8a:8f:a9:07:f8:53:f7:ff:41:98:29:3d:
8f:05:9d:5c:25:62:fa:77:b5:7c:f2:8d:6d:c4:41:01:37:c8:
22:9e:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org