Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/iFHeKj5BquRxLlvZxPLxXgetnt8.roa
File: iFHeKj5BquRxLlvZxPLxXgetnt8.roa (raw, json)
Hash identifier: dAxW0i6WNvxiqkksIPbEVKwxrsUC4j8wR3sIBbIVbwY=
Subject key identifier: 88:51:DE:2A:3E:41:AA:E4:71:2E:5B:D9:C4:F2:F1:5E:07:AD:9E:DF
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0185075DE9852A0B56AD376884A66783E3A2
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/iFHeKj5BquRxLlvZxPLxXgetnt8.roa
Signing time: Mon 12 Dec 2022 17:24:33 +0000
ROA not before: Mon 12 Dec 2022 17:24:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 178.21.145.0/24 maxlen: 24
178.21.144.0/24 maxlen: 24
178.21.146.0/24 maxlen: 24
178.21.147.0/24 maxlen: 24
2a02:2c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:5d:e9:85:2a:0b:56:ad:37:68:84:a6:67:83:e3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Dec 12 17:24:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8851de2a3e41aae4712e5bd9c4f2f15e07ad9edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:dd:34:ad:4e:18:e6:e1:99:7a:11:b3:f4:
39:88:f5:68:00:81:eb:7b:ff:7a:cb:bb:32:f0:8d:
04:a7:ba:c9:e8:ae:9d:23:e3:6f:1a:fe:27:51:ae:
cd:cd:38:9f:8f:5a:75:4d:8c:12:65:41:42:b8:ff:
d7:c5:e8:1c:ef:3b:ab:9e:70:a9:fc:16:ea:a5:35:
c7:97:98:f2:59:a7:31:a4:ef:5e:ff:a3:34:d6:65:
37:8b:ff:73:40:6a:7b:16:4b:d4:6a:91:9b:0f:2c:
5d:90:79:b5:2e:cf:8d:38:22:08:31:d5:67:c2:1a:
a1:fc:3f:56:3c:a6:07:12:e0:f0:f0:b0:88:ce:5c:
26:e7:a0:34:d0:c7:08:28:29:c9:32:c9:2b:d8:bf:
0f:f2:e9:68:84:97:20:ad:4c:14:c2:d4:78:f9:12:
1d:c8:13:b0:d5:74:1c:4b:77:38:68:8c:d7:92:dd:
e7:ab:f1:17:9d:ae:d3:a7:4a:4c:79:92:0e:55:55:
73:6f:ea:32:ca:b5:62:32:e6:16:1c:46:f6:2e:23:
98:1f:86:02:3e:a4:45:5b:a7:52:d6:72:15:de:7d:
4f:5c:e9:86:4c:6d:19:f7:fe:82:2a:78:d0:6c:2c:
0f:34:ef:cc:81:24:8f:73:0d:88:30:12:72:47:0f:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:DE:2A:3E:41:AA:E4:71:2E:5B:D9:C4:F2:F1:5E:07:AD:9E:DF
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/iFHeKj5BquRxLlvZxPLxXgetnt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0/22
IPv6:
2a02:2c0::/48
Signature Algorithm: sha256WithRSAEncryption
8b:5d:64:66:dc:69:23:61:86:a5:82:7d:38:97:16:92:83:57:
3f:89:32:f2:4f:e4:6f:9b:8e:d2:96:ec:2f:ca:ca:6e:5d:2e:
0b:5d:4b:66:5c:af:0c:94:92:2d:a3:92:62:84:71:47:b3:a8:
37:4a:66:2a:97:24:b1:2d:84:38:b9:4e:b2:ca:e3:f1:76:47:
ca:57:5a:62:33:44:9f:78:fc:cd:c2:5b:0e:f5:04:41:c0:be:
ff:84:5a:af:56:72:96:04:17:2c:b5:2f:17:36:a0:f0:9a:1d:
38:a1:7f:49:a2:f9:a3:09:50:1d:d4:8f:5e:58:5e:ac:7f:46:
81:7b:88:89:00:77:38:d9:b4:53:6f:02:53:6d:6f:1b:17:63:
65:47:6e:19:3b:11:ab:c0:d7:ff:9e:44:05:b4:74:ce:13:4e:
67:9f:87:2c:3e:89:03:ff:30:b6:c7:51:aa:f1:09:bb:f4:96:
80:69:ac:d2:80:0e:bc:32:75:d1:44:4e:fc:86:f3:67:23:db:
dc:1e:19:f6:55:ed:1d:eb:b1:c7:b4:cb:63:7e:1b:75:db:4f:
b0:12:3a:4d:fe:98:c3:8e:ec:c7:90:52:35:b8:41:f1:d6:04:
1f:40:e0:2c:d1:2f:44:a3:08:62:fc:08:77:23:83:1c:ea:6c:
aa:61:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org