Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/0qq18L9D2W4B0FOYmnKXfnDEiLk.roa
File: 0qq18L9D2W4B0FOYmnKXfnDEiLk.roa (raw, json)
Hash identifier: wh0lp8Q1mGxJowhha8mSE4n+fzhioygKIYL4wz1hMrE=
Subject key identifier: D2:AA:B5:F0:BF:43:D9:6E:01:D0:53:98:9A:72:97:7E:70:C4:88:B9
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 02825F38
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/0qq18L9D2W4B0FOYmnKXfnDEiLk.roa
Signing time: Mon 21 Mar 2022 15:40:58 +0000
ROA not before: Mon 21 Mar 2022 15:40:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48927
IP address blocks: 178.215.228.0/22 maxlen: 24
178.215.231.0/24 maxlen: 24
2a0d:5440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42098488 (0x2825f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Mar 21 15:40:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2aab5f0bf43d96e01d053989a72977e70c488b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:f4:91:bc:7b:f1:06:3e:bd:df:f8:70:28:
f7:c9:ba:e4:f4:70:a2:2c:7c:bb:c6:3f:65:d8:b8:
3b:e4:e4:c9:03:07:7b:85:2c:34:56:57:0b:20:e1:
d1:7f:7e:83:ca:9f:7a:ee:1b:b2:44:af:58:45:88:
2a:13:16:36:be:ea:c7:c0:cf:7c:fa:9c:2b:71:3e:
1c:9e:c1:87:72:18:e9:bf:b1:9a:b0:31:b1:af:a5:
4b:00:e5:1d:11:6d:74:2d:ce:ab:d0:c2:95:42:cb:
cb:84:46:0a:2f:2f:3e:5a:02:d2:77:f0:b5:96:57:
c3:e8:45:96:dc:03:67:ec:92:ba:ac:b3:80:80:7c:
81:2a:69:5c:c7:3a:c6:eb:7b:cd:06:d6:23:34:7e:
5f:5e:48:4d:c4:1d:dd:ce:03:31:2e:fa:ca:aa:32:
45:5e:96:13:19:33:fc:35:12:a2:c8:f1:17:f4:a5:
3b:12:7b:af:b8:23:9c:1f:e0:2e:c3:89:b4:08:91:
aa:a6:46:ca:72:4b:50:18:f0:7d:5d:44:56:02:c7:
20:37:d8:14:88:71:9d:57:e3:06:46:a9:81:ab:f9:
18:97:26:c8:da:fc:7d:4b:af:c9:ec:1d:6e:6a:c0:
e0:2b:fc:06:d4:4a:b4:ec:31:d7:87:33:04:5a:3f:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:B5:F0:BF:43:D9:6E:01:D0:53:98:9A:72:97:7E:70:C4:88:B9
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/0qq18L9D2W4B0FOYmnKXfnDEiLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.228.0/22
IPv6:
2a0d:5440::/29
Signature Algorithm: sha256WithRSAEncryption
2d:9a:5b:e5:dc:20:be:e8:cd:71:b6:d7:87:14:75:f5:b9:46:
e6:66:c2:35:bf:44:65:d5:f8:1b:9e:83:3a:64:42:95:be:44:
21:f8:b3:37:d3:77:26:ee:46:76:42:0c:04:b9:e9:8a:f0:de:
8d:20:0c:7b:70:d6:41:b6:be:90:7a:d0:f0:f0:07:dd:2a:82:
37:f7:80:7d:ed:9d:20:91:03:a9:24:fd:a2:a7:dd:66:66:ca:
f8:fc:fa:d7:30:bd:2a:8d:85:c1:aa:84:b1:5b:4f:a4:0f:d9:
91:2f:38:7d:b7:5a:ae:c2:3a:ff:b9:e9:26:bb:09:26:3e:b9:
97:fa:57:e8:a2:9c:48:cf:1d:ac:56:17:24:63:26:02:10:67:
a8:8b:a2:91:65:3a:c1:09:cd:51:99:1e:95:09:89:ac:f0:58:
b2:63:b7:41:0b:d9:d7:5b:5b:69:5e:db:51:ee:09:a0:5f:a1:
04:0b:a2:8f:c5:0e:9b:30:64:b9:39:15:05:a2:a8:54:62:0b:
d2:8b:17:c6:25:0f:57:47:1e:ba:7f:d1:a4:48:a4:96:34:a8:
a3:c3:76:c7:89:ee:cd:12:63:97:ec:29:e4:e5:ab:08:06:76:
7c:89:9e:76:2f:86:3f:5e:63:24:c0:72:ff:65:e7:e1:3c:c4:
d5:e6:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org