Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/6AKmM_ZGiAw_C7N_Tauh2M7QTm0.roa
File: 6AKmM_ZGiAw_C7N_Tauh2M7QTm0.roa (raw, json)
Hash identifier: jUiATM/tZWbiJOF4vntUrgn7kkECubXRSjBIC1X7OPc=
Subject key identifier: E8:02:A6:33:F6:46:88:0C:3F:0B:B3:7F:4D:AB:A1:D8:CE:D0:4E:6D
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 02862052
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/6AKmM_ZGiAw_C7N_Tauh2M7QTm0.roa
Signing time: Mon 21 Mar 2022 16:47:05 +0000
ROA not before: Mon 21 Mar 2022 16:47:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48927
IP address blocks: 178.215.228.0/22 maxlen: 24
178.215.231.0/24 maxlen: 24
2a0d:5440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42344530 (0x2862052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Mar 21 16:47:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e802a633f646880c3f0bb37f4daba1d8ced04e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:d0:c8:1d:a9:4a:3a:b4:e6:25:9a:83:29:
be:72:34:65:2e:e4:e5:83:54:bb:8b:98:a2:81:de:
66:85:30:11:c7:e5:69:53:e2:02:fb:23:b0:08:74:
79:04:2b:9b:74:9a:f7:7e:b2:ce:55:bc:72:39:54:
49:87:8d:15:a7:13:b6:23:9e:ae:7e:a1:d8:c7:a2:
8e:29:bf:ef:a5:38:3c:89:2b:69:68:f2:42:4e:e5:
17:b7:d1:06:b7:bc:a0:7e:33:4e:9f:d4:72:90:36:
70:64:a1:8f:0b:e6:c6:ec:48:7c:13:6d:cb:cc:31:
70:12:be:1a:94:c3:08:3e:30:29:5d:93:ec:cd:9f:
dd:dc:a4:2e:6d:e0:b9:eb:c6:2a:a6:26:cb:f7:ad:
a8:50:3d:60:5b:14:4a:89:af:19:60:90:50:63:1c:
30:1a:77:21:1d:d3:6a:20:27:62:43:f9:0b:5e:d1:
d0:60:e9:b3:78:52:87:1c:fc:15:37:74:bf:96:83:
27:00:be:ae:16:a1:37:31:0d:f1:57:5b:8e:e9:bc:
3c:f8:96:d0:7d:ad:44:99:84:96:a7:95:9f:1e:6e:
a4:a0:13:18:5f:60:75:fa:a5:b8:2b:1b:5c:f0:27:
6d:65:e5:46:34:35:2b:a7:c1:a7:20:7d:31:a8:03:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:02:A6:33:F6:46:88:0C:3F:0B:B3:7F:4D:AB:A1:D8:CE:D0:4E:6D
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/6AKmM_ZGiAw_C7N_Tauh2M7QTm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.228.0/22
IPv6:
2a0d:5440::/29
Signature Algorithm: sha256WithRSAEncryption
03:95:62:5c:2d:f4:b6:a9:b7:48:cf:3d:26:af:75:33:7a:1c:
48:2d:68:41:ba:9e:55:4c:84:07:18:92:67:70:a6:ea:69:86:
16:e0:ac:8a:73:fb:17:5b:1f:1f:fa:89:0f:54:3d:50:01:42:
72:e3:af:36:c9:ad:52:cd:14:e7:9c:04:00:37:f4:94:8f:dd:
db:03:89:4a:57:2d:fe:96:a5:e6:81:f9:89:ef:28:8d:f8:49:
6c:4a:a2:0d:8e:0a:a4:b8:a6:a7:4e:01:4a:ab:37:83:54:96:
e2:2a:b5:b7:cf:8b:55:fa:60:d3:4d:39:cf:08:73:81:03:f6:
ea:b4:8f:a6:89:e2:72:56:3e:c4:5a:51:d0:27:e0:40:f0:24:
90:7e:87:95:9d:ec:d2:f3:93:9a:51:a3:65:2f:ee:da:e6:52:
e0:b6:1a:92:79:bc:a0:07:8c:5b:eb:68:9c:9b:42:56:27:d6:
75:2e:2a:af:04:e7:07:17:a1:7a:54:47:01:70:d5:04:f1:e7:
30:13:c9:3e:b3:8e:db:41:c0:81:11:a1:75:78:f5:1d:5c:2f:
40:53:b6:53:db:89:8f:34:7c:9a:e4:e5:c3:04:b7:ef:31:75:
35:00:61:ff:cd:14:bf:bf:71:f0:5c:00:19:52:a5:71:29:69:
61:d7:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org