Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/K9-5D-y93v0CxUW4z1vnDzZcU4E.roa
File: K9-5D-y93v0CxUW4z1vnDzZcU4E.roa (raw, json)
Hash identifier: 78pcuWYGN8HJ6Uuq/K+LWDtk9r0ub/XOKTK7B77l8vo=
Subject key identifier: 2B:DF:B9:0F:EC:BD:DE:FD:02:C5:45:B8:CF:5B:E7:0F:36:5C:53:81
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 023C9ADB
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/K9-5D-y93v0CxUW4z1vnDzZcU4E.roa
Signing time: Wed 23 Feb 2022 11:09:34 +0000
ROA not before: Wed 23 Feb 2022 11:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48927
IP address blocks: 178.215.228.0/22 maxlen: 22
178.215.231.0/24 maxlen: 24
2a0d:5440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37526235 (0x23c9adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Feb 23 11:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bdfb90fecbddefd02c545b8cf5be70f365c5381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:5e:fa:ec:71:93:99:7a:68:ce:41:a4:a0:
70:71:a0:78:4f:fd:3f:59:5e:d0:77:e6:44:46:dc:
97:5a:6e:32:6d:95:2c:a5:23:d7:dd:81:0a:a0:08:
c0:bf:05:b2:e9:9b:4f:22:17:88:ff:41:7c:28:62:
6e:a9:ed:38:55:d5:49:35:69:a6:e1:2e:fb:50:8b:
9f:fe:1b:81:e9:28:8d:e4:c8:00:6c:75:96:05:f2:
4a:7b:e7:4e:0e:c1:3d:74:96:81:4c:45:37:13:b4:
35:46:5f:c8:bd:ac:a1:8f:4d:25:49:f4:c5:85:f6:
17:ad:09:46:b2:4c:2c:3f:e2:5c:ae:cf:17:38:5f:
e6:98:4b:f9:91:3a:08:63:f3:5c:f8:88:cb:5e:a3:
14:f9:e6:78:e8:d3:e6:a4:e4:94:53:37:48:98:d5:
30:a4:4f:c4:3d:43:bf:14:84:04:bd:22:99:d1:12:
88:61:ad:f7:16:7f:2c:6d:ae:4e:1f:e9:b2:08:e7:
df:c9:a3:6e:94:b2:5f:0c:20:ac:9f:60:50:23:e8:
ae:ac:46:94:b9:20:df:d3:5a:a9:fe:7f:ca:e2:49:
e3:f6:4b:7b:7b:ab:a8:dd:79:f6:0a:64:2e:ed:c4:
e9:7d:82:ea:31:d1:31:2d:ce:f1:50:0f:c6:3e:55:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:B9:0F:EC:BD:DE:FD:02:C5:45:B8:CF:5B:E7:0F:36:5C:53:81
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/K9-5D-y93v0CxUW4z1vnDzZcU4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.228.0/22
IPv6:
2a0d:5440::/29
Signature Algorithm: sha256WithRSAEncryption
4c:68:d7:ec:52:8b:de:66:56:4e:bb:65:74:36:2f:b1:7f:0d:
ae:ea:73:03:1e:69:18:d1:48:0b:4e:f1:b7:8e:ec:8b:ea:17:
2e:86:72:6b:2a:50:3b:47:58:a4:ee:b6:a0:49:61:7d:6f:ff:
5d:49:54:84:87:6f:13:05:98:37:c2:f8:ba:6c:7c:a4:bb:f0:
ea:b0:94:3c:f4:82:d9:fb:60:6f:9c:33:91:d8:cf:10:da:2d:
ba:70:c3:9c:8f:05:6f:9e:10:30:d9:5e:1c:a5:95:32:cb:02:
6f:74:25:8e:7d:59:92:e2:a6:e0:8f:68:eb:e2:00:8a:af:0f:
e5:4e:34:9f:4f:1e:a7:18:16:d2:c7:aa:20:f0:22:78:b1:a1:
c5:8c:6d:1e:50:b9:d5:a9:70:87:d9:fb:5e:92:ba:67:7c:77:
7d:74:74:90:94:84:30:59:8e:ac:a1:8c:02:85:96:20:fb:10:
13:54:78:d7:60:80:5f:de:e8:c4:c2:cc:54:cf:b2:bb:ba:68:
c6:dc:fd:b9:9b:34:b0:97:36:df:40:01:f7:15:73:22:0a:40:
7e:92:9e:50:69:d7:54:b0:19:53:f5:8f:5e:36:f8:25:37:04:
ef:4f:ae:73:97:42:4b:02:5d:b8:94:27:14:f9:3c:5b:c3:4f:
3a:0c:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org