Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/M7-8vUEh7wiAD3kMgW76CZD3Mys.roa
File: M7-8vUEh7wiAD3kMgW76CZD3Mys.roa (raw, json)
Hash identifier: wWio3opt+J+HNw3s8G7cCXUxkpFUOPmb93diuqcpGos=
Subject key identifier: 33:BF:BC:BD:41:21:EF:08:80:0F:79:0C:81:6E:FA:09:90:F7:33:2B
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 027D4174
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/M7-8vUEh7wiAD3kMgW76CZD3Mys.roa
Signing time: Mon 21 Mar 2022 11:05:08 +0000
ROA not before: Mon 21 Mar 2022 11:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48927
IP address blocks: 178.215.229.0/24 maxlen: 24
178.215.228.0/22 maxlen: 22
178.215.231.0/24 maxlen: 24
178.215.230.0/24 maxlen: 24
2a0d:5440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41763188 (0x27d4174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Mar 21 11:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33bfbcbd4121ef08800f790c816efa0990f7332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:aa:ce:9c:39:1c:dc:91:dc:07:0e:a7:7f:
8d:c4:87:00:18:b3:5d:92:ab:47:68:b0:52:23:f0:
b1:03:6f:9e:25:d7:11:56:8a:ea:28:0b:2c:dd:78:
e9:d4:aa:ba:cd:e0:bf:af:3b:be:e9:90:36:e9:06:
dc:94:f3:df:1d:f1:f6:ed:12:c9:0c:b3:c0:dd:c3:
d2:1b:a2:b1:a5:ea:47:42:18:1f:58:31:7d:b5:1f:
83:93:64:e6:2a:0c:ce:62:5e:d1:3d:2e:da:3c:03:
25:96:c8:e3:e4:04:ab:04:14:b6:90:d1:46:bc:47:
6d:41:85:35:8e:a6:82:1b:95:ac:8d:98:51:3e:8c:
b7:99:6c:ed:4b:ee:cd:b9:46:3c:08:d2:4a:8e:64:
e8:3c:ed:6c:35:f0:ec:39:0e:7f:6a:46:76:f5:bf:
4f:13:6a:7d:42:73:88:41:e9:76:7d:f0:ad:2c:1d:
cf:26:43:12:5f:8e:81:b0:bc:69:fc:7b:ee:db:0e:
7e:f1:5e:3c:44:50:27:da:ed:01:98:41:4d:b3:21:
6c:d4:87:f7:8a:79:14:b1:b8:8c:ba:20:9f:31:ad:
1a:57:57:e0:27:9b:e4:0b:84:3d:61:a1:51:2e:9d:
12:34:4d:70:66:c9:58:28:3e:22:12:67:98:fd:d6:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BF:BC:BD:41:21:EF:08:80:0F:79:0C:81:6E:FA:09:90:F7:33:2B
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/M7-8vUEh7wiAD3kMgW76CZD3Mys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.228.0/22
IPv6:
2a0d:5440::/29
Signature Algorithm: sha256WithRSAEncryption
29:15:c7:b3:de:bf:e2:1f:3a:c9:a1:c4:be:fa:29:eb:ab:49:
d8:68:95:0b:20:80:77:2a:e4:09:11:e8:c7:50:da:d9:a7:61:
8e:79:75:7b:84:92:ca:5c:4d:ac:a0:b6:5b:81:0b:de:0e:29:
cd:21:58:db:92:3b:cb:59:48:d8:b5:13:e1:e8:8c:27:7b:6b:
16:10:61:1b:27:b4:7b:8e:5c:48:db:ef:32:b1:d8:14:d4:9b:
11:24:fd:66:3f:71:49:4e:15:ab:6f:e2:69:1b:3b:11:88:ce:
78:89:83:1a:c8:e5:33:fd:8f:83:7d:86:3c:db:af:40:df:9d:
77:d1:0d:dc:9c:dd:60:67:6b:38:15:44:1a:8c:10:3e:b4:01:
2d:aa:03:0b:0b:ae:52:f6:81:01:5c:61:17:c4:24:83:42:4b:
92:ad:44:34:01:e8:a5:ff:cf:a0:f5:77:d5:46:77:3f:46:21:
b2:03:48:28:99:47:c5:d2:05:a9:17:86:f6:49:88:88:8b:f4:
1d:8e:72:b5:e2:16:35:94:27:49:4a:4d:b4:33:00:2f:d6:2d:
e1:5d:d4:35:09:83:51:f6:9f:ff:df:96:20:e2:74:47:3b:63:
a1:70:c8:94:de:fa:7c:bc:28:bf:de:7e:d3:38:b7:50:a8:2b:
ec:fa:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org