Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bjzwfFJ_lio4BtGsWpPpSn6WJk4.roa
File: bjzwfFJ_lio4BtGsWpPpSn6WJk4.roa (raw, json)
Hash identifier: zWGKqJ9tZBjs6tZ/JbepRbxvW5WGo6A+MJwThlxDJXw=
Subject key identifier: 6E:3C:F0:7C:52:7F:96:2A:38:06:D1:AC:5A:93:E9:4A:7E:96:26:4E
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 027A4A2D
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bjzwfFJ_lio4BtGsWpPpSn6WJk4.roa
Signing time: Mon 21 Mar 2022 08:47:25 +0000
ROA not before: Mon 21 Mar 2022 08:47:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48927
IP address blocks: 178.215.229.0/24 maxlen: 24
178.215.228.0/22 maxlen: 22
178.215.231.0/24 maxlen: 24
178.215.230.0/24 maxlen: 24
2a0d:5440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41568813 (0x27a4a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Mar 21 08:47:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e3cf07c527f962a3806d1ac5a93e94a7e96264e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:c4:f2:5b:9e:17:c9:1a:ab:76:8e:2f:2a:
b1:ec:3d:2e:dd:64:3f:b2:3e:a6:a6:b6:fd:98:69:
93:a9:e6:c4:2a:0b:d9:7a:46:02:4d:20:f0:57:02:
7c:0e:38:a3:05:ce:43:e7:65:4f:51:df:0f:a8:03:
ca:5d:ba:36:0d:d3:1c:61:83:98:36:3a:11:87:be:
8b:ff:cb:67:85:8c:d0:ad:e9:54:7c:0c:34:39:50:
2e:45:11:bf:75:22:bf:00:b3:b1:1a:e2:d6:00:3c:
a2:88:ef:d4:c0:ae:92:ee:48:bf:89:81:c3:19:b6:
e5:2f:31:58:c4:45:be:7c:1f:08:8f:8f:af:7e:b9:
ef:6e:c0:5d:ed:44:18:0f:72:e2:b3:35:21:e5:f5:
32:a9:a0:64:0a:e1:e1:55:5f:d0:9e:cd:ef:dc:36:
b6:29:15:8a:d1:74:97:db:42:eb:d9:e4:61:77:8b:
e5:fe:dc:25:b1:fe:b8:83:71:04:a5:41:ec:4b:a5:
e0:cc:13:8c:fc:01:f9:8d:b1:b3:4f:32:95:86:9d:
1d:1a:f1:e4:38:82:00:ea:06:01:cd:d1:2b:13:d2:
28:cb:e8:c2:9e:db:59:5f:77:35:90:47:a9:aa:6f:
bf:45:72:0a:1f:a2:b5:9a:a2:35:9b:60:99:1f:cf:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:F0:7C:52:7F:96:2A:38:06:D1:AC:5A:93:E9:4A:7E:96:26:4E
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bjzwfFJ_lio4BtGsWpPpSn6WJk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.228.0/22
IPv6:
2a0d:5440::/29
Signature Algorithm: sha256WithRSAEncryption
ba:e5:8b:f0:c7:9c:65:be:90:ae:6a:f4:be:b9:a0:d9:54:eb:
33:7d:55:57:a2:07:3d:07:a2:98:c4:c5:0d:10:9a:d0:fc:74:
9b:6c:91:98:aa:a2:76:c9:38:10:ca:cc:f6:83:3f:08:b0:89:
2b:51:13:b0:ee:2d:37:b5:2c:14:7c:12:9f:72:de:07:8d:e9:
14:99:25:d2:82:59:85:7d:54:62:40:a6:7f:a0:19:db:b8:41:
ae:d7:b0:7b:ba:de:0e:c9:57:5a:b7:61:53:9b:31:72:00:51:
1e:e7:af:f8:ac:87:cd:c6:49:c1:5e:95:e2:14:fc:0f:da:0d:
ca:17:43:03:51:e8:80:ac:ba:93:d6:f1:47:8d:02:87:84:cd:
59:b4:e8:b3:2d:7c:39:c3:50:36:31:97:2a:c8:d0:ee:08:c6:
b7:d3:2d:2c:5d:91:69:5e:1a:22:fd:83:11:c7:be:44:2f:41:
a0:e1:bb:40:46:1d:99:f7:40:74:80:bd:9a:1c:7b:fc:1c:7b:
9b:3f:68:52:61:84:95:f5:87:4b:92:85:47:ad:e5:22:fb:31:
bb:6e:75:66:1c:86:42:b8:59:b3:13:f0:0c:d7:9c:ee:74:0a:
49:a5:3d:91:2b:b9:a6:68:fc:ed:52:2f:06:26:b5:02:19:b2:
f9:a3:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org