Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/nn2TGaL8psyRXLY-JaStd1rRnFQ.roa
File: nn2TGaL8psyRXLY-JaStd1rRnFQ.roa (raw, json)
Hash identifier: w6SKl7ZwPPXew6Biw9XOSYa/882UJc4h+kMV6KipnjU=
Subject key identifier: 9E:7D:93:19:A2:FC:A6:CC:91:5C:B6:3E:25:A4:AD:77:5A:D1:9C:54
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 01C518CE
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/nn2TGaL8psyRXLY-JaStd1rRnFQ.roa
Signing time: Sat 01 Jan 2022 04:57:27 +0000
ROA not before: Sat 01 Jan 2022 04:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48927
IP address blocks: 178.215.228.0/22 maxlen: 22
2a0d:5440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29694158 (0x1c518ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Jan 1 04:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e7d9319a2fca6cc915cb63e25a4ad775ad19c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:f0:ce:d9:dd:a2:25:ad:00:76:a2:f5:cc:
02:f0:a7:91:9b:e0:6b:64:10:25:a0:fc:c0:28:b2:
e1:bb:d1:ad:a1:ac:68:e9:3e:5e:c7:28:e1:11:52:
49:1b:4b:4a:69:8d:aa:4a:fd:ac:48:68:75:30:8f:
f7:77:5f:b0:f6:a7:0d:34:4e:43:d5:1c:c9:eb:83:
99:0d:73:e1:6a:10:dd:34:29:bd:86:9f:ee:86:66:
f7:0f:15:53:02:3e:dc:f9:8a:3f:57:84:76:c9:46:
16:59:dd:58:86:cc:db:ad:1d:83:4f:f4:3a:a8:79:
1a:0f:f7:bb:07:e2:1a:aa:f6:a6:81:ad:f2:0c:41:
5a:94:18:43:9a:21:ce:81:a4:ff:d6:b6:2a:4c:e8:
0e:8c:9f:86:78:4c:69:c3:12:33:30:e0:82:75:bd:
b6:0a:49:1e:73:5b:60:8a:57:16:08:1c:ed:77:82:
99:3a:46:a0:80:89:a3:e3:c9:b9:ec:44:9e:12:60:
59:30:cf:8f:71:fd:e7:13:c0:81:31:7e:dc:75:51:
9e:84:bb:2f:9d:42:fb:a3:36:51:64:60:aa:9d:d3:
66:9b:88:2e:c6:ea:ee:ea:52:e4:d6:cc:d2:0f:9c:
68:bc:1a:8d:1a:10:be:b0:d6:31:9f:ed:0a:bd:b4:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7D:93:19:A2:FC:A6:CC:91:5C:B6:3E:25:A4:AD:77:5A:D1:9C:54
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/nn2TGaL8psyRXLY-JaStd1rRnFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.228.0/22
IPv6:
2a0d:5440::/29
Signature Algorithm: sha256WithRSAEncryption
6e:b6:f9:a1:64:64:85:1a:e5:c1:29:78:55:59:0e:82:65:4e:
59:ce:3d:64:08:3d:61:88:31:5f:97:56:39:b9:5c:da:eb:be:
d1:53:9e:7b:40:49:44:0e:a7:0c:68:17:dc:22:8c:dc:c5:7f:
c0:9f:4b:9a:1d:7c:eb:de:dc:77:2f:00:cf:56:fa:86:98:68:
5d:9d:b1:9a:ad:aa:2e:05:63:5d:ca:24:cf:47:e4:a3:db:db:
9c:55:fe:f2:82:ed:7c:da:27:c6:90:18:bb:6a:94:df:1e:8e:
3c:1e:99:db:c5:df:6f:89:68:3f:bb:75:93:3c:45:d1:3d:67:
eb:c0:a8:aa:7c:ad:6a:71:45:5a:85:48:a6:05:3a:64:5f:36:
38:c0:5c:e5:99:b0:cf:2b:c6:d8:d3:91:f9:0f:87:55:8d:8e:
5b:e7:59:7f:85:cc:d2:e5:d4:95:7e:66:ad:f1:fb:e5:e0:30:
55:b2:e0:8e:be:84:9e:a7:c8:0f:be:8b:41:10:f3:36:53:19:
4e:c5:68:34:06:8f:c0:6b:83:d0:70:90:8c:82:c6:f9:f8:0a:
c5:91:72:9d:db:73:b0:a0:e6:ac:0e:89:65:66:f2:c8:16:18:
74:d0:c1:8e:2a:74:94:61:37:bf:25:d9:6f:32:c6:10:d4:25:
97:60:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:02 2024 by rpki-client on console-ams.rpki-client.org