Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/PGvB2HAadxHLxAaYXrHgYQPdlxc.roa
File: PGvB2HAadxHLxAaYXrHgYQPdlxc.roa (raw, json)
Hash identifier: 0pY3VcJRfXERpYydg1265hjkAwa7TB2GqHF42tED+EY=
Subject key identifier: 3C:6B:C1:D8:70:1A:77:11:CB:C4:06:98:5E:B1:E0:61:03:DD:97:17
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 1C18FB96
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/PGvB2HAadxHLxAaYXrHgYQPdlxc.roa
Signing time: Sat 01 Jan 2022 14:04:30 +0000
ROA not before: Sat 01 Jan 2022 14:04:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 178.18.28.0/24 maxlen: 24
178.18.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471399318 (0x1c18fb96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Jan 1 14:04:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c6bc1d8701a7711cbc406985eb1e06103dd9717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:be:a5:01:ff:c0:d9:73:1f:b5:e3:86:64:
95:69:cf:12:68:a6:34:59:a8:17:0e:58:a1:aa:09:
25:0d:b0:1b:b7:39:95:af:b8:72:e4:13:aa:72:42:
78:8b:11:28:6a:c9:f9:06:6c:9e:ac:14:32:9e:8c:
c5:0f:a2:40:15:0d:46:6f:ac:a2:31:a7:a6:6f:c1:
e2:8f:2b:39:aa:8d:02:cb:c4:e9:49:11:80:b6:fc:
d0:f9:46:e4:3b:c0:58:49:d4:11:ec:48:bc:4d:95:
f3:6b:07:b5:36:78:5b:bb:52:b8:b3:b2:cf:4f:ac:
08:af:6a:cd:a1:fd:11:ca:cf:6d:33:ce:82:f8:a3:
07:66:10:f9:e8:5e:24:dc:1e:01:b9:f7:3a:f6:66:
15:72:83:bc:ce:89:6c:ff:e9:7a:2c:36:e1:90:f6:
ee:fb:48:d3:6d:82:70:10:95:8c:12:55:60:49:58:
46:c4:37:25:96:54:b1:7c:1e:96:bc:90:fe:ae:40:
50:3b:1e:fe:2e:4e:b3:87:99:75:68:9d:65:f9:88:
f4:78:51:c9:10:bb:f7:e0:68:8b:d0:37:0a:cb:fa:
4c:66:7c:0c:02:2b:57:24:88:55:a7:e7:a1:6d:db:
6f:5d:cf:36:7a:40:e8:ab:94:df:0f:49:fd:cc:5f:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:C1:D8:70:1A:77:11:CB:C4:06:98:5E:B1:E0:61:03:DD:97:17
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/PGvB2HAadxHLxAaYXrHgYQPdlxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.28.0/23
Signature Algorithm: sha256WithRSAEncryption
06:f1:cf:44:ee:1e:5c:36:01:65:cd:4c:4c:ff:0c:87:60:9f:
da:d2:67:9f:d2:c9:83:3d:d5:a1:28:24:40:e9:88:0a:b1:5d:
5a:ca:f7:b1:a3:a0:45:0d:95:fb:ed:d4:42:1a:7d:03:2a:a2:
ba:4d:08:7a:5b:80:18:20:af:89:12:a4:00:66:ab:8b:68:a5:
54:4f:59:30:2d:86:5a:ef:5f:7c:ff:e5:f7:74:0e:38:8e:27:
f1:7e:59:50:e4:13:dd:e9:64:e2:b0:ff:48:cc:f0:68:4c:6e:
28:24:6a:73:25:cf:3c:5a:05:a1:1f:58:d8:cd:2e:1b:74:c5:
7b:20:f3:99:6b:95:2c:77:54:65:19:b7:a3:7d:ee:47:a4:15:
cf:61:3b:6e:55:e4:4d:4d:c8:1f:f6:f4:1c:10:fa:79:9b:f5:
f6:3f:1a:f9:5a:2a:4c:93:a9:cb:67:12:41:b5:84:07:c7:c2:
2b:90:1b:7c:50:9e:7b:75:bc:3f:67:d6:61:e1:80:4f:b2:3b:
15:c1:18:1d:f7:af:2f:05:36:8f:ba:65:a6:e4:56:3b:6a:33:
7b:e3:a5:eb:cb:4e:03:16:a1:c2:e0:55:1f:90:0c:ce:75:ee:
40:45:22:d2:fa:a9:9a:db:e0:6b:8a:76:71:af:38:02:ee:1e:
c2:cb:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-ams.rpki-client.org