Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/5sKgm3PnyixWV148o71MEu3SrCU.roa
File: 5sKgm3PnyixWV148o71MEu3SrCU.roa (raw, json)
Hash identifier: VmmlkoZbqL+7jI5is5WOhk/XVJiF989lSSRLhulaMOA=
Subject key identifier: E6:C2:A0:9B:73:E7:CA:2C:56:57:5E:3C:A3:BD:4C:12:ED:D2:AC:25
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 32BA4323
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/5sKgm3PnyixWV148o71MEu3SrCU.roa
Signing time: Sat 01 Jan 2022 16:06:37 +0000
ROA not before: Sat 01 Jan 2022 16:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 178.250.16.0/24 maxlen: 24
178.250.18.0/24 maxlen: 24
185.24.240.0/24 maxlen: 24
2a00:fc80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851067683 (0x32ba4323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Jan 1 16:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6c2a09b73e7ca2c56575e3ca3bd4c12edd2ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:90:da:9b:35:4d:8d:83:26:b5:f0:06:d4:
c6:6d:9f:78:5f:8b:aa:a6:d0:ff:bc:24:41:e4:62:
fd:1e:84:4e:de:cc:a8:d5:93:31:35:a1:b9:e2:3e:
6a:af:52:c9:65:98:c7:4d:a0:44:1d:42:5b:8a:96:
0e:31:6e:22:f2:56:5f:27:4c:4d:1f:da:b1:fb:a4:
d8:ec:5f:89:b5:56:65:61:12:41:9d:be:96:ec:c9:
41:51:b5:77:d2:e7:72:8c:8b:b1:1c:da:a9:c7:51:
3b:ef:b4:15:81:90:71:34:de:07:0e:88:40:d5:ef:
f0:c1:57:6e:32:f0:7e:4b:93:f0:55:f2:f5:91:7d:
5d:50:8e:62:df:f3:a4:28:46:78:91:eb:16:9a:70:
94:cd:74:84:16:52:d0:ed:94:35:ae:2a:49:b3:ed:
b1:bc:16:84:59:a1:f5:2d:87:75:d9:c4:7d:0e:5c:
ba:dc:c5:07:39:a6:34:59:75:bf:bd:20:41:19:0e:
09:8d:ed:7b:76:eb:d8:02:47:f9:60:51:71:3f:bd:
95:38:93:d0:ac:4e:a2:df:3c:ac:1d:e2:2a:73:c6:
9a:be:df:a5:56:3a:55:07:f3:f4:15:8d:51:95:f5:
9a:28:c0:35:d4:e9:32:c0:59:91:c7:b1:79:5a:11:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:A0:9B:73:E7:CA:2C:56:57:5E:3C:A3:BD:4C:12:ED:D2:AC:25
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/5sKgm3PnyixWV148o71MEu3SrCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.16.0/24
178.250.18.0/24
185.24.240.0/24
IPv6:
2a00:fc80::/48
Signature Algorithm: sha256WithRSAEncryption
1b:25:14:3b:89:dc:1c:8e:40:a8:d6:13:35:57:3c:09:6d:a0:
ba:0b:8b:94:cb:a0:aa:ab:21:ba:be:1b:31:66:0e:bf:6e:8f:
16:f3:8a:d6:8d:5a:b6:0a:76:09:0d:8c:6f:db:64:91:ec:06:
82:21:9a:c8:b2:69:01:df:c8:7f:c1:ad:2e:76:3c:29:78:90:
af:ed:82:01:15:1c:36:a0:dc:77:3d:25:93:0b:d5:46:fa:d0:
d8:0b:d5:64:58:5e:b1:18:9d:d5:d4:bb:96:cd:49:2f:01:88:
91:97:3d:0a:bf:26:15:75:92:08:5a:e7:4e:9f:12:1d:ae:0f:
63:d0:7d:1a:57:6a:54:22:a6:2a:fc:46:94:bf:01:fb:48:9f:
52:e1:80:0e:e4:87:93:f9:df:e2:17:22:b1:75:a1:30:ce:c0:
64:30:42:3e:f5:2b:72:5c:67:7e:7d:7a:04:68:4a:22:9d:eb:
b5:06:7c:f8:de:02:1d:67:34:4a:bb:60:a0:2a:c8:57:42:7e:
5e:d3:7e:49:63:1d:5e:44:66:97:f0:27:b6:23:f1:15:98:41:
2d:99:4f:55:c0:ca:3e:b2:98:48:26:d8:a3:b1:58:5e:48:d6:
cc:cb:cb:b9:87:71:ee:cf:7d:db:cb:09:50:7a:10:43:95:96:
9f:61:f5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:02 2023 by rpki-client on console-ams.rpki-client.org