Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/IetQHiosUVWbtRyO88qDvQjS1oQ.roa
File: IetQHiosUVWbtRyO88qDvQjS1oQ.roa (raw, json)
Hash identifier: yQlB0g6UZi7HyiqgsTWcQ6Zw0tOpFb+pmQ8atds9Yn8=
Subject key identifier: 21:EB:50:1E:2A:2C:51:55:9B:B5:1C:8E:F3:CA:83:BD:08:D2:D6:84
Certificate issuer: /CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Certificate serial: 2A41
Authority key identifier: 3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/IetQHiosUVWbtRyO88qDvQjS1oQ.roa
Signing time: Thu 27 Jan 2022 09:36:31 +0000
ROA not before: Thu 27 Jan 2022 09:36:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 178.211.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10817 (0x2a41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Validity
Not Before: Jan 27 09:36:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21eb501e2a2c51559bb51c8ef3ca83bd08d2d684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:a5:fd:6f:ca:f2:ca:00:4f:0f:c6:1e:cf:
a1:94:4c:07:db:d9:fe:4d:cd:bc:9e:9c:13:e4:c4:
2d:f5:c9:c3:c7:68:1f:9b:0a:60:54:4a:91:1f:a6:
08:6f:5d:a9:20:74:6c:28:c0:7c:5f:83:95:19:5c:
b4:96:b0:67:64:21:2a:89:4f:fa:a0:51:ad:65:0b:
50:0f:65:b4:bd:a1:bc:86:1c:90:ce:ae:a8:fa:5b:
8e:e8:a2:8f:34:6f:45:42:a2:9c:67:be:33:a3:e0:
e1:11:2f:61:a2:2d:ce:cb:7f:3d:fb:b4:1c:c9:2a:
08:fd:7e:22:8b:0f:fc:39:7f:fb:7c:b4:47:e0:3f:
36:02:77:67:ed:c3:85:bb:d3:5e:c6:b6:be:77:16:
ce:a0:e1:d5:d3:3f:87:d5:9f:5d:82:f4:36:dd:60:
5d:77:22:7e:de:97:15:da:92:96:d9:4b:ff:44:7d:
88:62:8e:19:2b:e1:0c:bd:f5:50:de:34:80:02:2d:
00:12:87:cc:f7:e2:3d:b2:ba:78:31:22:08:40:55:
31:db:0b:70:48:e1:a3:3a:e0:57:02:f0:3b:3c:7f:
fd:fd:fa:ee:30:30:af:93:8c:09:8f:97:f6:4d:65:
ce:7a:d0:ef:34:79:f5:bb:49:41:50:db:02:c0:dd:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:50:1E:2A:2C:51:55:9B:B5:1C:8E:F3:CA:83:BD:08:D2:D6:84
X509v3 Authority Key Identifier:
keyid:3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/IetQHiosUVWbtRyO88qDvQjS1oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f5:d6:40:d1:96:46:3a:95:aa:db:56:eb:93:e9:33:e6:07:
a4:f4:53:43:8f:5d:98:ea:88:37:04:04:a0:58:7f:8b:17:12:
3c:bd:be:96:ca:a1:2d:d8:55:ce:e8:9d:c2:57:e7:d9:0f:52:
9a:69:20:f6:07:bb:c7:49:f4:3c:d0:6d:9e:c9:b4:58:a5:0b:
3d:74:2a:8b:b4:ce:01:6c:d1:f7:1e:46:4d:4b:26:99:73:13:
28:fb:fa:e6:5c:fa:74:8a:ed:71:86:01:84:89:5a:77:3e:38:
f6:01:46:74:b7:97:d3:01:d4:6e:c0:f8:2c:60:9c:a4:5e:f0:
43:b8:ff:b1:88:66:25:dd:6c:73:83:af:cc:9e:44:a0:41:5d:
12:6f:51:b9:78:4b:05:2b:f8:63:b1:e3:8c:36:04:15:c6:b7:
c4:cf:04:79:89:93:a6:a9:a2:20:73:41:0e:08:d2:af:f4:d5:
cf:c9:9a:ec:24:4f:74:a3:08:95:d5:ae:a7:0c:0c:48:ae:a9:
ea:d7:a6:b2:9b:db:35:64:7a:58:a5:9e:b1:26:2b:51:16:35:
ef:39:eb:79:a3:fb:d0:ee:da:ff:f0:1a:af:1f:18:31:5e:73:
bb:00:21:0a:b0:21:ab:39:f3:67:34:4f:d0:45:e8:db:70:21:
59:67:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:30 2023 by rpki-client on console-ams.rpki-client.org