Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/f35RbT1Ck1AB9LbwXohCtf6QilE.roa
File: f35RbT1Ck1AB9LbwXohCtf6QilE.roa (raw, json)
Hash identifier: NpGYees1APjUWQoRGpOjsyvR5ooScHw3r3yOEXLhpCY=
Subject key identifier: 7F:7E:51:6D:3D:42:93:50:01:F4:B6:F0:5E:88:42:B5:FE:90:8A:51
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16EB8EF9
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/f35RbT1Ck1AB9LbwXohCtf6QilE.roa
Signing time: Sat 01 Jan 2022 12:01:44 +0000
ROA not before: Sat 01 Jan 2022 12:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208503
IP address blocks: 178.170.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384536313 (0x16eb8ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f7e516d3d42935001f4b6f05e8842b5fe908a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:01:e6:8d:71:d1:ed:74:66:45:14:90:c9:
65:4f:60:67:48:8c:1f:9f:24:ab:cd:57:b5:83:d8:
ef:95:01:3a:5c:11:58:e9:a7:5a:f5:79:c6:33:f8:
7e:ad:3a:a8:b4:dc:8a:0e:8d:e3:b2:f1:9b:b7:39:
cf:be:fe:fa:f9:34:a6:90:57:3c:6f:22:20:fe:af:
6a:c7:ed:96:75:1b:0b:f7:25:04:92:d5:ea:e6:37:
2b:ff:f5:ba:68:9d:74:c5:c7:96:60:22:aa:2f:7b:
9c:ac:b9:2c:dd:57:62:dc:28:d8:31:ec:0a:8b:42:
9b:ff:91:ad:43:52:7b:f2:ed:ca:88:5e:22:13:e8:
55:95:60:f3:7c:5e:a9:58:95:b0:ec:00:cc:64:42:
3b:2f:f6:f5:9d:83:87:22:b3:52:10:de:8e:0d:ce:
47:e8:bd:06:6d:29:8a:36:b1:1f:49:21:a7:c3:5d:
f2:26:d6:fd:e8:e0:72:f8:00:7a:67:b7:09:03:6a:
c4:35:a0:90:90:90:86:a1:cf:89:32:a0:71:7b:04:
eb:be:e1:39:2b:39:22:3c:ab:0e:d6:bb:c6:14:18:
6f:c4:29:4b:24:bb:32:04:fa:ef:9a:55:d4:45:e6:
01:00:d5:3c:89:6a:85:09:49:63:43:91:6d:44:5d:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:51:6D:3D:42:93:50:01:F4:B6:F0:5E:88:42:B5:FE:90:8A:51
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/f35RbT1Ck1AB9LbwXohCtf6QilE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.232.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d3:38:8b:3b:4e:93:85:1d:f7:12:11:d7:77:91:47:c1:92:
94:39:bb:a6:3a:7b:39:1f:18:7b:64:c0:24:40:a7:91:f1:c4:
0e:fc:73:4f:c2:18:1a:e6:81:73:52:a6:a0:11:40:3b:0d:f7:
6c:a9:98:1a:9c:9e:a8:df:39:3f:f0:03:12:7f:b9:56:d0:b8:
b7:8c:2a:dd:e5:e5:1b:c5:af:1a:ac:a0:bd:35:15:f4:5b:4b:
80:2d:3e:ef:73:28:68:a7:15:20:9a:c2:27:4e:34:e5:de:bd:
05:cf:da:73:b2:12:8a:ab:f5:ce:31:0e:8d:6d:83:96:24:73:
27:32:a5:ce:26:05:c4:86:de:0e:bf:34:1b:88:ea:c0:9a:4f:
31:03:bf:b0:d3:8b:3e:97:29:1b:72:86:48:90:1f:73:04:f4:
64:2d:78:1b:97:21:7e:06:7a:b1:a2:c2:69:a1:7b:fa:7a:85:
87:20:02:bf:2f:6b:ef:82:78:00:bb:a8:7d:c1:82:f1:63:04:
e3:94:13:0f:cc:97:4f:c6:29:62:e7:8a:4d:ad:6c:06:a8:bd:
e8:69:08:36:8b:0b:dc:b5:7c:8d:64:c2:31:3a:74:64:cc:ad:
aa:af:dc:1f:19:ae:15:a8:37:24:f2:b5:ef:ae:a2:af:0f:89:
72:1b:b9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org