Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hGci6lzwutLUbDEmlZR91t1k9v4.roa
File: hGci6lzwutLUbDEmlZR91t1k9v4.roa (raw, json)
Hash identifier: QqFFuYGDNEBLmSlT0nzVuDAvJRIMeg85ukfHfJzR5Is=
Subject key identifier: 84:67:22:EA:5C:F0:BA:D2:D4:6C:31:26:95:94:7D:D6:DD:64:F6:FE
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 18AE89C6
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hGci6lzwutLUbDEmlZR91t1k9v4.roa
Signing time: Tue 21 Jun 2022 12:41:44 +0000
ROA not before: Tue 21 Jun 2022 12:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199735
IP address blocks: 178.170.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414091718 (0x18ae89c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jun 21 12:41:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=846722ea5cf0bad2d46c312695947dd6dd64f6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:31:bb:71:d9:59:5d:1f:bf:56:10:22:1a:
e5:95:46:db:95:be:12:3b:d6:c0:a6:e9:27:92:f1:
bf:9b:90:f5:6e:f3:8e:3f:4e:6d:86:a8:5e:0a:5d:
fa:65:80:b0:db:f2:e7:70:1f:48:1d:ae:a1:e4:a1:
2a:bb:11:28:fe:d3:59:2d:d9:9f:4b:c7:12:b9:9a:
6d:37:0b:7d:f7:ce:eb:eb:de:a5:35:d5:e0:e6:15:
1f:c6:96:e2:01:9d:b2:f2:3c:8a:97:24:89:cf:ae:
b7:73:64:76:2a:65:ef:ea:f6:6c:98:83:6e:09:c1:
01:16:80:c6:d4:96:ab:97:15:32:0c:bc:79:74:38:
3e:d5:9e:67:66:24:4e:49:d2:e1:99:75:20:10:28:
14:cf:3c:30:62:b7:3f:f6:ec:18:c4:5b:19:6d:13:
94:37:70:93:c4:07:78:f0:c6:12:5b:12:05:69:60:
85:02:83:f5:b1:9b:1d:76:39:65:1f:ea:0c:8f:4c:
40:ee:81:d7:79:ad:b8:12:37:89:e0:2e:63:3e:9f:
7e:02:04:6f:03:28:e2:3c:64:62:f3:59:80:f5:2e:
2d:49:23:21:db:99:b1:ad:33:7d:47:cc:19:79:e7:
16:ef:e3:12:03:64:b0:83:cb:3d:a5:b6:18:9d:90:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:67:22:EA:5C:F0:BA:D2:D4:6C:31:26:95:94:7D:D6:DD:64:F6:FE
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hGci6lzwutLUbDEmlZR91t1k9v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.249.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ac:b5:52:5b:52:69:44:e7:d1:8e:3c:e2:4e:0b:e8:8c:20:
9d:ef:ab:ae:1d:3d:9b:e1:8c:df:11:27:be:4b:21:df:3b:46:
68:ff:29:68:8b:8a:08:9e:ba:1c:c7:93:2f:ba:70:38:c4:e7:
3b:6b:7b:b2:e5:84:44:43:90:bb:56:63:ea:43:c9:eb:f0:28:
7b:dc:4b:54:0b:53:8b:2b:68:21:77:8e:8f:48:83:b7:78:29:
1a:4d:fd:17:af:09:f1:8b:52:bb:e6:da:be:a9:eb:37:23:bc:
cb:9b:11:61:f3:bb:94:15:e7:f5:a5:f0:f4:4d:31:09:93:67:
5e:67:2b:db:bc:e3:08:23:86:71:5e:0c:4b:1d:8e:84:37:55:
a3:e9:2b:9f:e2:d1:5d:08:4b:4c:e9:40:75:72:cc:92:53:64:
4f:6f:ad:14:3f:5a:d4:70:55:f3:a8:d8:9c:0c:17:5e:df:87:
19:85:a3:bd:61:38:e8:fb:e1:14:5e:72:24:21:eb:dc:42:4f:
19:f8:75:db:49:0e:90:91:fe:1c:0e:79:c4:85:53:a7:94:ed:
ef:43:93:f3:41:1d:e5:cb:a0:21:75:04:13:da:ac:b2:79:31:
f5:38:ad:18:cb:4a:8a:1f:62:f9:9e:ac:93:ce:40:66:a7:79:
c8:69:09:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org