Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/5IxlSIDkITXr8tBplTamfrQ5c8Y.roa
File: 5IxlSIDkITXr8tBplTamfrQ5c8Y.roa (raw, json)
Hash identifier: GTSz03vZeSpUVdFYcMsur0QXgahaezhtRV3CqFsW+XQ=
Subject key identifier: E4:8C:65:48:80:E4:21:35:EB:F2:D0:69:95:36:A6:7E:B4:39:73:C6
Certificate issuer: /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial: 92D431
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/5IxlSIDkITXr8tBplTamfrQ5c8Y.roa
Signing time: Fri 11 Mar 2022 08:56:14 +0000
ROA not before: Fri 11 Mar 2022 08:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201935
IP address blocks: 178.219.64.0/20 maxlen: 20
178.219.64.0/21 maxlen: 21
178.219.64.0/23 maxlen: 23
178.219.64.0/22 maxlen: 22
178.219.64.0/24 maxlen: 24
178.219.67.0/24 maxlen: 24
178.219.70.0/23 maxlen: 23
178.219.69.0/24 maxlen: 24
178.219.68.0/24 maxlen: 24
178.219.68.0/23 maxlen: 23
178.219.68.0/22 maxlen: 22
178.219.66.0/24 maxlen: 24
178.219.66.0/23 maxlen: 23
178.219.65.0/24 maxlen: 24
178.219.71.0/24 maxlen: 24
178.219.78.0/24 maxlen: 24
178.219.78.0/23 maxlen: 23
178.219.72.0/23 maxlen: 23
178.219.72.0/24 maxlen: 24
178.219.72.0/21 maxlen: 21
178.219.72.0/22 maxlen: 22
178.219.77.0/24 maxlen: 24
178.219.76.0/22 maxlen: 22
178.219.76.0/23 maxlen: 23
178.219.76.0/24 maxlen: 24
178.219.75.0/24 maxlen: 24
178.219.74.0/24 maxlen: 24
178.219.74.0/23 maxlen: 23
178.219.73.0/24 maxlen: 24
178.219.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9622577 (0x92d431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Validity
Not Before: Mar 11 08:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e48c654880e42135ebf2d0699536a67eb43973c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:bd:d0:bc:e9:bc:16:c3:05:65:63:92:3c:
1e:9d:61:4f:02:04:88:8d:35:ee:91:cc:26:7f:ae:
23:6d:d1:58:e2:99:d0:bc:28:50:95:0b:77:38:ae:
af:9d:ae:ea:d7:9b:ec:05:5b:43:b5:eb:07:af:db:
b3:d2:43:f3:7c:44:46:f1:ed:b7:ab:c6:26:7a:eb:
00:c8:80:5c:4e:f1:68:e6:3f:2b:04:39:87:31:a4:
fa:0f:e3:0b:29:4d:64:59:10:49:d6:95:7e:7d:ce:
aa:bd:54:ee:d8:70:ee:24:2c:be:b1:be:cd:af:37:
79:7d:55:c5:82:b7:73:6a:4d:05:68:4e:b6:9f:66:
4d:18:98:3b:96:5e:af:de:8b:a7:f7:3c:7e:7f:22:
81:33:2e:f3:e7:36:83:a4:cf:62:71:4e:d8:1b:10:
c3:94:a2:97:97:db:ee:20:0f:8d:e7:12:ab:5d:dc:
5b:01:03:18:a8:3a:39:98:2a:fc:00:7e:96:dc:3e:
9a:c0:91:e9:f7:d8:ba:d9:e3:6a:59:be:07:fd:50:
8a:c5:f2:7c:16:20:e5:1f:77:f6:bc:f5:fd:67:04:
c7:f7:75:c3:ec:f6:1b:7c:29:e2:2d:2e:e8:5e:5e:
b2:63:f0:9c:85:86:6c:e9:8b:8c:2d:e9:8e:4d:2e:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8C:65:48:80:E4:21:35:EB:F2:D0:69:95:36:A6:7E:B4:39:73:C6
X509v3 Authority Key Identifier:
keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/5IxlSIDkITXr8tBplTamfrQ5c8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.64.0/20
Signature Algorithm: sha256WithRSAEncryption
93:be:57:9c:b8:82:e7:88:5b:62:fb:06:b1:53:03:17:7a:d6:
ca:fb:63:ff:d6:ec:2c:28:03:45:51:63:98:3f:ca:2e:dc:0a:
15:e4:80:ca:48:6b:b6:d9:b9:0d:8f:60:15:58:d2:ab:42:e5:
a0:1f:42:83:ef:08:0e:66:94:fb:6b:7b:9b:bf:50:28:0f:8c:
aa:d2:b2:bf:75:d7:a1:bc:ef:ad:1b:5a:ed:6f:63:cc:3b:ce:
1e:3a:2d:e5:2f:1c:b5:19:fe:d6:22:08:4f:bc:cb:e5:fc:68:
0e:ed:b7:0a:cd:73:38:2a:65:66:2d:5f:7a:c2:f0:26:23:49:
7f:08:67:a3:32:79:93:88:53:27:d0:97:81:5d:16:1a:0a:9a:
2e:0e:15:fd:24:e8:4a:94:ac:6b:0e:76:58:eb:ff:11:3c:c9:
67:79:60:13:62:25:2a:c0:bb:b0:0d:6b:8e:70:c6:6b:e8:53:
16:7b:37:6f:f6:ec:b2:fc:54:36:63:61:d3:c9:b7:28:07:97:
ab:ff:93:30:2b:99:e9:b9:e7:b2:c3:10:ac:b1:fd:c5:26:c0:
8f:88:c8:18:6c:92:37:2b:d5:19:11:6d:90:af:6d:53:af:ad:
da:2e:ab:81:c6:d8:f4:59:f1:02:f0:b3:df:ed:e9:d0:df:f6:
f7:ea:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:18 2024 by rpki-client on console-ams.rpki-client.org