Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/0zNM8UimXyJpNy5myC-ACPzq0do.roa
File: 0zNM8UimXyJpNy5myC-ACPzq0do.roa (raw, json)
Hash identifier: xdoZtYu01a4Q6lcyKpfQRkj859OjskVl58cmMfVoJJk=
Subject key identifier: D3:33:4C:F1:48:A6:5F:22:69:37:2E:66:C8:2F:80:08:FC:EA:D1:DA
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: BDF8
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/0zNM8UimXyJpNy5myC-ACPzq0do.roa
Signing time: Wed 25 May 2022 09:53:13 +0000
ROA not before: Wed 25 May 2022 09:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47782
IP address blocks: 178.216.208.0/24 maxlen: 24
178.216.212.0/24 maxlen: 24
178.216.208.0/21 maxlen: 21
178.216.211.0/24 maxlen: 24
178.216.213.0/24 maxlen: 24
178.216.210.0/24 maxlen: 24
178.216.209.0/24 maxlen: 24
178.216.215.0/24 maxlen: 24
178.216.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48632 (0xbdf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: May 25 09:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3334cf148a65f2269372e66c82f8008fcead1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:64:c2:75:b5:55:c1:35:41:c1:c1:47:a7:
02:9c:e6:20:6a:2c:52:be:02:bf:62:e7:09:9e:82:
3e:ea:c5:7d:75:99:52:da:dc:77:9d:e0:3f:21:61:
34:f4:55:09:8a:3d:1e:9c:89:d6:3e:c9:32:73:6b:
a4:6a:a1:2b:3b:5f:3e:0f:45:91:a3:bd:1b:6c:cc:
2a:46:ed:49:f9:13:a8:14:77:04:97:0a:ad:f7:5d:
86:bb:a6:a7:92:78:3c:c4:92:56:90:20:85:3b:08:
ac:ed:c8:6f:82:e7:0f:8e:3f:43:39:d3:2d:d4:80:
cf:04:45:ee:25:36:b7:08:7d:77:76:b9:09:41:a6:
d3:9f:b2:52:36:a6:bd:de:5b:8a:be:e4:a5:82:1e:
83:bb:6b:54:a7:8e:cd:49:2f:73:63:9e:50:60:d2:
31:65:ad:be:fa:32:57:a2:89:32:67:88:f7:bf:85:
f6:28:19:b6:39:09:7c:3b:a6:57:f0:eb:91:a3:4b:
d4:26:a1:1f:8c:b5:f2:79:a6:83:1c:1a:7b:b6:a1:
17:e9:22:2a:55:84:9e:bc:0a:f7:8e:b3:88:1a:ac:
df:71:33:81:35:bb:3d:a2:e9:d8:9a:8b:04:1b:11:
2c:a9:99:53:02:91:8b:54:9b:e7:9d:15:95:ad:32:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:4C:F1:48:A6:5F:22:69:37:2E:66:C8:2F:80:08:FC:EA:D1:DA
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/0zNM8UimXyJpNy5myC-ACPzq0do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.208.0/21
Signature Algorithm: sha256WithRSAEncryption
40:e7:1a:0c:b7:51:e1:28:ba:26:2a:92:14:12:91:ed:38:df:
68:31:2d:bc:24:60:99:b4:52:dd:e8:16:db:c0:55:14:9d:67:
2e:92:13:93:db:2d:3a:8a:59:48:00:29:3e:f6:bc:07:22:09:
2c:86:23:97:c3:7a:63:cd:25:93:2d:ec:a4:da:33:98:cc:d6:
6d:40:8c:f7:ea:cc:53:dc:d3:45:ce:e8:b8:8e:37:e6:4b:29:
4b:9e:31:de:ff:ca:27:b4:f4:1a:f8:89:bc:95:93:44:21:a7:
65:15:59:b2:96:d3:dc:e0:6b:d7:a6:58:26:ac:cd:0d:2f:c3:
7a:2d:ff:4d:22:86:65:56:c4:ce:91:5c:ab:b8:44:bd:f6:44:
ce:96:91:7a:fc:12:ba:10:4a:f8:06:39:4e:3e:34:60:dd:c2:
d5:12:6e:1d:3c:22:09:1f:28:60:78:f1:10:61:fa:79:00:f8:
b6:6d:83:a7:ce:a7:83:c6:7b:7f:dc:a1:45:79:79:c0:33:7a:
dd:b7:24:e5:f3:56:0f:c2:66:51:03:1d:af:13:35:a8:75:7a:
18:81:51:8d:6c:ed:f0:33:18:df:d7:89:03:d7:79:a6:cb:b3:
91:c8:1e:80:71:f7:9f:78:c3:c0:5f:ef:b5:a0:b6:c1:b0:71:
eb:44:03:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:11 2023 by rpki-client on console-fra.rpki-client.org