Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/y1hztINS0veuUpdA9pAZ_QFPhSU.roa
File: y1hztINS0veuUpdA9pAZ_QFPhSU.roa (raw, json)
Hash identifier: VlvuA0gZ4Fwqg1MkEzk5ApFUkFpCS+MRe+oU7yvzPDw=
Subject key identifier: CB:58:73:B4:83:52:D2:F7:AE:52:97:40:F6:90:19:FD:01:4F:85:25
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 04B6E95F
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/y1hztINS0veuUpdA9pAZ_QFPhSU.roa
Signing time: Sat 01 Jan 2022 10:58:39 +0000
ROA not before: Sat 01 Jan 2022 10:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212938
IP address blocks: 178.217.235.0/24 maxlen: 24
2a0c:cd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79096159 (0x4b6e95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jan 1 10:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb5873b48352d2f7ae529740f69019fd014f8525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:7b:c6:b1:ef:54:3a:93:69:de:ee:2b:0a:
f9:27:12:b6:1a:00:48:ae:b4:46:27:ac:12:c6:e8:
95:94:88:1e:af:52:59:cc:a6:28:e1:77:64:60:13:
ef:9e:ed:b1:aa:35:39:5a:00:c7:4f:2d:21:e1:c5:
cd:6c:db:2b:85:ef:02:37:74:71:38:af:f0:fb:1b:
c1:fc:fa:d1:03:05:97:e6:a7:ac:1c:31:47:32:84:
08:21:87:3b:4c:e5:5c:bc:39:a8:eb:68:ab:30:18:
c8:46:86:16:08:32:39:a3:02:52:fe:d2:46:7f:01:
c3:e8:4b:4a:19:ed:a2:89:e5:cb:9e:19:85:e4:0a:
d9:c1:a6:f9:b0:6d:bd:53:d5:44:50:24:16:1c:06:
27:49:b1:b4:a2:02:fd:6a:6b:43:dd:47:52:6a:7f:
10:6a:df:ff:41:49:e4:c2:84:4f:82:2e:1a:3a:fb:
9e:18:67:fb:65:2b:17:fa:8d:7e:27:14:b0:8e:41:
03:2e:c4:e4:ac:89:5d:b3:29:dd:e2:2b:f7:f0:73:
0b:63:67:bd:f8:7c:7a:f9:d7:4c:63:54:25:e4:f3:
44:ed:82:43:22:9e:8b:5a:fd:8a:2f:c5:f9:83:bf:
f9:27:67:0b:6f:f3:84:a9:6b:cc:55:c0:96:31:d6:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:58:73:B4:83:52:D2:F7:AE:52:97:40:F6:90:19:FD:01:4F:85:25
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/y1hztINS0veuUpdA9pAZ_QFPhSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.235.0/24
IPv6:
2a0c:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
57:df:3a:e6:10:01:44:d3:aa:d2:14:2b:90:8d:6f:59:18:7e:
2d:af:90:6b:cd:7c:2f:03:ce:73:f4:42:d6:f5:1b:cc:b0:b5:
b7:44:94:ac:72:f7:65:e9:8a:af:0b:17:3e:0b:de:77:34:19:
56:92:77:2f:e0:29:b1:56:cc:47:7b:ff:0c:02:d9:e5:79:f4:
da:20:56:89:5f:26:05:6e:b6:23:6c:87:0c:75:d9:42:29:e3:
cb:10:93:84:c4:ba:f3:63:4b:b9:e1:a6:6a:9e:73:b1:ba:bb:
59:7a:80:17:88:05:ea:06:ac:de:5b:4b:89:7f:e5:aa:24:ab:
d0:d2:58:8e:f6:3e:00:34:26:0c:ac:46:51:d2:69:3d:46:9d:
32:0b:43:11:cb:cd:2b:9e:4d:82:05:bd:03:c2:f2:56:ae:f5:
47:d5:f2:ed:69:17:70:ba:02:bd:1f:9a:a2:58:7e:ed:ec:22:
0f:ce:80:dd:49:c6:95:bb:47:f8:36:4e:2e:70:54:9a:29:22:
fd:49:85:2c:c2:5b:3d:37:fe:42:d3:ca:f3:c9:e0:d0:e3:25:
8c:8e:b1:fe:59:4e:cf:21:6b:4b:9e:20:c3:8f:13:df:64:25:
e6:60:43:81:29:d4:8f:50:3c:45:c7:e2:2a:36:d9:e9:81:70:
cd:fd:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:16 2024 by rpki-client on console-ams.rpki-client.org