Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/n4sOVXDgMs-zVX1ujBzz9eQqEic.roa
File: n4sOVXDgMs-zVX1ujBzz9eQqEic.roa (raw, json)
Hash identifier: ZK6l0pKFYXHZHqes75XgP4/dYl8AzmSeCSr0XnUJc34=
Subject key identifier: 9F:8B:0E:55:70:E0:32:CF:B3:55:7D:6E:8C:1C:F3:F5:E4:2A:12:27
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 02C8D074
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/n4sOVXDgMs-zVX1ujBzz9eQqEic.roa
Signing time: Sat 01 Jan 2022 05:59:28 +0000
ROA not before: Sat 01 Jan 2022 05:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56433
IP address blocks: 178.54.3.0/24 maxlen: 24
178.54.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46714996 (0x2c8d074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Jan 1 05:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f8b0e5570e032cfb3557d6e8c1cf3f5e42a1227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:50:46:05:1e:59:4f:06:cf:3b:e6:1f:a5:a9:
2d:80:7c:6b:a9:5f:cf:2a:9b:e4:b4:65:28:b5:1a:
7d:cf:a1:5b:a1:c0:d2:63:30:1e:2d:22:c8:cd:4a:
65:85:54:76:cd:74:88:31:d7:1f:68:f3:0b:3e:27:
e6:df:ef:58:3e:52:ad:06:ed:cf:e6:08:f2:49:7d:
41:6c:05:ae:c3:ca:9a:fe:0c:2e:9b:d5:45:67:df:
43:35:e2:ae:23:48:fb:a8:11:e3:97:39:af:04:41:
2c:d6:3a:7d:2d:88:8b:e3:61:f5:08:05:4e:a4:b9:
49:61:99:3b:fe:87:03:55:39:c0:b4:61:7f:72:45:
de:c5:5a:d0:d6:57:46:c4:cc:e5:2a:5e:60:01:cc:
cf:73:b3:24:31:71:16:0f:02:e3:85:44:b2:e1:ab:
42:eb:2a:73:4b:cf:fd:bd:78:76:e3:6a:82:3a:dd:
2e:f6:58:4f:46:75:6f:fe:96:21:2e:05:9c:34:ef:
66:7e:57:a7:1e:1f:92:c2:e4:5b:00:f2:fe:dc:31:
e8:52:3d:04:06:c0:3d:d4:e6:ee:1f:1e:05:66:ad:
66:5c:06:69:5f:38:f1:95:7f:65:c9:a4:e2:6a:fd:
98:c5:b4:d3:85:0d:ff:88:43:e5:23:67:f0:72:4b:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8B:0E:55:70:E0:32:CF:B3:55:7D:6E:8C:1C:F3:F5:E4:2A:12:27
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/n4sOVXDgMs-zVX1ujBzz9eQqEic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.54.3.0/24
178.54.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:16:c5:6d:ed:e6:50:1d:46:c7:fd:34:f9:9b:49:44:d3:2b:
8c:bc:fb:fb:7b:26:7d:79:b5:ee:01:86:4e:08:b9:e3:6b:1a:
56:ca:86:d2:17:92:28:cd:9a:4a:73:c4:4a:7f:fd:26:76:ae:
3c:87:a7:71:c2:47:c1:e0:22:22:ad:65:38:c9:4a:92:f2:88:
d8:fa:90:4c:f6:88:13:79:ce:a3:58:92:88:43:0e:f5:2e:ae:
7f:1c:9c:cb:ba:00:78:21:a5:fc:f8:03:91:9a:68:df:61:ff:
f7:ab:e0:fc:d2:70:58:c2:45:b7:79:14:dc:33:39:c7:07:a7:
5d:e0:25:f4:03:c6:c8:ea:99:89:77:1a:30:46:f7:18:81:42:
8a:e5:08:b3:0b:7f:a8:53:df:74:9b:18:88:66:9d:e4:7c:6b:
5a:a4:65:6c:95:b9:0c:f4:73:36:ce:12:66:21:04:65:e3:a5:
c7:29:dc:1e:64:7b:e6:7a:92:f9:73:12:4b:94:05:e5:bd:d0:
99:11:2d:4d:ec:5d:f3:11:f0:0a:bb:62:c4:0b:0e:30:2e:00:
b9:5b:a2:e1:47:01:5f:34:47:af:a7:8a:56:87:39:5e:a2:fe:
65:39:03:64:91:b1:11:2f:a7:e3:38:99:47:b6:2c:09:13:3e:
cb:27:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:19 2024 by rpki-client on console-fra.rpki-client.org