Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/y5HtEettn5TCAnOhs8aHwzft-JM.roa
File: y5HtEettn5TCAnOhs8aHwzft-JM.roa (raw, json)
Hash identifier: iZxaw9epPGgUtBlrd3JnrvECDJPNXdyVAlC+mgJEq4I=
Subject key identifier: CB:91:ED:11:EB:6D:9F:94:C2:02:73:A1:B3:C6:87:C3:37:ED:F8:93
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: B89EAD
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/y5HtEettn5TCAnOhs8aHwzft-JM.roa
Signing time: Tue 15 Feb 2022 15:46:55 +0000
ROA not before: Tue 15 Feb 2022 15:46:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56958
IP address blocks: 178.211.133.0/24 maxlen: 24
2a12:d280::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12099245 (0xb89ead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Feb 15 15:46:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb91ed11eb6d9f94c20273a1b3c687c337edf893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:99:e3:6e:14:59:71:a2:48:c9:14:b1:ff:
76:1a:b0:9f:47:86:fc:d1:87:0c:ec:b9:db:e9:97:
4c:0b:44:5f:d9:47:e0:f6:b5:f9:be:fc:b8:51:f2:
1a:dc:31:68:6e:8a:06:9e:f4:59:af:d0:9f:18:4c:
a2:b9:be:16:b4:fa:8e:33:2b:2c:47:67:6a:93:64:
22:e7:49:02:94:65:f9:b3:d4:cf:0f:c1:63:07:c8:
90:99:f0:b4:b9:2c:72:7d:a1:37:9c:ae:26:aa:be:
45:b1:a0:30:f7:f9:11:82:4a:e5:c8:dd:4a:12:53:
22:31:66:94:34:c8:90:00:c6:e7:85:4d:f6:c0:44:
91:0f:d2:bf:69:af:46:f2:55:54:c4:37:2f:91:a8:
e1:bc:50:aa:d0:71:cd:2a:be:f6:24:c9:b4:9a:7c:
89:1c:34:7d:5a:fc:2a:cc:ab:be:7e:1f:73:1f:46:
4f:ad:10:dc:78:d9:4c:b1:3e:14:cd:ab:2a:39:c3:
6f:d7:50:a6:d9:af:01:b7:d9:4a:0f:85:03:fd:f5:
e4:77:76:2f:f6:72:ae:c1:a4:ca:e7:cc:f9:4f:f8:
60:c4:4f:a2:02:6a:d5:5d:5f:98:71:83:ae:4e:f0:
6e:1a:12:eb:fa:a7:cb:6a:b0:8f:09:d3:d6:a8:8a:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:91:ED:11:EB:6D:9F:94:C2:02:73:A1:B3:C6:87:C3:37:ED:F8:93
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/y5HtEettn5TCAnOhs8aHwzft-JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.133.0/24
IPv6:
2a12:d280::/48
Signature Algorithm: sha256WithRSAEncryption
55:0a:05:9d:f3:f2:dc:9e:b5:1a:7f:52:07:dc:ee:54:fd:a2:
12:24:8d:81:8c:2c:51:6a:40:f8:a3:0a:ff:a7:22:b5:31:40:
45:1a:72:18:3d:76:5b:fe:d3:19:20:bd:e2:4a:61:ab:30:18:
25:47:ba:67:c8:1c:98:93:8e:be:d6:c0:c2:b2:46:26:6f:ef:
84:72:10:f3:a6:48:a4:fa:34:1c:9f:d5:63:e9:cd:72:1b:ab:
3b:7c:58:1f:a3:07:46:43:a1:56:42:a1:15:97:1a:e1:6c:88:
4d:24:31:0e:26:71:42:4c:25:6b:71:df:fc:27:ff:98:dc:be:
45:e7:d2:2e:02:df:ef:a7:58:77:18:fc:99:de:48:1c:fe:50:
23:1c:3a:15:7b:12:bb:21:81:4c:1c:17:c8:7b:85:59:8f:da:
ce:dc:cf:98:6d:35:63:3b:f9:2a:14:0d:4f:b7:db:54:0b:13:
95:8e:b7:db:5d:0f:a4:4b:cf:78:ec:c7:86:51:38:10:0f:2d:
0c:a9:fd:02:32:02:1f:20:31:bf:ea:0d:c1:30:47:23:dd:1c:
95:84:a1:f7:ab:bb:c7:03:46:f5:38:4a:32:b5:10:a6:be:33:
0c:c0:9e:c8:8e:2f:8f:c8:8f:50:35:85:e4:7c:99:5c:9c:e6:
97:3b:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:49 2024 by rpki-client on console-ams.rpki-client.org