Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/sw2GMzx-FY9Hm4i43KklrVT4UqU.roa
File: sw2GMzx-FY9Hm4i43KklrVT4UqU.roa (raw, json)
Hash identifier: efZkzG5FuxamIBd5JKhJCbNNw8gTl3H3Am0l9nRiMbs=
Subject key identifier: B3:0D:86:33:3C:7E:15:8F:47:9B:88:B8:DC:A9:25:AD:54:F8:52:A5
Certificate issuer: /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial: 350B1412
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/sw2GMzx-FY9Hm4i43KklrVT4UqU.roa
Signing time: Sat 01 Jan 2022 06:59:05 +0000
ROA not before: Sat 01 Jan 2022 06:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 178.21.33.0/24 maxlen: 24
178.21.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889918482 (0x350b1412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Validity
Not Before: Jan 1 06:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b30d86333c7e158f479b88b8dca925ad54f852a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:66:f5:ee:e3:70:6e:8f:f4:ca:5c:1c:c0:
27:c8:e4:54:93:6e:60:f7:3e:93:d4:f5:9d:50:7c:
d6:93:fb:54:51:00:a0:10:d9:5e:1b:ef:4a:73:93:
67:58:b7:8a:31:83:00:c2:a7:00:1e:4b:25:f1:80:
68:c2:c1:0f:e8:4c:9d:22:ba:ac:54:cf:2f:e3:65:
b6:8b:76:1e:26:b8:43:6a:19:37:26:31:64:e0:16:
f7:63:79:d9:2f:d8:5b:e5:4d:d7:48:55:d4:52:a5:
03:94:78:17:7f:7c:12:e0:b7:fc:7e:8b:6e:18:bf:
87:b3:ee:3c:07:f4:2b:4e:81:e8:6f:3d:f6:6b:ad:
94:9d:41:20:27:85:50:ce:2e:be:b4:9f:36:ad:55:
29:0d:4f:94:2e:9b:9f:0c:64:58:9c:9f:b3:a1:2c:
e9:3d:b8:d7:39:11:c9:9c:51:9f:05:42:fc:90:17:
b7:6e:e4:d3:7e:b4:30:d5:20:30:6b:cf:3b:68:20:
45:96:96:94:da:4e:a3:cf:c5:4a:13:0c:ce:4a:51:
e7:c6:db:d5:54:e7:4a:a1:cd:be:b8:3d:fe:db:de:
eb:b6:cb:e6:a2:cf:49:ca:4f:9e:91:06:df:30:d9:
e8:1b:d5:f0:12:b3:1e:46:0e:9d:c8:12:1e:06:ec:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:86:33:3C:7E:15:8F:47:9B:88:B8:DC:A9:25:AD:54:F8:52:A5
X509v3 Authority Key Identifier:
keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/sw2GMzx-FY9Hm4i43KklrVT4UqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.32.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:1c:12:d3:93:49:ea:35:d1:c7:8d:72:42:62:46:56:a6:be:
84:74:f2:df:0a:e0:a1:58:87:d4:af:5a:11:33:ae:63:27:f2:
8e:1e:01:79:9b:17:ea:3c:5c:97:37:09:89:77:00:d0:75:a6:
7e:0e:c4:95:1f:26:cc:f6:41:4c:bf:c7:da:13:85:f0:a4:5f:
0b:f1:9a:d9:f0:02:ec:0c:4b:9f:dd:7f:64:b1:70:09:9e:c9:
b4:f6:06:e3:89:58:f2:3f:ec:4e:a7:a4:bb:61:74:d8:59:fc:
c9:7a:32:bb:d7:3b:9b:69:a5:1b:e2:98:c0:6c:34:e5:30:6c:
5d:69:fe:94:e5:69:66:9d:08:aa:d1:c7:d5:a0:ff:50:1f:af:
4b:7c:53:2e:0e:85:97:1d:f5:e4:6d:da:3e:cd:20:28:05:76:
9f:cf:44:f4:23:18:0b:15:ad:6e:c5:63:de:84:bc:27:ce:67:
e5:df:f4:97:04:54:27:4a:11:99:16:1b:bf:76:ed:cf:34:5a:
f4:9d:c9:87:16:32:f3:0e:01:76:9b:f4:e3:71:f8:5b:03:85:
8d:22:60:13:3f:ab:be:26:51:c0:db:ee:49:cd:c6:73:d0:7a:
99:c6:8d:d2:47:ea:e3:b7:d8:6c:3d:05:5e:7d:d1:92:c0:1c:
c2:49:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:23 2024 by rpki-client on console-fra.rpki-client.org