Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/BnU5SYP939himlFxIvbw2vJgztE.roa
File: BnU5SYP939himlFxIvbw2vJgztE.roa (raw, json)
Hash identifier: ioFnega69PyIq6grDSOAWrzuRCVOuniJE+zr3hC4px4=
Subject key identifier: 06:75:39:49:83:FD:DF:D8:62:9A:51:71:22:F6:F0:DA:F2:60:CE:D1
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 03C25374
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/BnU5SYP939himlFxIvbw2vJgztE.roa
Signing time: Sat 01 Jan 2022 09:55:20 +0000
ROA not before: Sat 01 Jan 2022 09:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51002
IP address blocks: 178.217.12.0/24 maxlen: 24
178.217.13.0/24 maxlen: 24
178.217.14.0/24 maxlen: 24
178.217.15.0/24 maxlen: 24
178.217.8.0/21 maxlen: 21
178.217.9.0/24 maxlen: 24
178.217.10.0/24 maxlen: 24
178.217.11.0/24 maxlen: 24
178.217.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63066996 (0x3c25374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Jan 1 09:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0675394983fddfd8629a517122f6f0daf260ced1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:08:e2:3d:f0:39:61:47:28:6c:60:b5:10:
34:92:0e:0e:f8:8f:61:e3:6e:c0:67:9d:eb:f0:cd:
7e:2b:e5:3b:b9:02:84:94:fe:2c:bb:55:55:c7:81:
51:ed:a8:82:2a:ae:bb:6f:ba:25:57:65:03:70:60:
11:1d:31:f3:f2:b1:a2:81:00:81:21:21:12:31:f3:
6e:7b:57:f2:45:0e:d1:91:22:a9:07:9b:07:d7:2b:
4e:37:2a:70:f5:59:f8:03:bb:1f:40:67:93:63:f1:
ad:c8:f1:28:da:cd:1e:84:a2:6a:d5:b2:8a:8e:3c:
69:1b:1f:83:bb:52:41:e7:a4:3a:ba:6a:b3:a3:1c:
4e:71:9b:7c:4e:98:00:7a:f9:e3:44:75:a9:ed:7d:
cb:ca:84:97:f5:cf:c1:2c:61:5b:41:70:7d:f0:aa:
34:20:67:84:9c:4a:96:a3:04:69:35:d0:f2:cd:63:
a0:92:44:b8:63:69:aa:25:25:7a:00:a6:c6:ae:90:
7b:0f:3a:d8:98:56:8d:52:7e:75:46:0e:05:1a:38:
35:9d:62:6a:0a:ad:29:6e:ad:41:a6:fd:c2:6b:1f:
ef:66:50:04:c7:7e:a5:f5:30:bc:59:75:d1:d6:d8:
f2:01:04:5b:31:cd:16:61:3a:9f:64:87:72:46:c8:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:75:39:49:83:FD:DF:D8:62:9A:51:71:22:F6:F0:DA:F2:60:CE:D1
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/BnU5SYP939himlFxIvbw2vJgztE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.8.0/21
Signature Algorithm: sha256WithRSAEncryption
73:46:97:95:c4:3c:30:e8:ce:dd:28:a7:f9:38:92:8c:30:bb:
7e:92:19:f8:e7:a9:61:e6:03:f0:82:7d:1a:d6:7f:69:de:b8:
3f:93:35:3d:75:37:43:9d:19:7b:74:52:32:7d:58:f6:27:7f:
38:43:9c:ea:ca:9a:36:79:35:50:97:e5:92:bc:7f:d9:cf:2a:
f5:a0:74:7d:10:46:ee:8e:1b:d5:81:fe:48:88:ec:5a:f8:73:
7b:5c:5e:68:22:c3:c4:41:54:56:cd:9a:60:50:ce:e8:42:2e:
30:2f:8d:30:db:93:3e:e1:93:c9:bf:8c:e6:85:a6:9d:ae:91:
24:57:ed:21:1c:33:e9:49:e1:c3:cb:1d:40:7e:d7:51:34:39:
36:a3:e7:b7:06:8d:56:1b:1a:56:60:24:9d:88:99:f5:43:7a:
0e:69:46:c9:b3:69:00:0c:ab:d3:16:bc:b3:5f:63:73:57:5f:
86:d9:7c:5a:ef:8d:39:54:02:eb:ab:14:52:06:cb:d3:26:e0:
58:de:92:e6:4d:e4:df:f5:c9:a0:15:7c:e9:09:64:a5:aa:d0:
42:7b:25:28:8c:99:f3:1c:1f:cb:02:e8:8c:fb:4e:27:44:ed:
64:30:ce:71:d9:9a:60:53:7c:e1:73:20:2b:b6:6d:fd:e3:e4:
22:ee:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:58 2023 by rpki-client on console-ams.rpki-client.org