Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/8SJ1pPW_nFRMgMhtvBPRiMwuCTc.roa
File: 8SJ1pPW_nFRMgMhtvBPRiMwuCTc.roa (raw, json)
Hash identifier: P/BHSEAuNddCcuid4mmaC04DsNOEBJV1BqhU3VOep2U=
Subject key identifier: F1:22:75:A4:F5:BF:9C:54:4C:80:C8:6D:BC:13:D1:88:CC:2E:09:37
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0184554D26A7213F843E8BFF03A54F3355E4
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/8SJ1pPW_nFRMgMhtvBPRiMwuCTc.roa
Signing time: Tue 08 Nov 2022 03:33:50 +0000
ROA not before: Tue 08 Nov 2022 03:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 178.236.226.0/24 maxlen: 24
178.236.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:55:4d:26:a7:21:3f:84:3e:8b:ff:03:a5:4f:33:55:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Nov 8 03:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f12275a4f5bf9c544c80c86dbc13d188cc2e0937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:f7:c9:28:30:c5:98:52:5c:97:68:75:7f:
8b:b4:d4:18:32:69:a2:9a:ee:7c:f5:90:c0:df:37:
57:0e:96:67:34:49:6b:9e:9e:e4:ee:db:b1:28:bf:
58:7f:05:23:77:a3:2b:20:fc:f0:37:27:e2:b5:65:
4b:d3:5d:40:e7:ca:d6:f7:ea:62:71:d2:2f:6c:76:
74:55:5a:32:58:44:bf:71:9d:8c:93:6f:c6:54:f6:
c1:46:a0:a8:cf:e1:72:ff:54:4c:9e:55:51:d8:b7:
38:13:bc:cb:d8:9a:f0:87:f5:ce:4a:3a:1b:87:bf:
e0:de:91:f2:34:7d:6b:ed:cf:6a:d4:e1:4d:6a:29:
75:6a:11:43:50:b7:69:86:cd:22:d9:87:6a:b0:59:
80:c0:be:32:39:55:84:2f:6a:07:16:3f:a9:7f:86:
b9:20:14:be:8f:a6:10:bf:b6:0e:4a:15:6d:5b:b7:
90:f5:c9:0f:cc:16:81:c5:20:db:86:d6:5f:53:a0:
d2:9c:53:60:d9:38:ea:27:fa:c2:11:ad:f2:d5:01:
ae:97:18:b0:a0:fd:ae:38:04:61:07:62:63:97:e3:
ac:90:d7:4a:25:d0:e5:e7:e9:47:d0:cc:f5:75:d4:
53:0a:66:61:06:1a:ee:d0:31:20:a6:ce:9d:b6:6d:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:75:A4:F5:BF:9C:54:4C:80:C8:6D:BC:13:D1:88:CC:2E:09:37
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/8SJ1pPW_nFRMgMhtvBPRiMwuCTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.226.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:2d:08:4e:b3:28:c4:26:8b:6a:64:19:b4:5d:3b:89:90:ad:
9e:66:d2:69:be:01:25:62:4e:aa:59:9e:05:a3:d8:5f:20:9f:
ab:a5:18:7c:01:73:35:3e:79:ec:c4:26:ee:a2:65:f9:fa:55:
bd:3e:f1:70:56:3b:4b:6c:cb:62:d2:c8:5b:51:81:21:a6:ae:
7f:93:15:9a:7b:ae:02:60:b9:c9:88:9e:30:99:fb:0c:ef:10:
f0:c0:83:cd:fe:4d:14:dd:51:86:20:7d:95:1e:01:6c:73:fa:
59:b1:88:57:64:a4:d6:e3:6a:e5:cb:58:20:fd:32:31:24:be:
b0:80:db:ad:df:b5:bd:4a:f3:5f:a8:00:1b:f3:9a:22:59:08:
52:a7:d6:8f:aa:5d:01:e6:04:56:6f:49:62:ee:14:90:a3:bd:
e7:a7:14:96:53:31:ca:34:1a:d9:0f:d2:e1:85:3e:b6:6f:56:
71:e5:40:51:d3:7f:26:8e:cb:80:d1:e0:47:32:83:83:e9:af:
87:d0:c8:1c:85:31:b9:5f:3d:0a:1a:bb:e0:02:47:f4:e3:57:
aa:23:59:f9:7e:c7:e0:db:f4:c4:b7:81:da:5e:1b:c3:f5:22:
79:e8:b4:05:89:ff:07:95:4b:cc:e8:ed:bd:c9:06:61:3c:01:
5c:ed:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org