Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/F-ENhxtqZtZduYTzEJG9U-umoR0.roa
File: F-ENhxtqZtZduYTzEJG9U-umoR0.roa (raw, json)
Hash identifier: dCNaGaCaDn5EU6g+QANl+YW9pylTmBzbf6sySYmcUgw=
Subject key identifier: 17:E1:0D:87:1B:6A:66:D6:5D:B9:84:F3:10:91:BD:53:EB:A6:A1:1D
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0184BCE76129A50883EF5A03C55D632EE3B5
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/F-ENhxtqZtZduYTzEJG9U-umoR0.roa
Signing time: Mon 28 Nov 2022 06:23:11 +0000
ROA not before: Mon 28 Nov 2022 06:23:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 328608
IP address blocks: 178.236.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bc:e7:61:29:a5:08:83:ef:5a:03:c5:5d:63:2e:e3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Nov 28 06:23:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17e10d871b6a66d65db984f31091bd53eba6a11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:82:56:ee:ba:c4:fb:19:e4:17:cd:3d:4c:8b:
a9:95:07:8c:aa:21:b7:ae:dd:fd:c8:db:2d:32:90:
b8:cb:73:db:19:a6:a2:60:35:9c:e6:39:b9:60:b9:
88:d3:26:ec:0b:25:47:9a:c7:ae:56:f6:87:26:ce:
82:86:6d:0c:78:cc:97:7c:7f:33:36:b2:a9:2a:c0:
da:a7:ed:d8:19:05:b9:55:e3:14:fe:5a:73:a2:b7:
69:f9:12:61:28:82:17:53:39:79:8e:65:05:4d:41:
02:9f:e2:fc:dd:31:1e:96:7d:2d:df:e8:eb:70:f2:
53:9d:5f:22:4c:48:b3:d1:57:18:47:f5:ad:18:29:
4f:ae:b9:83:ae:19:2f:a1:cc:fc:bc:ed:20:ad:1f:
ab:4e:fd:e2:de:12:8b:44:e3:71:4f:cf:8f:f4:78:
67:f0:e0:f0:aa:75:08:3e:a0:cf:73:1b:65:03:e9:
0d:1d:ec:12:76:9a:1b:6f:01:2c:b2:c1:34:50:ec:
93:e7:95:11:3d:71:8b:95:75:c0:b9:dc:00:59:c9:
aa:25:1c:53:9d:9d:54:b7:28:d2:2a:e9:2f:e6:f8:
4c:24:ff:b5:b9:d0:ba:6d:a1:8e:7e:91:68:b1:cb:
d5:1d:13:ce:de:de:03:6c:9c:4f:cf:67:26:ae:35:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:0D:87:1B:6A:66:D6:5D:B9:84:F3:10:91:BD:53:EB:A6:A1:1D
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/F-ENhxtqZtZduYTzEJG9U-umoR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:25:4e:a4:0c:10:49:2b:14:2e:96:47:73:11:d5:68:88:d1:
c2:96:21:10:92:a0:31:e6:7d:ed:a4:84:d5:45:dc:dd:3f:23:
74:63:81:5a:8b:a9:20:8b:91:a6:7f:2e:c5:bb:64:89:93:df:
71:02:17:f7:e4:e5:25:72:30:1a:54:ad:54:fd:11:4a:11:e7:
6d:c0:80:4e:ae:31:84:d0:d5:27:38:ad:bc:ed:1e:e5:0f:6c:
8b:e6:37:92:99:26:20:f2:bb:7b:6f:94:82:6a:67:7c:97:a2:
4b:6a:d2:12:d4:5f:97:b5:72:f6:ef:12:26:84:d7:7c:cd:ca:
4d:10:45:c4:39:c1:de:d8:19:08:6d:cf:be:cc:24:78:35:3e:
86:89:ce:35:d5:17:79:a1:5e:55:21:d4:ee:30:c3:29:4d:4c:
a8:23:6d:fb:60:24:66:ab:8c:b6:7c:00:23:58:a5:ed:a9:01:
c6:1c:7b:80:2a:ad:38:0d:00:07:12:64:66:1e:d7:60:ab:e5:
89:0d:66:4b:8a:a9:8c:5b:c3:4b:79:9f:4b:31:f1:77:df:19:
a2:cd:df:bf:41:f3:e9:6a:54:93:a9:32:81:db:ac:2d:3e:44:
53:25:91:c8:36:cc:fc:2e:2d:da:89:d9:56:6e:2e:ca:71:45:
07:f7:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org