Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/R-u6R7lDsoa69eD7e5V1QuFFBm0.roa
File: R-u6R7lDsoa69eD7e5V1QuFFBm0.roa (raw, json)
Hash identifier: VhGs0X0oNsCBFaLviiKUaZM/zy6eSKWs74oE5zpGuFw=
Subject key identifier: 47:EB:BA:47:B9:43:B2:86:BA:F5:E0:FB:7B:95:75:42:E1:45:06:6D
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0184E6AB2F07AF21326DB8AE5650B630C548
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/R-u6R7lDsoa69eD7e5V1QuFFBm0.roa
Signing time: Tue 06 Dec 2022 09:01:29 +0000
ROA not before: Tue 06 Dec 2022 09:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 178.236.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:ab:2f:07:af:21:32:6d:b8:ae:56:50:b6:30:c5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Dec 6 09:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47ebba47b943b286baf5e0fb7b957542e145066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f2:8f:99:ca:31:ad:62:85:04:52:52:74:22:
97:e0:9d:fd:f7:b1:80:47:0e:bd:d6:57:57:79:03:
d8:e6:81:0c:39:ec:b3:7c:b3:c4:5f:b1:19:f4:28:
39:ee:03:e4:fe:44:3f:79:ba:7e:ef:f0:7d:89:cd:
df:c6:8f:9f:a0:52:84:8b:84:3b:8f:c7:c2:75:ae:
c6:d0:6d:5b:98:0e:0f:8a:3f:31:88:dd:9a:7f:17:
73:c5:2d:9f:ce:34:a7:53:52:89:5c:c6:c9:09:f6:
43:5a:26:f0:8a:66:b3:42:fb:53:58:fe:d1:6c:61:
3e:e3:e4:50:3e:02:8b:13:41:ee:8e:a2:a4:65:d1:
6a:1c:4d:03:0e:62:2a:5c:53:c5:60:89:a6:3f:e1:
43:4f:81:72:c5:c7:b3:bd:84:76:39:d9:03:a8:dc:
5c:bd:4a:34:ee:72:d9:99:59:9d:46:53:e0:29:2a:
cf:45:ea:a5:2d:69:d8:47:56:28:71:88:51:68:11:
4f:7a:1f:0e:f5:3b:05:78:18:61:59:9f:8d:65:4e:
5b:19:98:91:62:5a:fa:53:81:fc:fe:f7:f5:7f:b3:
a0:0d:11:44:b9:56:5c:18:46:07:ed:b9:cf:8f:ff:
21:f5:df:41:7d:a5:4d:87:11:8e:d5:81:27:41:bf:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:BA:47:B9:43:B2:86:BA:F5:E0:FB:7B:95:75:42:E1:45:06:6D
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/R-u6R7lDsoa69eD7e5V1QuFFBm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.227.0/24
Signature Algorithm: sha256WithRSAEncryption
13:40:6c:90:e6:a4:97:5a:73:0f:6e:50:e1:ee:e6:c3:6a:f5:
53:66:43:f9:ff:c2:8f:d0:51:ae:a9:90:9c:54:a0:7b:5e:17:
55:26:b5:22:59:ac:1c:6c:b0:3b:8b:e7:68:76:77:d2:ff:8e:
9c:d8:7c:1d:d7:15:8e:b6:a6:85:c0:d2:61:0f:be:9d:fc:2a:
ac:11:f1:c6:11:ab:14:c9:60:b5:b4:bd:2f:d8:2a:91:a3:a1:
8c:1a:47:f4:0f:02:aa:76:a2:2b:5b:00:ef:a7:c3:0a:88:09:
9d:35:79:91:6c:04:7a:5f:8c:5c:ba:e0:17:f8:85:b0:45:ff:
f7:61:a1:84:fc:67:26:6a:07:a6:73:52:0c:48:5f:c8:bf:7d:
dd:c3:e5:c0:dd:17:a8:6f:d2:94:09:54:96:fd:51:a0:e5:c9:
da:1f:f1:39:a0:bf:3a:42:c8:6c:18:f1:23:b3:c3:69:ca:3f:
cd:e3:79:5b:36:c8:9d:9b:3f:cd:73:6c:42:8b:02:2e:48:3e:
b9:2b:7f:a4:3b:a8:77:be:f9:c7:a0:f8:cd:eb:8e:36:ab:fb:
aa:56:10:ba:af:71:e8:6f:86:38:d8:da:dd:4c:4f:c4:a6:53:
63:b0:b6:37:63:f7:9a:4f:9c:83:3f:69:15:73:a1:83:87:f1:
f5:80:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-ams.rpki-client.org