Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/cgq6r0TObAQRLaCTLOk7_iJnCbY.roa
File: cgq6r0TObAQRLaCTLOk7_iJnCbY.roa (raw, json)
Hash identifier: vIac5y8aNYCSaiR8j7/DpZPz9dSYl4Yqq7THT7dxg14=
Subject key identifier: 72:0A:BA:AF:44:CE:6C:04:11:2D:A0:93:2C:E9:3B:FE:22:67:09:B6
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 3839B88F
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/cgq6r0TObAQRLaCTLOk7_iJnCbY.roa
Signing time: Sat 01 Jan 2022 09:56:20 +0000
ROA not before: Sat 01 Jan 2022 09:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 178.236.226.0/23 maxlen: 24
178.236.236.0/22 maxlen: 24
185.2.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943306895 (0x3839b88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 1 09:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=720abaaf44ce6c04112da0932ce93bfe226709b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:3e:47:d1:0d:c3:bd:34:04:0f:3c:1c:cf:
60:1b:40:71:c4:e2:5e:e8:43:40:1e:b0:1a:e9:fd:
16:8b:71:2d:1f:51:99:7d:11:0d:9e:5b:9a:b1:bf:
3f:92:c1:56:d5:32:52:2c:cf:5b:3b:88:10:10:e6:
eb:e5:fe:bc:03:69:6a:11:32:8a:d9:ad:51:d0:70:
75:d9:7d:28:8c:12:13:e6:15:a1:cc:0f:c3:6d:ce:
30:aa:c2:8e:08:1c:67:06:30:4d:de:c9:65:21:7d:
4a:94:00:a5:0d:24:8f:42:38:1e:de:50:78:3b:04:
1c:7c:ff:90:dc:ce:a9:36:b0:e7:d8:a4:7b:47:ee:
14:14:38:59:ad:2f:03:10:5b:97:1e:48:9b:42:44:
9d:ed:14:22:54:6b:0c:90:8e:a8:07:20:cc:6d:01:
1f:8e:eb:27:67:3d:18:e1:a4:ac:a1:8e:a7:f8:6d:
83:ae:3c:0c:eb:85:3c:c1:2e:5e:6b:0a:f3:63:d8:
2c:1b:ac:9e:4f:35:5e:0f:37:28:f0:a6:72:f3:89:
61:1d:f0:41:85:a5:fa:e7:d6:0b:a2:eb:43:55:0e:
f0:aa:b8:c4:b9:8d:ca:bd:70:88:58:7b:fb:9a:dd:
0a:51:3f:12:f6:69:d2:f1:bb:43:e9:2d:3d:54:6b:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:BA:AF:44:CE:6C:04:11:2D:A0:93:2C:E9:3B:FE:22:67:09:B6
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/cgq6r0TObAQRLaCTLOk7_iJnCbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.226.0/23
178.236.236.0/22
185.2.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:36:68:da:61:09:2f:12:01:69:6f:c3:08:83:2c:87:06:e5:
99:11:10:d4:1d:29:78:ca:61:69:40:a5:3d:c5:dc:5e:d7:bc:
3d:ba:5f:be:5c:54:01:0b:41:66:c7:57:49:76:e6:fa:b1:d2:
8e:ea:0b:41:a5:ee:b4:f2:a9:bf:33:2d:1a:35:c0:4c:01:86:
e5:e4:32:e8:ca:ef:c5:b3:9c:37:0c:e3:6e:f2:d8:d1:b1:4d:
63:05:00:8b:b8:a0:61:4e:e3:e9:87:de:81:40:51:e6:8d:b1:
70:90:a0:81:8f:a5:45:30:98:2e:aa:c2:07:67:8a:d4:5b:5e:
07:2a:60:31:24:a5:96:c2:ea:5b:f1:59:47:e5:c0:20:3d:df:
bc:46:a5:f6:5b:6e:2a:b4:4d:03:52:a3:2f:92:2a:9a:e7:d5:
6b:23:49:5d:db:bc:47:f3:65:54:d8:4c:30:ad:91:e3:d1:a3:
5f:96:ee:22:84:55:f8:be:74:d6:ed:c4:7a:99:7b:ac:f8:e3:
cf:39:02:77:18:56:86:12:f2:3f:c1:38:cd:cd:20:95:53:4b:
97:d4:6f:1c:5c:a3:fd:85:8f:da:34:40:99:b9:59:a5:31:87:
44:f0:57:90:65:ff:45:1e:2e:49:70:e8:76:05:45:e2:e8:e9:
b0:33:ca:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-ams.rpki-client.org