Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/y8jIk8Q_VakxVyQAzkcPs0eSVZE.roa
File: y8jIk8Q_VakxVyQAzkcPs0eSVZE.roa (raw, json)
Hash identifier: Hc+1+3PFjPUVKMa5ndVQzzPoQNKqTV5rANp/3Rysta8=
Subject key identifier: CB:C8:C8:93:C4:3F:55:A9:31:57:24:00:CE:47:0F:B3:47:92:55:91
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01840D11BD85C590AE3B06C23DF000B3BEC1
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/y8jIk8Q_VakxVyQAzkcPs0eSVZE.roa
Signing time: Tue 25 Oct 2022 02:56:17 +0000
ROA not before: Tue 25 Oct 2022 02:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 178.236.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:11:bd:85:c5:90:ae:3b:06:c2:3d:f0:00:b3:be:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Oct 25 02:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbc8c893c43f55a931572400ce470fb347925591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:3f:33:01:89:8d:ad:d3:b0:6f:e6:c5:72:
77:24:7a:99:ba:4c:f0:9c:16:a5:b4:e3:1a:a9:a2:
ad:8e:ed:01:42:41:61:d6:18:ea:e0:e8:85:7d:f1:
5c:f9:b7:45:bf:ad:a4:78:fa:b5:1e:02:55:a3:77:
cd:d5:70:31:81:67:fd:f0:42:0b:de:81:87:2e:6b:
00:e9:fe:59:d5:dd:3d:60:e7:44:ae:56:13:c4:19:
66:c8:65:78:c0:b4:7e:7d:df:47:5d:84:1d:0d:7a:
09:ee:1e:19:09:98:8a:e9:da:1c:b6:de:02:46:a4:
f6:e4:0e:a2:d9:cc:75:f4:fe:bf:54:19:0a:4b:02:
31:a5:ce:61:3d:58:85:5e:8f:85:b5:b6:b4:3a:94:
13:79:6d:9f:0f:bb:bb:56:c6:aa:e4:8b:59:8a:8c:
bf:e7:c5:ac:22:82:b2:b3:57:68:d7:47:a1:77:69:
c1:01:0d:d6:4e:ea:c4:3f:b3:83:01:6f:20:77:10:
e7:05:cc:5b:ad:d6:3d:24:22:73:d0:fa:95:b3:81:
36:61:71:25:1f:8e:b8:01:43:d2:36:13:c9:f6:8b:
34:13:05:02:b8:29:a5:a9:4d:d9:52:03:b0:b7:bc:
ae:80:00:a1:dd:22:2a:67:d5:00:38:d9:f4:e9:e8:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:C8:93:C4:3F:55:A9:31:57:24:00:CE:47:0F:B3:47:92:55:91
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/y8jIk8Q_VakxVyQAzkcPs0eSVZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:f9:c4:95:9a:41:10:c2:81:c3:f4:64:6a:3a:3a:ee:07:81:
7c:95:cb:40:d6:b7:85:c7:09:3b:c3:2c:6c:a8:a0:34:18:54:
fe:af:b4:23:4c:dd:2f:95:49:44:e8:bc:db:f4:eb:7d:7a:9f:
16:9d:59:9a:9e:a3:9d:fe:42:a1:70:3a:92:70:b5:1b:cf:90:
88:57:9a:50:38:1c:b3:38:7f:1c:cd:78:f6:ca:8a:25:ab:2d:
bd:4f:08:91:fa:28:99:bc:1e:80:6a:a7:bb:cb:26:5b:19:4d:
72:df:06:dc:8f:47:1d:82:30:dc:1a:dd:27:b2:f3:64:db:21:
90:8e:73:43:4a:4f:84:a7:fe:47:5d:bd:79:38:c1:1c:e5:32:
37:62:71:4f:c7:c6:15:94:a1:99:c1:ae:bd:0b:aa:2a:3b:12:
fb:fb:5e:7a:6a:73:d3:01:f8:db:be:e1:cb:30:56:92:be:2c:
02:68:61:71:11:98:7f:b1:24:e0:3b:6b:d0:cd:2d:e2:14:c1:
fe:e2:7a:70:69:6d:83:49:58:dc:38:a4:36:72:29:5b:93:1a:
9f:1c:72:ad:87:07:f8:4d:ed:97:15:a3:1f:ff:3a:65:ed:7a:
3e:d8:8e:13:17:8f:32:e3:5e:35:19:2b:14:11:d5:38:76:9f:
d7:4f:53:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-ams.rpki-client.org