Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/CmubC8KepmmyCxMgJ131uuBvXLQ.roa
File: CmubC8KepmmyCxMgJ131uuBvXLQ.roa (raw, json)
Hash identifier: hGlBsQezYHUhn50CDKFQ/ZEpIuNkyal3TN/JWwAzSOU=
Subject key identifier: 0A:6B:9B:0B:C2:9E:A6:69:B2:0B:13:20:27:5D:F5:BA:E0:6F:5C:B4
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 029CAB
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/CmubC8KepmmyCxMgJ131uuBvXLQ.roa
Signing time: Fri 27 May 2022 09:43:13 +0000
ROA not before: Fri 27 May 2022 09:43:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8468
IP address blocks: 178.16.224.0/21 maxlen: 21
178.16.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171179 (0x29cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: May 27 09:43:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a6b9b0bc29ea669b20b1320275df5bae06f5cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ea:ba:d7:a0:2e:a7:2f:b9:89:a1:58:b5:14:
37:32:3a:2e:32:a7:c3:c1:d6:4f:f4:45:9c:e3:a7:
b8:68:69:ca:e4:1b:bb:8e:b4:12:ad:3a:70:7b:03:
e0:73:98:60:e5:52:35:63:c8:cb:e0:a8:c7:9a:f2:
53:6e:64:b2:da:2c:74:97:86:81:3f:bc:0b:5c:b5:
8a:d5:22:0e:99:ec:0d:26:db:9b:24:ee:9b:ef:78:
b5:42:1e:bb:b4:fc:35:e2:53:a8:37:6e:e4:f9:93:
ba:80:c2:b4:16:57:1f:1c:52:d1:de:ab:4f:24:9f:
ad:e6:54:d3:a2:25:f2:09:14:8b:03:2c:f9:e5:3d:
00:83:ca:ed:46:7f:b9:b9:6b:15:b2:a6:38:e1:26:
6f:51:fe:ee:31:ab:04:10:4e:84:b4:77:d3:98:be:
61:84:b6:54:af:6f:f3:c5:37:c8:a9:2c:1b:05:a7:
92:47:b7:02:3c:05:6a:3f:de:53:e6:12:f8:a2:0f:
b6:ea:0e:05:ea:f5:f6:a5:1a:8e:b1:3f:f9:79:4f:
67:66:6c:2c:1c:0f:8b:98:c2:93:f0:68:72:30:c0:
72:62:43:15:00:b8:f0:0e:79:2c:c6:75:9d:bf:ae:
2f:8a:76:9d:8b:c1:10:5b:9e:2e:a4:72:48:fb:69:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6B:9B:0B:C2:9E:A6:69:B2:0B:13:20:27:5D:F5:BA:E0:6F:5C:B4
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/CmubC8KepmmyCxMgJ131uuBvXLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.224.0/21
178.16.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5d:6e:6e:31:b4:a8:47:e5:53:49:55:7c:22:4f:63:e7:86:
0f:ae:d7:ad:8c:df:22:0a:6a:ce:29:52:bc:9f:e4:2f:f7:4c:
36:71:53:e9:9a:74:e4:48:cd:4b:4b:7f:85:d8:5d:b4:69:9d:
39:9d:d8:a6:78:24:52:96:0c:d5:ce:b4:1b:7c:dd:e8:5e:d3:
f4:ad:69:9a:d2:22:5b:6d:b0:1e:bd:bc:e8:6a:b0:a9:6e:83:
57:9d:af:a8:20:58:c9:a7:16:c6:fa:bf:36:c1:27:d5:8b:4d:
ed:27:9d:a3:17:6a:b2:b5:a3:39:43:13:d0:6a:93:83:71:0d:
a3:02:32:d6:ca:6a:a8:b9:be:be:70:bc:e2:7f:28:ee:39:54:
2b:5d:9d:b8:8d:25:7b:0c:f2:7e:72:e2:f5:ba:83:62:17:0d:
7e:01:4e:be:64:28:a4:e0:5e:ee:34:86:cf:5a:e6:6b:31:29:
20:43:eb:89:15:35:c8:9f:f4:ff:83:8b:ed:95:64:b0:53:20:
cc:61:19:f6:15:c1:8c:44:4c:bf:6b:8d:5d:88:a1:e0:0d:76:
7d:1b:b6:aa:45:32:47:3c:d0:a8:2f:e9:bf:90:7e:04:8e:96:
b0:5a:18:95:d6:0f:0a:4a:41:02:01:9b:e4:9f:3b:9f:22:49:
8f:44:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:17 2024 by rpki-client on console-ams.rpki-client.org