Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8nck5l2GAzFeF04fm6BxTwDZ5SM.roa
File: 8nck5l2GAzFeF04fm6BxTwDZ5SM.roa (raw, json)
Hash identifier: 3I1YHwUJXQWwNrLTHPtWgfb4M3u40SC8qiG/bqSMg+g=
Subject key identifier: F2:77:24:E6:5D:86:03:31:5E:17:4E:1F:9B:A0:71:4F:00:D9:E5:23
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 07F8C92B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8nck5l2GAzFeF04fm6BxTwDZ5SM.roa
Signing time: Sat 01 Jan 2022 03:02:06 +0000
ROA not before: Sat 01 Jan 2022 03:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.22.0/23 maxlen: 24
178.253.31.0/24 maxlen: 24
178.253.26.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
178.253.40.0/22 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133744939 (0x7f8c92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 1 03:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f27724e65d8603315e174e1f9ba0714f00d9e523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:ec:67:18:bc:04:5d:b0:b0:73:e3:0c:b7:
71:db:c7:b1:a8:60:77:94:b4:fb:9a:c2:d2:d8:3f:
74:fe:a3:3a:a2:a6:a8:34:a8:bf:a2:90:b9:74:0a:
f9:bc:92:f9:a1:a1:2f:5e:1f:60:83:b2:3a:5b:92:
7f:66:70:ed:23:42:c0:48:e8:dc:57:50:51:29:42:
5c:e8:17:79:f6:28:d5:03:bd:f5:cc:77:dd:15:e0:
06:1e:5f:de:82:93:dc:e5:0f:53:78:c1:2f:4d:e7:
c8:91:1b:71:4e:e7:7a:32:b2:89:38:f0:90:b2:62:
b1:0f:1f:2d:e4:8d:86:b5:56:85:63:ac:6b:c5:2f:
4a:12:f8:d2:37:ec:7b:bf:e9:2a:48:c5:e5:c0:50:
60:86:92:6c:b4:27:8d:09:fb:9a:67:7f:b5:e3:8c:
df:40:db:7f:5c:f1:7a:6d:d0:98:dc:66:57:d7:5f:
5a:ff:d2:bc:79:83:36:1c:f9:8a:67:d7:3c:f8:3b:
20:13:cf:ce:07:e5:b1:e4:3f:94:08:58:46:d2:64:
47:82:f1:3e:48:76:c1:a6:7f:18:02:9c:ac:47:19:
4f:bb:84:c2:ea:a1:7c:e2:30:dc:6a:fa:00:aa:0c:
74:fb:aa:57:52:06:7a:9f:6e:c1:11:d7:ac:29:53:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:24:E6:5D:86:03:31:5E:17:4E:1F:9B:A0:71:4F:00:D9:E5:23
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/8nck5l2GAzFeF04fm6BxTwDZ5SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.22.0/23
178.253.26.0/23
178.253.31.0/24
178.253.38.0-178.253.45.255
Signature Algorithm: sha256WithRSAEncryption
86:a5:84:25:65:8c:18:73:a5:d9:68:56:4c:01:2b:fa:b8:04:
6d:c6:65:00:2d:0f:59:5c:92:71:c2:ae:ed:02:b3:8f:d1:72:
fd:41:27:a0:c7:93:64:94:c9:d2:f9:05:74:22:be:9a:31:78:
5d:00:2f:54:d5:f0:7b:3c:51:fe:40:13:e2:13:4b:fd:59:68:
09:91:d2:c0:d1:68:25:8a:79:b6:73:7c:85:93:f4:9a:5e:4c:
c9:55:11:3f:e6:8f:97:9f:98:b4:bf:5d:62:fc:19:ad:fc:0c:
06:49:e5:e1:6e:a0:71:e5:4a:74:52:aa:26:8a:c8:48:45:b0:
e5:05:e4:4d:e3:46:fb:bd:ec:82:40:2c:24:14:e1:7f:e1:4a:
5a:6c:43:16:20:e3:12:64:83:d5:82:db:9f:e6:70:bf:39:16:
3f:1c:e7:59:49:67:01:65:8e:94:a2:53:b8:b2:5a:a5:2c:32:
d2:5a:62:d1:9f:ba:91:e5:a0:ba:9d:f9:ff:c2:7f:4e:3e:39:
02:99:98:f0:c6:45:ff:1e:a6:59:ed:8c:84:14:fd:e8:3a:35:
f9:6f:7b:85:07:7a:10:73:c8:e1:fe:0d:9a:e8:d7:01:ad:33:
2f:b4:68:55:58:dd:c1:34:2d:63:c6:e2:31:c1:d6:bd:f3:f0:
73:97:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org