Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/EiVgdhgKRmZdmoAfyTE35PGFyhM.roa
File: EiVgdhgKRmZdmoAfyTE35PGFyhM.roa (raw, json)
Hash identifier: DxvdYpS+K+rq04CQXXLB+QTNWuIJfGzwYF32JEppQAU=
Subject key identifier: 12:25:60:76:18:0A:46:66:5D:9A:80:1F:C9:31:37:E4:F1:85:CA:13
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0916A4B1
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/EiVgdhgKRmZdmoAfyTE35PGFyhM.roa
Signing time: Thu 21 Apr 2022 08:44:46 +0000
ROA not before: Thu 21 Apr 2022 08:44:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398464
IP address blocks: 178.253.32.0/23 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152478897 (0x916a4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 21 08:44:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12256076180a46665d9a801fc93137e4f185ca13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:fe:33:60:a7:97:94:fa:55:3b:53:36:fd:
8b:32:65:7a:58:fe:aa:2f:6f:cc:5d:36:88:66:a1:
cd:74:8d:1f:3a:b2:32:61:82:85:1e:1e:94:df:83:
4e:72:aa:a0:86:9d:6b:28:7f:b2:3c:d9:be:84:07:
85:08:c3:0f:0f:79:31:d8:23:20:4c:c0:ca:47:40:
ad:a0:c3:d1:0f:04:7e:21:f9:7a:4f:9a:38:e1:36:
ac:66:58:d4:47:82:33:ed:69:c6:03:4c:c0:31:e0:
c3:2b:ae:21:41:dd:86:bc:92:80:ca:ce:b3:af:ce:
e7:5c:03:da:e6:18:d8:76:ae:32:b6:e7:cd:82:38:
f3:6f:23:25:3c:57:d0:b8:54:ea:1f:6e:23:38:f5:
d5:06:3a:b7:1a:36:d5:3d:cd:3b:02:a1:9e:d3:03:
c7:1e:42:ad:37:dc:17:e1:f1:3c:be:f9:b6:f4:72:
49:65:27:67:28:0c:6d:bc:5d:4e:40:8b:a3:83:ae:
56:a1:e9:cd:65:2c:07:ea:9a:4a:59:36:93:47:b1:
3e:e6:49:32:51:b7:f2:88:6e:00:ff:ec:06:fc:49:
2e:b2:3d:73:d5:23:ed:49:8e:09:b8:15:1e:15:b4:
36:1a:df:c2:7d:e2:bd:97:6d:eb:84:50:c2:59:0a:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:25:60:76:18:0A:46:66:5D:9A:80:1F:C9:31:37:E4:F1:85:CA:13
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/EiVgdhgKRmZdmoAfyTE35PGFyhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.32.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
45:db:24:67:12:5a:13:b2:d3:bc:f1:af:af:e4:f5:db:9e:3a:
f9:4b:f0:8f:f5:52:70:cf:19:ca:15:12:2f:3f:ad:8e:d9:37:
cc:e8:c2:74:74:52:5a:0d:99:bd:c5:3a:18:89:08:02:8a:c3:
55:f3:ab:cb:3f:a3:72:d1:7f:42:b7:51:2f:87:af:f8:47:e6:
81:5f:6a:cf:41:02:97:a9:15:b2:72:4d:33:ba:74:08:49:43:
1d:d6:b6:e3:be:32:b3:24:4c:54:88:07:e0:9c:54:31:06:37:
2a:5d:30:89:fc:89:12:8f:7f:0e:95:46:1c:7f:ec:55:ad:58:
ef:ee:b4:fe:12:4c:2f:29:6c:90:d9:7e:76:43:15:1c:bc:7d:
4a:03:63:92:18:6d:b3:87:ca:cb:2a:60:c9:e0:d0:bc:31:5a:
61:ae:b2:be:7c:2d:53:38:de:da:7d:81:32:66:80:cd:58:89:
14:de:8f:b7:dc:3b:cd:75:1b:cb:55:be:59:98:7b:48:3e:ad:
ac:7e:b9:bd:96:13:32:9a:ed:60:4e:08:58:64:8f:c5:fd:6d:
37:1e:ec:40:ff:fb:39:75:0e:27:76:90:71:61:c2:96:6a:99:
41:07:3c:12:12:c9:be:14:21:d8:d7:15:d1:a8:68:c6:26:fa:
03:fa:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org