Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/G8tgDieGLS6YhjxIMq9phRDCcMw.roa
File: G8tgDieGLS6YhjxIMq9phRDCcMw.roa (raw, json)
Hash identifier: LVmH9Op7XadkO2AQLELSOgO/LsxbDyJfEc/PtkeW7jE=
Subject key identifier: 1B:CB:60:0E:27:86:2D:2E:98:86:3C:48:32:AF:69:85:10:C2:70:CC
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0182065E7E425FA4AA05D58A636DAE99AEA0
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/G8tgDieGLS6YhjxIMq9phRDCcMw.roa
Signing time: Sat 16 Jul 2022 09:37:12 +0000
ROA not before: Sat 16 Jul 2022 09:37:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.22.0/23 maxlen: 24
178.253.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:06:5e:7e:42:5f:a4:aa:05:d5:8a:63:6d:ae:99:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 16 09:37:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bcb600e27862d2e98863c4832af698510c270cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:f8:a9:a9:64:01:c0:76:6d:9e:06:a0:75:
11:98:e0:7d:c6:bf:5d:ed:c0:ad:27:dd:2b:df:8d:
49:fd:04:71:43:92:6b:fd:16:ff:3f:f7:a4:16:c4:
0d:15:dc:95:b3:44:9c:23:dd:89:b9:c8:94:e0:28:
4d:6f:7e:61:7d:bc:9c:2e:56:26:65:37:bb:42:e7:
2d:84:c1:e4:8e:d8:02:56:85:28:48:f8:40:8a:e5:
39:08:93:50:34:05:87:31:33:88:ad:c4:6b:ed:06:
28:d3:19:bd:55:d4:27:2a:95:86:82:d2:3d:2f:e5:
52:18:16:e0:b3:fd:5c:28:02:a2:b0:13:86:c6:d4:
41:fe:0f:49:ff:57:14:8f:f8:aa:55:1a:c9:5f:36:
d2:a0:92:1d:55:d2:ca:76:77:ac:48:d9:c9:89:b6:
f5:05:c0:82:d5:c3:2c:ed:84:dc:15:d1:34:f1:a5:
ed:5b:1b:5c:17:8e:61:b8:1d:d4:44:78:04:61:c0:
72:03:4a:18:6f:60:00:09:6d:94:6a:81:b0:e1:11:
87:fb:c7:cb:57:51:f9:d7:3f:a7:68:2f:48:19:a2:
a8:e3:e7:a4:d7:da:1f:18:5a:0a:6f:b6:17:aa:af:
01:0f:28:e7:c8:36:2b:8e:34:bc:3a:2e:90:78:a4:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CB:60:0E:27:86:2D:2E:98:86:3C:48:32:AF:69:85:10:C2:70:CC
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/G8tgDieGLS6YhjxIMq9phRDCcMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.22.0/23
178.253.26.0/23
Signature Algorithm: sha256WithRSAEncryption
78:da:ec:69:1a:05:c1:a2:94:9e:ba:30:98:ca:a1:dc:08:f3:
a0:6c:7b:da:7f:1a:22:87:9f:0c:f8:f0:7d:bd:90:f5:cb:f8:
4d:51:93:89:21:bb:f1:2d:17:f7:69:a2:51:1f:ed:96:c5:e1:
36:89:31:96:86:8b:76:29:ae:c6:7d:83:f0:c0:10:3b:02:88:
23:23:95:97:f9:57:f5:83:75:c9:63:c2:7a:17:1d:d5:46:57:
7d:00:4e:c0:7e:8e:10:d7:d2:d2:a2:d7:a0:d5:f4:a8:c5:43:
08:78:f5:a4:b2:33:18:40:12:87:ab:16:99:9c:3e:3f:08:dd:
d5:ea:34:8e:9a:9c:72:1a:6f:49:ba:c3:74:e6:2e:c8:d8:45:
13:41:75:25:2a:87:dc:d7:9b:29:51:b0:2b:3f:58:e8:2f:a7:
04:10:85:11:01:b0:b6:18:84:1a:1f:1d:26:75:63:4c:f6:6b:
26:d8:33:5b:7d:09:d1:90:47:a8:95:a2:7d:2c:fa:03:8f:cc:
e5:46:5d:f3:b5:ce:54:90:08:4f:6c:ed:91:08:56:90:81:69:
54:07:ff:63:70:3d:08:33:6c:51:0d:7e:ad:6e:86:7d:d7:8c:
f9:e8:16:d7:c8:23:5e:9c:0f:f6:0e:81:e6:8b:23:cb:fe:36:
7f:4a:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org