Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Gt2fQDQPX-LhB0YO6gOWs2vKqus.roa
File: Gt2fQDQPX-LhB0YO6gOWs2vKqus.roa (raw, json)
Hash identifier: QeU5BJmPobWc5Y/nTn5bXzWxt/hLvtq4NZzzXmnZfqs=
Subject key identifier: 1A:DD:9F:40:34:0F:5F:E2:E1:07:46:0E:EA:03:96:B3:6B:CA:AA:EB
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09D497EA
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Gt2fQDQPX-LhB0YO6gOWs2vKqus.roa
Signing time: Fri 01 Jul 2022 08:52:02 +0000
ROA not before: Fri 01 Jul 2022 08:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 178.253.32.0/24 maxlen: 24
178.253.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164927466 (0x9d497ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 1 08:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1add9f40340f5fe2e107460eea0396b36bcaaaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:f8:fd:fa:9f:9d:94:3c:32:39:bf:cd:94:
c5:10:45:5a:bc:bd:8d:ae:c5:12:b0:0c:b2:b7:ec:
d9:58:89:24:66:93:e8:11:39:26:3b:3c:7f:0b:72:
9e:f9:23:99:a4:fe:5c:0a:a4:d7:7d:c0:b0:a8:70:
17:77:e7:a3:95:5b:a2:94:06:dc:fe:35:30:33:3a:
24:73:20:59:d1:9a:bd:06:34:c2:f3:4f:4a:d9:57:
e4:01:a8:a4:38:c3:c0:ac:d9:d4:14:ab:66:be:e4:
5e:20:07:ae:d4:05:30:f1:c3:55:35:cf:cc:b6:e6:
f3:5e:e9:dd:2c:25:88:fa:e9:d0:5d:96:45:ad:a2:
71:37:39:28:37:5d:76:0c:ae:37:5c:d7:bb:08:fc:
2d:60:dd:aa:30:81:3a:27:c9:74:79:16:68:43:1b:
11:64:9a:f2:93:fc:5b:c4:10:d0:30:b1:cc:01:27:
27:bc:fb:cf:66:f9:4b:c8:55:92:74:cc:93:90:00:
db:ad:7b:5d:1c:3b:fa:3f:ef:51:cf:c9:02:0c:76:
21:e5:7b:bb:68:00:18:b2:cc:e4:f9:9d:21:cc:e1:
bc:47:3a:e9:73:8b:9d:cc:2f:ff:4e:0b:45:8c:27:
e1:e2:c9:2a:4a:99:52:34:a8:f8:b1:63:59:51:47:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DD:9F:40:34:0F:5F:E2:E1:07:46:0E:EA:03:96:B3:6B:CA:AA:EB
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Gt2fQDQPX-LhB0YO6gOWs2vKqus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.32.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:5d:ec:3d:a8:a6:6d:d8:fd:9f:36:23:ef:80:5b:29:bb:46:
46:50:2e:44:97:b2:22:81:e9:4b:fb:7c:39:61:97:50:ab:99:
c7:f5:9e:97:b0:6c:91:71:07:19:b4:53:2b:a2:09:92:6b:56:
21:24:28:db:ed:01:cb:b2:5f:03:48:c0:32:e2:92:72:fc:1f:
61:6d:2b:20:b6:55:a3:6f:98:80:62:ac:b7:8f:1c:fb:ba:a4:
d1:c3:34:ab:89:8a:37:3c:31:69:61:6f:79:24:ed:37:f9:9e:
7b:c9:76:e1:b4:75:4b:a6:9c:a9:2a:da:67:79:90:36:91:86:
de:41:39:f6:21:e0:c0:ab:55:55:1e:f4:39:0f:70:c9:2f:5d:
0a:e7:49:57:7a:36:37:ab:f6:d3:e8:d1:70:20:4e:ad:46:1d:
97:8d:5d:aa:cc:30:30:ee:a3:4f:f8:99:5d:f1:51:1e:fc:41:
91:ec:d1:1d:3e:91:63:60:5b:2b:0c:93:76:be:72:57:c0:1c:
23:a1:f1:47:64:6e:b8:2d:5a:cf:49:d4:77:8e:79:49:2b:1c:
9a:d0:3f:7b:c1:2e:39:f7:7c:ee:f4:93:13:f6:7a:13:1d:89:
b4:78:f4:16:ae:3c:56:d7:b5:ce:19:ec:e2:23:fe:a4:8d:d5:
68:ec:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org