Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/I9nlH9hSBRAY-x6J4XRiqrZZmpY.roa
File: I9nlH9hSBRAY-x6J4XRiqrZZmpY.roa (raw, json)
Hash identifier: mDGa/nz3Tj6/ODiZcH7uSlUdcL6PQszu5GDOBAaG3L4=
Subject key identifier: 23:D9:E5:1F:D8:52:05:10:18:FB:1E:89:E1:74:62:AA:B6:59:9A:96
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01820D6CAD334A35E9CDC7510378F196DC4F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/I9nlH9hSBRAY-x6J4XRiqrZZmpY.roa
Signing time: Sun 17 Jul 2022 18:30:02 +0000
ROA not before: Sun 17 Jul 2022 18:30:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 178.253.22.0/23 maxlen: 24
178.253.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0d:6c:ad:33:4a:35:e9:cd:c7:51:03:78:f1:96:dc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 17 18:30:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23d9e51fd852051018fb1e89e17462aab6599a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:34:a9:ff:59:8a:b4:f7:41:84:91:e1:36:
89:10:4e:d6:0c:37:55:29:2b:25:48:37:3b:b4:e7:
69:c7:73:20:cc:2d:43:b2:d8:79:f0:58:fe:40:61:
ac:d5:8f:4d:49:69:88:47:fc:fa:6d:6c:de:a6:26:
54:77:be:a0:4c:6a:7c:12:52:c2:39:08:e7:f1:2c:
55:23:65:aa:a6:04:0a:66:7f:7c:85:7b:08:99:ec:
b2:6b:a1:5c:a7:e1:27:b9:9d:4d:26:94:ca:56:98:
0a:eb:60:f9:75:00:cf:5f:a9:f3:18:48:4a:e1:58:
61:59:27:7d:4a:f9:35:8d:44:17:2f:fb:1e:a7:c1:
08:23:3b:b3:e9:69:15:b7:f2:8d:ce:af:88:a3:d8:
95:fc:2b:89:cc:20:75:f4:41:39:0a:c9:1d:91:c2:
f6:de:ce:e7:e0:9f:f4:d4:db:83:b7:6b:1d:39:36:
1d:95:26:1b:f6:e9:1f:4f:b8:b1:a4:5e:64:e5:d0:
e2:96:77:cd:48:f3:89:28:b7:d3:3f:cd:30:f3:f4:
42:0e:19:9c:d4:0d:32:b7:33:1d:0e:65:92:8c:75:
06:22:b6:2b:42:06:cd:a4:be:6b:c7:27:12:9d:ad:
8b:c0:3d:0c:a0:46:0b:59:b7:6a:6f:3a:a5:5e:ea:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D9:E5:1F:D8:52:05:10:18:FB:1E:89:E1:74:62:AA:B6:59:9A:96
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/I9nlH9hSBRAY-x6J4XRiqrZZmpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.22.0/23
178.253.26.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:d0:9f:a9:a6:32:40:ee:27:fc:c8:d1:50:63:ac:d9:97:66:
a2:fb:a8:2a:4c:01:0c:87:92:79:ce:5d:c9:42:c7:71:4b:d1:
f1:1a:3d:31:8d:38:63:87:f4:da:e6:a5:eb:63:67:c4:2a:3d:
15:6b:69:bd:4e:f8:f1:33:cb:aa:bf:7c:ed:8c:14:85:41:28:
86:bc:d7:d3:ce:01:ee:a1:f7:a5:e7:f7:ad:76:1f:32:cf:01:
f2:20:b1:e1:e1:54:34:90:09:f0:1c:01:c9:12:d7:74:fb:e0:
65:0b:d4:15:23:6c:e5:da:56:38:a2:a1:da:81:24:51:85:e3:
38:f4:46:cd:d3:a2:8e:fe:d1:90:a6:08:39:f7:5d:fd:eb:91:
b0:5b:6f:94:f7:35:df:f1:15:a1:9e:1a:2a:f8:76:7c:6a:84:
45:f5:8f:f0:16:16:44:3d:45:7d:4d:0a:b1:cb:9c:59:b3:c1:
91:25:36:3e:16:c1:92:64:75:31:35:68:f2:ad:31:f1:00:4c:
8d:2c:b2:79:31:99:3c:0a:a5:e9:17:6c:14:e2:2c:3b:1c:7d:
d8:d2:04:52:fe:72:86:0a:15:5c:f0:3b:61:a3:46:de:86:9c:
bf:05:a1:5a:ca:93:26:c0:5d:79:25:66:ec:a3:fd:a0:6b:3c:
dc:c1:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org