Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dBtbT9r5WELXFoqv4kB1qPRuKgo.roa
File: dBtbT9r5WELXFoqv4kB1qPRuKgo.roa (raw, json)
Hash identifier: kyWnSgxgkiTq/p9BruX52Z+6VAKWNNyaGoFnBmTJ/qs=
Subject key identifier: 74:1B:5B:4F:DA:F9:58:42:D7:16:8A:AF:E2:40:75:A8:F4:6E:2A:0A
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018409B3517B769F164334068ACBC219E918
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dBtbT9r5WELXFoqv4kB1qPRuKgo.roa
Signing time: Mon 24 Oct 2022 11:14:17 +0000
ROA not before: Mon 24 Oct 2022 11:14:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395517
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:b3:51:7b:76:9f:16:43:34:06:8a:cb:c2:19:e9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 24 11:14:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=741b5b4fdaf95842d7168aafe24075a8f46e2a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:55:7a:f7:64:10:1a:4a:1f:c2:80:3e:27:
f9:05:8d:33:a4:bc:f1:a1:fa:1e:dc:bd:a3:7f:88:
12:f5:37:e9:93:91:af:d0:bc:96:51:b0:ca:8d:f2:
cc:84:6e:49:ff:d6:ed:66:17:ae:be:c8:0a:80:9b:
17:5a:fd:f0:14:bb:cc:67:49:4d:ec:f8:b8:f4:c1:
b1:47:aa:e9:9a:12:59:40:77:85:2c:32:d5:53:6a:
b2:49:2e:cb:58:ab:a9:2d:5a:4a:64:05:09:0d:44:
48:f3:70:83:ad:36:5c:e6:5f:2d:e4:05:91:a1:40:
6f:b0:1c:b5:3d:a9:3b:58:d2:3a:c9:1d:10:e3:ed:
89:18:64:34:5f:b3:1b:00:4c:a5:aa:72:0b:04:de:
32:ac:52:1d:36:fa:b4:b1:48:e2:4c:62:3f:d1:0e:
79:19:74:20:bc:b3:5f:8b:0c:98:4c:40:f0:48:a8:
5e:e8:44:35:24:0d:18:00:6b:16:50:a6:71:a5:a4:
12:3d:6f:c3:d4:fe:fd:ee:e3:03:0e:7a:e4:88:fc:
8e:a3:52:8b:cc:26:4a:e7:78:35:bb:44:d7:3e:ce:
c5:6b:6e:64:b6:28:85:52:36:77:4a:40:c1:72:26:
6e:69:2f:06:5d:d4:18:22:41:f7:ea:66:57:4a:86:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1B:5B:4F:DA:F9:58:42:D7:16:8A:AF:E2:40:75:A8:F4:6E:2A:0A
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/dBtbT9r5WELXFoqv4kB1qPRuKgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:09:d8:b1:26:bc:a8:a9:f2:30:a2:14:ed:01:5b:0a:a3:7e:
5a:81:02:9d:9f:c2:d0:3e:72:ad:b2:df:9e:1c:bb:17:a5:6a:
e2:e8:a7:ab:64:d6:66:10:3c:ce:fa:61:22:00:68:55:cf:3e:
bf:aa:8e:2c:19:7f:65:de:8c:8b:21:d8:62:b0:3c:47:dd:98:
c1:6a:b2:64:a1:01:93:38:7f:d4:24:59:33:f2:b1:12:47:55:
77:5b:f3:20:f0:ce:92:af:f6:4e:b9:ab:db:df:7f:dd:6d:0b:
12:63:3c:e0:ec:59:79:ed:ec:6a:33:24:21:86:20:14:ce:9e:
be:2f:4b:42:75:57:53:64:e3:4f:82:ed:7e:65:b3:30:8f:0d:
c3:36:22:0d:75:57:23:b7:b2:13:4d:bf:c2:1e:51:ce:4c:e0:
98:e5:89:f7:b7:c9:62:c0:83:40:57:65:0a:89:1b:d0:a5:0e:
4e:fd:e2:c5:29:fa:b9:fa:2f:dc:35:d7:15:cc:44:be:4e:21:
53:7d:dd:bd:12:13:a3:6a:d5:e5:ec:2f:82:a7:9d:35:41:42:
6f:cb:ef:01:89:2e:e9:62:89:47:88:12:04:4e:cc:1f:3b:13:
61:7c:49:eb:39:1e:b0:07:c7:19:36:6e:5a:e2:d1:0f:c6:ff:
67:57:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org