Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F2i-6fKuMDkOKggkIAyXIoj-9_Q.roa
File: F2i-6fKuMDkOKggkIAyXIoj-9_Q.roa (raw, json)
Hash identifier: NI0nE/nIetiV15Wg1n8QU+7c0xYxS0fnQ2x68LNdfFM=
Subject key identifier: 17:68:BE:E9:F2:AE:30:39:0E:2A:08:24:20:0C:97:22:88:FE:F7:F4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CAE448D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F2i-6fKuMDkOKggkIAyXIoj-9_Q.roa
Signing time: Sat 01 Jan 2022 05:04:54 +0000
ROA not before: Sat 01 Jan 2022 05:04:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28753
IP address blocks: 178.239.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212747405 (0xcae448d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1768bee9f2ae30390e2a0824200c972288fef7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:c5:0e:5d:1f:af:83:98:56:33:35:09:d0:
7f:32:d6:04:da:7d:8b:86:23:19:87:f3:96:61:11:
02:91:e0:a2:10:1a:e8:78:ab:df:49:6b:66:25:8e:
44:b6:66:1c:e0:43:e6:3b:fc:71:58:93:0f:18:78:
54:ab:55:e2:8b:9b:de:fa:cd:0e:69:6f:b9:19:1f:
4e:68:3e:44:a0:3d:5d:c9:95:54:d9:7b:53:12:81:
cd:46:64:7a:c5:c6:d4:39:9a:b2:12:8c:2e:c4:c6:
4c:f7:5a:13:91:c0:97:45:7b:61:23:e2:0c:c0:57:
a5:a2:5e:95:7b:7a:19:3a:fc:d9:8e:79:74:61:8c:
f3:fe:76:ed:a8:ce:90:8b:ce:65:17:2c:c2:0d:ec:
dd:32:08:6f:97:b8:a5:da:0e:62:36:02:43:c0:f1:
c3:3e:2d:2d:af:73:20:a0:ea:1f:97:6c:02:af:6c:
a4:35:db:a9:87:05:19:6b:d5:5c:41:b6:c1:c7:17:
99:01:6c:5e:52:0c:80:ba:3d:17:35:c6:30:60:d4:
db:1d:c4:71:5e:fa:af:66:46:c3:41:bd:81:bb:5e:
4e:9b:18:5b:b3:19:f3:f7:a7:b2:40:21:c2:c8:a5:
28:a3:b5:1b:69:3d:d2:59:fd:fd:52:4e:68:ba:c0:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:BE:E9:F2:AE:30:39:0E:2A:08:24:20:0C:97:22:88:FE:F7:F4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F2i-6fKuMDkOKggkIAyXIoj-9_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.198.0/24
Signature Algorithm: sha256WithRSAEncryption
86:51:fd:0d:0c:1b:c8:17:f2:6e:2a:b6:52:db:10:d2:3d:28:
e6:a9:75:90:fa:49:1e:c2:2f:3c:db:45:d1:5e:26:3d:ce:1f:
11:b6:1b:66:fe:3f:7d:04:e8:9e:7b:00:52:2d:c5:41:4d:6c:
cc:a2:c1:0a:39:eb:c8:1f:4d:d7:39:f6:65:70:67:9b:20:b9:
f9:a9:de:7c:42:c0:97:30:ce:18:07:36:90:2a:2e:c3:44:7a:
29:fe:01:35:a6:51:53:b6:22:46:3f:59:06:78:9a:b0:5f:c5:
7c:f8:df:c5:5a:97:da:9a:4e:51:de:be:90:5f:9f:7e:d0:42:
ff:e4:f8:7f:d4:e9:76:ec:d6:99:38:c3:4a:4b:28:bf:a0:ee:
e0:bf:63:af:81:36:e4:d5:14:9e:74:d1:40:56:4e:94:1d:cf:
80:4a:2d:11:ff:37:b0:84:4f:24:97:bc:0e:96:c7:a8:95:70:
aa:af:ec:e1:e0:22:52:83:4c:af:84:9b:4a:4d:b9:e8:c5:ea:
9f:2f:06:69:83:e2:90:08:28:a8:a5:b7:97:d4:12:0b:cc:90:
b9:5f:f5:3d:cd:43:43:b0:b7:ca:f4:99:76:22:c1:f5:be:02:
40:5d:76:b4:8d:eb:3d:8f:1f:ee:3a:ae:8f:e1:28:b1:cb:eb:
47:b1:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:09 2024 by rpki-client on console-ams.rpki-client.org