Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/3Y5reGkURmGJf8YisnHN-RRjdA8.roa
File: 3Y5reGkURmGJf8YisnHN-RRjdA8.roa (raw, json)
Hash identifier: 5TK4/wsnE0TO4vrGWA3khNaLVWZEtcwCqqJ24M2A2go=
Subject key identifier: DD:8E:6B:78:69:14:46:61:89:7F:C6:22:B2:71:CD:F9:14:63:74:0F
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 28EC8C10
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/3Y5reGkURmGJf8YisnHN-RRjdA8.roa
Signing time: Sat 01 Jan 2022 13:55:51 +0000
ROA not before: Sat 01 Jan 2022 13:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41847
IP address blocks: 178.251.179.0/24 maxlen: 24
178.251.180.0/24 maxlen: 24
178.251.182.0/24 maxlen: 24
178.251.181.0/24 maxlen: 24
178.251.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686590992 (0x28ec8c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jan 1 13:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd8e6b7869144661897fc622b271cdf91463740f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:de:7d:4b:2d:94:a4:b6:10:48:f0:78:3b:
94:11:22:74:81:a9:63:93:07:a2:57:92:49:bd:2b:
ef:b7:76:de:e2:08:62:e7:fb:fc:62:46:14:da:7b:
b3:73:e8:44:ce:68:12:18:ef:9c:d5:61:e6:c3:12:
79:07:32:0e:f7:3c:51:71:2f:ed:45:58:17:d1:d2:
03:26:66:1c:25:91:d5:27:05:f3:7e:5f:84:9b:20:
11:e0:60:7a:18:58:88:71:36:73:de:e0:3d:e9:69:
11:9f:54:2c:68:e8:d4:b4:12:91:4c:5a:6e:7d:ea:
35:f1:bf:bb:ac:88:ee:a5:f3:4d:84:62:86:92:aa:
c0:99:16:17:d6:f5:83:4f:e8:57:58:f4:fb:da:18:
ab:46:27:d9:b3:6c:ac:c5:65:1e:6c:61:1b:56:c7:
4b:5e:a6:be:cf:b6:e3:21:4e:a8:ec:cb:5e:5a:7c:
00:23:df:77:13:c9:98:2a:9b:95:8c:a3:2c:d9:13:
3d:02:e5:d4:78:3b:b2:07:5b:04:22:44:44:cd:76:
88:c9:54:b2:f1:90:4e:e6:fc:4f:2c:92:66:65:c9:
50:60:d3:46:e5:61:56:38:8a:d7:11:ad:17:f1:1b:
21:fb:fa:44:73:57:70:d2:1e:0e:2a:98:c3:b5:88:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:6B:78:69:14:46:61:89:7F:C6:22:B2:71:CD:F9:14:63:74:0F
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/3Y5reGkURmGJf8YisnHN-RRjdA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.179.0-178.251.183.255
Signature Algorithm: sha256WithRSAEncryption
87:b1:9c:78:b3:bd:4b:68:f7:f1:92:f9:2e:70:e0:5d:58:9e:
f5:56:74:6c:9a:9c:76:cb:52:fa:d2:90:6b:1d:42:3d:91:18:
61:48:f5:81:c6:c7:ba:8c:1f:0f:7a:35:d3:13:a4:ff:c4:64:
28:29:74:54:49:20:8c:e6:72:60:8e:fd:7a:3a:39:5d:f6:61:
1e:8a:f2:de:3c:89:e7:83:6c:b8:c3:e2:38:0f:54:95:8a:23:
bf:c4:1c:35:ba:a0:e7:1c:d9:b9:dc:6f:a4:5c:ce:93:2c:50:
90:68:3f:f4:2e:fc:c6:13:49:a8:c0:13:54:9a:0f:23:9d:37:
c7:58:2d:4f:42:c9:33:0f:bf:85:42:be:2b:b9:9a:a5:87:81:
47:e6:23:5e:37:85:99:3b:33:01:64:07:73:1c:13:9b:f5:f7:
cc:5d:02:79:2a:15:05:e6:54:d5:08:13:59:df:5d:e7:80:09:
a4:63:c9:d9:0e:4c:ae:2a:07:0d:2e:74:26:b4:94:59:4b:17:
08:e2:1a:ab:96:a3:51:12:4d:7b:c9:bb:4c:d9:54:a7:71:14:
d5:ea:19:9f:34:bb:8c:fc:76:ae:c1:e6:57:f9:e7:41:b8:d5:
b2:29:74:0a:93:da:8a:19:81:4a:4f:88:61:b5:28:61:d2:d5:
e1:bc:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:49 2024 by rpki-client on console-ams.rpki-client.org