Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/idvOD1VDnxQ0BaLe_CkZeXb8gHQ.roa
File: idvOD1VDnxQ0BaLe_CkZeXb8gHQ.roa (raw, json)
Hash identifier: 3jJiFyh8j78DkcASAQd4uI+nVo/GNZYqqkcVSpQP3+A=
Subject key identifier: 89:DB:CE:0F:55:43:9F:14:34:05:A2:DE:FC:29:19:79:76:FC:80:74
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 19B7050B
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/idvOD1VDnxQ0BaLe_CkZeXb8gHQ.roa
Signing time: Sat 01 Jan 2022 15:55:44 +0000
ROA not before: Sat 01 Jan 2022 15:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20824
IP address blocks: 178.249.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431424779 (0x19b7050b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jan 1 15:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89dbce0f55439f143405a2defc29197976fc8074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:42:eb:37:0a:13:7a:5b:47:26:6d:21:35:
95:11:70:01:55:3f:f6:d5:c3:e5:c8:4f:e5:1e:9a:
16:12:ec:21:01:33:37:45:e9:ab:42:68:da:68:0b:
68:a2:39:f1:05:f3:c9:e7:c3:aa:ef:ae:4b:23:ad:
3c:67:a7:96:02:90:ed:a7:c7:b6:e4:0c:de:07:29:
be:3a:b1:84:f3:f2:f6:e0:8d:d2:ed:2f:07:9b:ff:
4e:2c:95:14:88:05:a0:cb:77:6e:95:bc:be:63:b2:
c8:6d:6a:75:a5:56:c7:c2:46:0e:2c:bc:aa:4e:64:
7c:a0:0f:18:e5:ee:d0:11:28:11:14:38:90:2b:97:
97:b1:19:8b:1e:cc:2c:06:16:74:8e:12:db:48:d5:
b0:d6:c4:88:21:b9:f7:bf:03:d1:b7:dc:d9:da:f1:
c6:36:73:28:d7:60:a7:c8:e9:54:46:72:94:22:bc:
5c:cc:ed:0f:70:cd:9f:56:5b:f6:74:fc:df:3e:0d:
32:f8:27:1c:aa:e6:8b:24:03:0c:78:c9:d2:08:d3:
db:26:5e:26:9a:a9:1d:da:7c:5e:bc:bd:b6:28:37:
93:a2:b9:b4:12:f0:37:34:7f:aa:c2:7e:2d:53:8c:
1c:99:fd:9e:bf:b3:6e:c4:48:a7:84:4e:cf:70:5e:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:CE:0F:55:43:9F:14:34:05:A2:DE:FC:29:19:79:76:FC:80:74
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/idvOD1VDnxQ0BaLe_CkZeXb8gHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.165.0/24
Signature Algorithm: sha256WithRSAEncryption
82:88:bf:97:7b:21:b6:14:af:e5:3b:97:b1:d9:a9:9f:ef:44:
cc:00:95:70:e8:a5:0d:1b:b4:4d:c1:80:8c:25:ac:8a:e2:1d:
67:57:69:14:a8:d3:f7:33:e5:fe:89:22:fc:6b:93:6c:83:df:
65:47:c1:a1:ae:f6:6b:bd:d9:8b:e6:29:c7:a6:ff:76:a5:2e:
c5:3e:1c:f9:6f:5b:64:1e:9a:90:29:73:cb:d6:f0:52:fe:fd:
24:63:45:0c:a4:9b:b3:2c:57:30:b4:b6:64:27:a7:25:62:31:
68:ef:fc:cb:8a:a1:f0:cd:1d:6b:fa:b2:c2:82:39:1d:2e:50:
5a:61:c9:d6:fd:44:87:6c:c4:bd:8f:96:25:14:cc:45:a9:04:
d7:d6:85:a4:25:40:d5:0d:a5:cf:6b:e7:c0:2a:a7:4b:58:3e:
ee:ba:e4:6c:00:c9:05:70:5e:5c:41:d9:bc:7d:70:d3:fe:04:
36:01:00:ee:40:dc:e8:9e:62:1f:47:de:33:5d:39:03:53:f0:
7b:9b:46:cb:ea:43:6f:04:3e:6e:e4:0c:0f:89:eb:a1:6d:14:
93:6e:7d:b3:10:01:53:9f:5a:66:7a:98:d5:7e:0b:41:69:b7:
d1:3d:fb:f4:da:b5:39:60:a1:49:16:e9:82:d9:3f:73:a4:3f:
db:b6:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-ams.rpki-client.org