Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/XHNaflFp8kI6kR9kWo7o-Xhp5Zs.roa
File: XHNaflFp8kI6kR9kWo7o-Xhp5Zs.roa (raw, json)
Hash identifier: rC6Z1IWQE5gjQ0MkqyRQ+4syvahrGPZoktxDpD4L0Z0=
Subject key identifier: 5C:73:5A:7E:51:69:F2:42:3A:91:1F:64:5A:8E:E8:F9:78:69:E5:9B
Certificate issuer: /CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Certificate serial: 01985EBC
Authority key identifier: 8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/XHNaflFp8kI6kR9kWo7o-Xhp5Zs.roa
Signing time: Sun 13 Mar 2022 14:43:29 +0000
ROA not before: Sun 13 Mar 2022 14:43:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 178.212.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26762940 (0x1985ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14557e1f9b84c94802453f4ec199acf855b3a4
Validity
Not Before: Mar 13 14:43:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c735a7e5169f2423a911f645a8ee8f97869e59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:ea:8f:79:7e:75:2f:0f:86:da:06:29:fb:
f6:33:dd:5b:92:49:ae:64:c2:ba:75:6d:db:7e:18:
c4:12:b4:45:75:77:9e:3c:97:c4:b3:81:aa:ce:c1:
40:b9:4e:8b:a3:52:ab:0f:2c:e0:72:78:5e:b9:4f:
70:80:60:04:0a:2f:13:52:67:47:19:19:78:ff:c7:
d4:0d:59:c7:c7:7c:9f:1b:c3:cd:c4:23:a8:5c:d4:
da:28:1e:58:26:10:21:a1:3b:cf:85:60:90:df:44:
4a:4f:a4:3a:55:74:3e:ca:0d:40:ff:bf:2f:e2:ed:
c0:a7:71:7d:9a:65:57:aa:76:28:96:72:9b:8e:9a:
a9:95:a3:55:92:8f:5d:04:1e:a8:50:2f:d8:46:6a:
ac:de:48:a4:43:c6:f2:52:e4:56:40:94:75:4a:e3:
b8:b8:5e:30:53:8b:d1:0e:11:71:53:09:79:d0:a1:
99:09:97:82:b4:d7:e4:4b:02:c1:a3:29:a9:b7:3a:
bd:77:0a:03:ef:70:11:97:bf:4c:a7:4c:60:25:fb:
32:32:58:f8:e9:95:24:3b:85:99:08:f3:39:05:78:
28:4f:7e:a3:51:d1:40:a3:fa:b1:fa:60:1b:50:79:
6c:42:29:b2:65:e5:d3:f0:10:77:1f:48:11:d7:0a:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:5A:7E:51:69:F2:42:3A:91:1F:64:5A:8E:E8:F9:78:69:E5:9B
X509v3 Authority Key Identifier:
keyid:8E:14:55:7E:1F:9B:84:C9:48:02:45:3F:4E:C1:99:AC:F8:55:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/XHNaflFp8kI6kR9kWo7o-Xhp5Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ca7c6f-aaca-4fdc-bf23-9783421e51ba/1/jhRVfh-bhMlIAkU_TsGZrPhVs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.76.0/24
Signature Algorithm: sha256WithRSAEncryption
33:17:41:ca:10:b5:bb:77:bf:c0:ce:0f:a4:43:d5:88:7a:79:
86:b4:7a:34:c0:6d:db:e5:61:4a:7d:60:56:66:89:19:94:84:
fa:cc:1c:1d:63:bc:98:b8:a0:e0:e9:58:f0:ba:48:af:db:6c:
63:86:f8:d8:16:0c:95:92:27:f3:ab:53:d8:97:e9:f9:20:b2:
ba:49:9b:b9:50:9e:b3:97:fb:ab:d2:9f:91:02:ef:b8:86:d3:
95:b5:4f:19:d3:eb:22:2d:4f:66:a5:4b:1e:73:eb:9a:98:b2:
46:f9:3a:3e:43:15:7d:19:8a:1a:e2:5e:6f:38:cd:a3:4f:e2:
a4:10:1a:f4:69:14:60:dc:f0:37:a6:ac:98:89:a3:f7:91:3c:
ce:dc:6a:7f:f8:68:2f:9c:d3:b6:35:ce:64:a2:92:97:73:18:
72:72:06:e4:8e:00:fb:9e:1e:04:7d:fe:94:c9:3e:c4:78:19:
a6:56:12:3f:41:90:22:82:6b:f6:a3:4a:1e:72:e4:64:86:e4:
de:20:98:a0:a7:5b:b4:c8:a0:0a:0c:6f:8f:df:73:44:fe:4c:
f9:73:61:e4:70:6c:a2:04:38:7c:c5:0a:3f:4e:bf:ef:00:3f:
c4:4a:33:8a:36:b0:a0:5e:7a:19:15:0f:cf:31:6c:d3:f0:cb:
5a:75:ba:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:24 2023 by rpki-client on console-ams.rpki-client.org