Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/apYNVwNr4iuyAchYSHFpmM-CIsQ.roa
File: apYNVwNr4iuyAchYSHFpmM-CIsQ.roa (raw, json)
Hash identifier: NqNMCkIzQtbr+vWM029R4MdPvCwbI/lqa5Ta2MTd3Pg=
Subject key identifier: 6A:96:0D:57:03:6B:E2:2B:B2:01:C8:58:48:71:69:98:CF:82:22:C4
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: A108BD
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/apYNVwNr4iuyAchYSHFpmM-CIsQ.roa
Signing time: Fri 04 Mar 2022 22:01:30 +0000
ROA not before: Fri 04 Mar 2022 22:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 178.251.16.0/24 maxlen: 24
178.251.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10553533 (0xa108bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Mar 4 22:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a960d57036be22bb201c85848716998cf8222c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:9f:b5:a1:13:39:9e:d4:ba:a4:8c:db:90:
c0:6e:90:92:f4:fe:06:35:b8:b4:49:3e:8d:be:d2:
79:82:ad:87:2f:7a:c7:31:8d:fc:23:3b:4d:a6:ec:
48:54:7b:8c:4c:f8:f4:d6:d9:0f:d6:09:df:af:e0:
9f:2c:57:48:fc:ce:78:73:86:55:f4:92:df:66:22:
df:98:73:2d:c6:85:35:73:9d:66:0c:e8:07:50:41:
ef:28:8d:77:07:a4:70:f2:ab:69:c8:1c:68:02:ce:
08:46:0e:2e:bf:d7:45:bd:e5:0c:c6:35:6e:0c:77:
de:bb:da:46:5d:27:b8:85:f6:c5:07:bc:ea:eb:01:
3e:66:6b:75:e7:61:2b:a9:95:43:74:c0:e4:ec:db:
dc:01:5a:bc:d7:8d:7e:02:d4:eb:5a:1f:42:4e:8a:
8d:38:90:14:17:dd:11:45:5b:05:91:20:46:9b:f3:
24:d0:d0:fb:b4:c0:a8:31:3f:ff:d9:63:8f:21:c3:
69:9a:12:4f:5e:e5:ee:af:1f:62:f7:13:5c:ab:43:
17:fd:37:e3:59:ac:f5:ed:9f:35:b5:a3:43:42:7f:
5a:a2:13:df:3d:44:9e:c9:1c:26:09:94:a7:55:03:
83:80:f3:b0:61:f3:ff:73:23:e0:f3:ca:7e:53:e7:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:96:0D:57:03:6B:E2:2B:B2:01:C8:58:48:71:69:98:CF:82:22:C4
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/apYNVwNr4iuyAchYSHFpmM-CIsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/24
178.251.19.0/24
Signature Algorithm: sha256WithRSAEncryption
23:52:2c:b6:b8:5f:4a:e5:12:93:d6:7c:f8:80:56:88:f6:4c:
9e:a8:f4:6d:12:6a:2b:de:15:37:df:84:4f:ac:5a:dd:45:78:
9a:33:ab:97:f9:14:65:bb:10:3d:01:00:e7:e7:75:84:97:17:
09:ca:7d:6d:71:54:e4:49:c3:da:81:03:c8:5d:84:3d:d8:ff:
99:93:75:f7:e0:07:60:34:1d:3e:fe:95:3e:e8:a5:bb:50:4d:
9a:fa:18:69:6f:d0:fe:af:d3:b4:2a:9d:3c:86:18:13:bc:cd:
13:9c:cd:34:16:0d:bc:fa:f7:05:ef:f0:a6:72:ab:ba:e2:4d:
e0:0e:15:73:cc:5f:bf:25:7e:d2:69:99:d6:7e:a9:d1:0c:4f:
a1:0d:3d:35:5c:ce:3e:37:37:27:78:73:a4:9e:96:47:b2:cf:
4c:16:ef:dd:d6:8a:2f:9c:e3:4d:38:23:44:87:b5:5a:5c:f8:
36:ed:90:8d:89:96:d8:84:b5:de:df:b4:ad:41:1c:a3:80:f0:
94:88:b1:f1:36:a6:99:36:59:88:5c:cd:2d:46:55:70:74:b3:
59:15:3f:7e:05:27:ef:e9:2d:d9:67:77:01:50:a4:0d:20:c6:
d8:c6:47:07:c6:ac:d0:07:32:55:6f:68:96:3f:85:b6:88:7e:
ad:0a:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net