Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/4Lgmxm54oh_2dAnTt9Lc6pAcQUc.roa
File: 4Lgmxm54oh_2dAnTt9Lc6pAcQUc.roa (raw, json)
Hash identifier: P5ZfKUFlFTIMTroI5NZx7N8WEYXWbudwtpydckDShIc=
Subject key identifier: E0:B8:26:C6:6E:78:A2:1F:F6:74:09:D3:B7:D2:DC:EA:90:1C:41:47
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 8A31FD
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/4Lgmxm54oh_2dAnTt9Lc6pAcQUc.roa
Signing time: Sat 01 Jan 2022 03:57:03 +0000
ROA not before: Sat 01 Jan 2022 03:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210570
IP address blocks: 176.126.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9056765 (0x8a31fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Jan 1 03:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0b826c66e78a21ff67409d3b7d2dcea901c4147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:ec:f1:78:e2:88:c3:f1:a2:1c:b4:20:bb:
81:6a:cc:b4:48:ed:83:91:55:2a:50:f9:53:4e:09:
81:5c:24:94:0b:e3:95:7c:ef:c9:9a:3f:60:f3:77:
ef:bc:0a:01:a7:ca:ba:34:02:31:ad:c3:2d:44:df:
98:3e:90:1c:1e:2a:6e:c8:e4:3e:48:09:4a:8b:58:
80:f3:05:f9:9f:28:a7:e6:75:f2:c2:2e:de:72:a9:
37:47:6a:bb:f0:46:fc:8d:4a:f6:3d:3d:3f:e2:db:
69:da:62:49:1d:8c:31:01:de:a3:15:3c:bc:ed:03:
65:de:dd:81:eb:7d:fd:8d:54:16:f1:1f:e8:9c:2a:
13:18:ea:60:61:88:04:e9:b9:d1:f2:c6:ed:ca:a0:
63:24:19:fc:96:bd:30:5b:35:48:2b:a8:3f:3e:07:
c4:08:92:66:58:6c:ba:9e:bf:24:34:4f:7a:e7:32:
52:bb:6a:d7:3e:a4:1c:9e:c8:d3:fd:ad:da:c6:94:
4c:81:4f:bf:cf:3c:cc:7f:71:c1:f1:66:9f:7b:8b:
18:d3:3a:ab:2a:97:67:e8:ac:8b:b7:c8:5c:3b:34:
5f:68:7b:a1:2b:bc:40:bc:4a:97:28:10:ce:f5:db:
10:ea:ff:f2:ca:3b:82:b8:24:e7:06:5c:bd:7a:96:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B8:26:C6:6E:78:A2:1F:F6:74:09:D3:B7:D2:DC:EA:90:1C:41:47
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/4Lgmxm54oh_2dAnTt9Lc6pAcQUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d7:f4:21:d8:a2:af:5a:a4:a9:40:2e:60:1e:a7:78:67:d2:
7a:97:bd:39:59:7f:c1:f6:9b:9e:88:9d:47:6d:c4:91:8a:4c:
46:f5:8d:b1:57:d0:62:67:e1:da:5b:e9:4a:75:5c:69:30:67:
ad:92:50:ce:80:2e:18:ba:ca:e2:45:58:58:44:42:2f:3f:7a:
a4:82:96:72:b7:fb:57:87:87:bf:48:49:9e:e7:8e:1c:07:92:
fd:8f:66:9a:9b:fd:72:55:ea:3a:cc:ba:ba:69:de:df:98:f2:
ca:95:8e:e6:dd:93:97:aa:29:71:11:bc:f9:ae:01:01:fd:d4:
15:ee:51:8c:38:0b:96:15:5b:3c:e2:22:02:d4:59:d8:a0:2e:
56:b7:f0:07:4b:d9:92:f4:0f:67:bd:0d:27:5a:46:f5:7f:b9:
2c:64:d7:0a:ce:2c:19:46:5f:6b:30:b6:de:85:d1:86:ca:d5:
86:59:92:b2:d5:d1:fd:b0:d6:99:2f:80:eb:f8:fd:d9:9a:b0:
9a:a0:56:af:60:30:af:03:11:f1:8a:6b:9e:0b:4b:74:8d:60:
84:7e:04:28:44:1b:6d:17:1e:59:1a:be:0e:f4:12:10:17:7c:
61:24:8a:3f:f1:f7:a7:c6:9b:1e:f3:3c:d2:36:bc:d9:dd:6a:
5d:46:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org