Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/dlQpWz-A294DBkAbxUvZWOeigtY.roa
File: dlQpWz-A294DBkAbxUvZWOeigtY.roa (raw, json)
Hash identifier: omhuys78I5Pf///PtMNtRiUHHDjm+8zjVmxaWAV1yr0=
Subject key identifier: 76:54:29:5B:3F:80:DB:DE:03:06:40:1B:C5:4B:D9:58:E7:A2:82:D6
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: BC2044
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/dlQpWz-A294DBkAbxUvZWOeigtY.roa
Signing time: Sat 01 Jan 2022 02:59:42 +0000
ROA not before: Sat 01 Jan 2022 02:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38999
IP address blocks: 185.76.176.64/26 maxlen: 26
185.76.178.0/24 maxlen: 24
185.76.177.192/27 maxlen: 27
185.76.177.0/24 maxlen: 24
185.76.177.224/28 maxlen: 28
185.76.176.0/25 maxlen: 25
185.76.176.0/24 maxlen: 24
2a05:5b83::/32 maxlen: 32
2a05:5b81::/32 maxlen: 32
2a05:5b84::/32 maxlen: 32
2a05:5b80::/32 maxlen: 32
2a05:5b82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12329028 (0xbc2044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jan 1 02:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7654295b3f80dbde0306401bc54bd958e7a282d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:25:66:3f:15:a9:1b:53:76:71:8c:dd:21:
ae:2c:7b:83:b6:f2:96:b4:a7:f9:7a:15:89:67:c5:
28:cd:64:2a:bc:26:4a:6c:4b:65:bc:d3:53:94:74:
b1:a7:88:40:51:7c:71:c6:fe:1c:47:c5:d1:a1:e0:
a7:0c:9d:9c:b9:bb:ff:54:3f:36:ae:fc:84:63:af:
2d:11:e6:16:e0:e7:1f:66:7b:ab:d1:09:ea:fd:bf:
0e:60:e2:3b:16:b6:07:0e:75:8e:1d:ca:da:42:2a:
fd:ee:87:54:0b:5e:72:68:60:a2:e2:ee:5a:cc:f2:
91:84:02:34:68:37:34:6c:24:b4:6f:b6:bf:d1:2f:
31:a8:32:23:3f:75:e9:e4:9a:9c:44:12:bc:32:07:
dc:9e:74:40:81:77:90:1a:72:6c:58:9b:6a:0e:e1:
3e:35:4b:63:2c:f2:27:1f:73:47:ba:c7:5d:7b:91:
fd:f4:d1:c8:e4:df:d1:09:f2:6d:c7:40:77:09:b5:
2d:fa:be:c2:f7:06:dc:1b:d7:a6:db:0b:88:80:34:
81:6c:3b:dd:05:c5:8f:24:bc:35:f8:ad:05:47:e3:
65:5c:a1:3e:1e:3f:94:05:a0:1c:ca:dd:c6:c2:76:
98:a9:11:75:6e:54:5b:e5:bc:0e:13:c6:86:1d:c3:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:54:29:5B:3F:80:DB:DE:03:06:40:1B:C5:4B:D9:58:E7:A2:82:D6
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/dlQpWz-A294DBkAbxUvZWOeigtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.176.0-185.76.178.255
IPv6:
2a05:5b80::-2a05:5b84:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:55:2a:f8:bc:5c:b9:88:4e:aa:73:2b:2d:54:6c:85:1b:4f:
44:e3:c3:5e:71:9e:8b:a4:09:27:9f:cc:65:9a:9a:d8:b5:32:
34:ba:be:1c:8a:c2:26:31:b6:04:a4:a8:a6:0c:3a:18:6d:54:
4c:44:1e:b4:e1:35:18:a0:1e:1a:a3:ba:c7:9b:3f:8f:72:11:
81:fd:45:7f:66:99:97:93:9e:46:c0:82:d9:af:57:6c:15:7f:
a6:12:81:89:93:61:58:ed:58:7c:cc:ae:f6:09:3c:6a:fd:57:
27:b4:ae:cb:a4:b8:f0:39:3d:00:41:c9:26:8d:d1:34:32:b4:
80:49:c7:4a:8f:c5:3e:05:f0:0f:1c:87:7e:9c:4e:ad:b5:90:
0e:fa:d7:0c:b8:bd:fb:4c:25:53:8a:fc:98:8f:af:89:1a:dc:
b6:b9:98:7e:49:3b:9b:41:68:99:13:45:30:f2:77:11:80:a9:
ae:5a:55:2c:92:08:47:80:59:8f:75:f8:24:43:1f:8c:8b:76:
9c:35:94:ad:f9:d1:e2:c4:18:8d:8b:89:6a:46:37:e0:df:1d:
fc:62:a8:b1:ae:92:4c:0a:ca:4f:9a:6b:71:42:ae:ec:c4:d3:
05:c3:61:6f:6f:e0:4f:2d:0a:c8:3e:00:fc:26:c2:05:54:0f:
a7:4a:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org