Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/oQXQj9jK1lladHDMsYwbyyxko9s.roa
File: oQXQj9jK1lladHDMsYwbyyxko9s.roa (raw, json)
Hash identifier: FCaF4JDOo4J89ZYXJBwy6O28kQOT2V4XLPK5h40p6zc=
Subject key identifier: A1:05:D0:8F:D8:CA:D6:59:5A:74:70:CC:B1:8C:1B:CB:2C:64:A3:DB
Certificate issuer: /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial: AD463B
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/oQXQj9jK1lladHDMsYwbyyxko9s.roa
Signing time: Fri 07 Jan 2022 13:43:32 +0000
ROA not before: Fri 07 Jan 2022 13:43:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207586
IP address blocks: 176.126.116.0/24 maxlen: 24
2a11:d540:530::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11355707 (0xad463b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
Validity
Not Before: Jan 7 13:43:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a105d08fd8cad6595a7470ccb18c1bcb2c64a3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:5e:23:3d:b3:f1:ef:c0:f4:94:51:0c:2c:
6f:91:4c:2d:98:9a:c7:52:d4:79:ff:63:43:4f:a8:
6d:92:7c:b1:f2:fe:f4:be:ef:cf:86:60:aa:99:2d:
4b:4b:7b:8a:42:fd:16:d8:a9:e3:78:1f:0f:10:f5:
84:c4:da:9d:11:6a:7d:e5:75:44:cc:07:49:f4:16:
b3:dd:ff:89:c2:d6:f7:9e:8c:44:79:d8:18:7c:cd:
65:fc:a2:04:3e:fa:cc:12:d6:e2:c5:44:e4:52:bf:
15:8e:36:76:c5:77:95:a6:02:ce:7f:8d:e7:89:e1:
f9:9d:e0:7d:f1:9d:d0:59:7f:42:72:bc:5e:25:05:
fc:ab:39:4f:21:4d:e5:b2:52:04:98:c4:ac:6f:44:
d4:7b:cd:39:0b:79:4a:e4:37:5a:e3:20:63:41:f8:
e3:60:ff:5a:96:b2:b9:fe:c3:ea:45:64:ff:4b:3b:
bb:d6:4e:89:f0:25:b1:be:83:74:6d:c1:ba:df:6e:
9b:1b:8c:e1:84:e0:38:7c:cc:b4:27:fe:50:27:7b:
14:e1:c3:85:b4:5c:5f:04:73:c0:41:1f:16:dd:b3:
e7:11:3d:0e:47:d3:22:da:4d:33:0c:7e:01:38:95:
bf:f2:59:90:66:7e:97:ab:61:8d:e8:7c:f1:9a:13:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:D0:8F:D8:CA:D6:59:5A:74:70:CC:B1:8C:1B:CB:2C:64:A3:DB
X509v3 Authority Key Identifier:
keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/oQXQj9jK1lladHDMsYwbyyxko9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.116.0/24
IPv6:
2a11:d540:530::/44
Signature Algorithm: sha256WithRSAEncryption
56:ec:a6:ce:6a:58:db:ad:91:b1:59:1d:5e:d7:ec:4d:af:06:
29:75:e9:74:59:e8:ad:a6:dc:94:90:7a:02:96:15:50:e5:71:
85:38:f0:0c:a6:a0:c6:b2:c9:95:b7:0f:0b:80:d8:3b:ca:56:
13:6c:3f:e9:3f:ba:6a:de:a7:0d:f1:85:72:28:51:32:13:95:
76:c5:37:bf:33:8b:d5:70:92:28:3c:9e:4b:90:2f:85:2d:5d:
1e:fe:92:65:31:46:46:c5:1a:6c:b5:29:ca:2d:80:cf:69:c3:
86:d9:60:8d:8a:64:c8:0d:6b:69:5b:be:be:d6:81:c6:b3:04:
71:d2:42:dc:18:ca:52:5a:91:7c:36:06:f5:16:21:82:45:f0:
d6:f0:26:49:9b:99:65:0f:23:be:1b:65:d9:86:0c:58:07:42:
e8:02:e1:e7:bd:90:02:24:d3:46:32:c3:76:d5:6c:2c:73:b9:
de:a0:46:92:e4:21:a6:9f:de:16:68:6d:c2:61:8c:80:e6:f1:
2f:d2:c8:ec:95:ed:d4:07:cf:98:8c:62:2d:f5:75:53:71:ee:
ad:40:4b:71:2b:d2:4b:79:f1:d2:77:6a:62:1c:21:db:18:3c:
da:70:9d:78:30:8b:f2:12:30:81:c6:f3:81:4e:57:8e:07:9a:
13:b4:60:40
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEAK1GOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NmUxYWJhNjAwY2RlNWVjMzE4MzE5YjE1NTk0YjY4YWI5NmM5NTZjMB4XDTIyMDEw
NzEzNDMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTEwNWQwOGZkOGNh
ZDY1OTVhNzQ3MGNjYjE4YzFiY2IyYzY0YTNkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKxZXiM9s/HvwPSUUQwsb5FMLZiax1LUef9jQ0+obZJ8sfL+
9L7vz4ZgqpktS0t7ikL9Ftip43gfDxD1hMTanRFqfeV1RMwHSfQWs93/icLW956M
RHnYGHzNZfyiBD76zBLW4sVE5FK/FY42dsV3laYCzn+N54nh+Z3gffGd0Fl/QnK8
XiUF/Ks5TyFN5bJSBJjErG9E1HvNOQt5SuQ3WuMgY0H442D/Wpayuf7D6kVk/0s7
u9ZOifAlsb6DdG3But9umxuM4YTgOHzMtCf+UCd7FOHDhbRcXwRzwEEfFt2z5xE9
DkfTItpNMwx+ATiVv/JZkGZ+l6thjeh88ZoT8bUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBShBdCP2MrWWVp0cMyxjBvLLGSj2zAfBgNVHSMEGDAWgBSG4aumAM3l7DGD
GbFVlLaKuWyVbDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2h1R3JwZ0RONWV3eGd4bXhWWlMyaXJsc2xXdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvZTY4NDVkLTFjM2MtNDhkNi1hNmIyLWQ2MDVjNTNhMzViZS8x
L29RWFFqOWpLMWxsYWRIRE1zWXdieXl4a285cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
ZTY4NDVkLTFjM2MtNDhkNi1hNmIyLWQ2MDVjNTNhMzViZS8xL2h1R3JwZ0RONWV3
eGd4bXhWWlMyaXJsc2xXdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALB+dDAPBAIAAjAJAwcEKhHVQAUw
MA0GCSqGSIb3DQEBCwUAA4IBAQBW7KbOaljbrZGxWR1e1+xNrwYpdel0WeitptyU
kHoClhVQ5XGFOPAMpqDGssmVtw8LgNg7ylYTbD/pP7pq3qcN8YVyKFEyE5V2xTe/
M4vVcJIoPJ5LkC+FLV0e/pJlMUZGxRpstSnKLYDPacOG2WCNimTIDWtpW76+1oHG
swRx0kLcGMpSWpF8Ngb1FiGCRfDW8CZJm5llDyO+G2XZhgxYB0LoAuHnvZACJNNG
MsN21Wwsc7neoEaS5CGmn94WaG3CYYyA5vEv0sjsle3UB8+YjGIt9XVTce6tQEtx
K9JLefHSd2piHCHbGDzacJ14MIvyEjCBxvOBTleOB5oTtGBA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:25 2024 by rpki-client on console-fra.rpki-client.org