Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/y_OShmLaYEpWVlUHv86YZdSEMnc.roa
File: y_OShmLaYEpWVlUHv86YZdSEMnc.roa (raw, json)
Hash identifier: JrA2jYT+6ubPZY9RpbdQ4ISCdyPyu+oyPGFRlGWsOrs=
Subject key identifier: CB:F3:92:86:62:DA:60:4A:56:56:55:07:BF:CE:98:65:D4:84:32:77
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 1106A5AB
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/y_OShmLaYEpWVlUHv86YZdSEMnc.roa
Signing time: Sat 01 Jan 2022 16:06:05 +0000
ROA not before: Sat 01 Jan 2022 16:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198360
IP address blocks: 176.103.217.0/24 maxlen: 24
176.103.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285648299 (0x1106a5ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Jan 1 16:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbf3928662da604a56565507bfce9865d4843277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:4b:57:19:cf:be:da:27:75:dc:89:6f:28:
4d:e1:c4:a6:8d:2e:15:38:f3:5a:b5:03:a3:b3:1f:
39:a4:2a:b8:53:3b:8d:80:68:55:25:f5:4c:3b:0e:
06:73:a1:83:3e:4b:95:51:7d:ad:2d:d8:ac:d9:3e:
ba:9c:b3:b2:1f:8a:2c:a9:8a:db:60:82:ee:e4:18:
06:41:69:d2:25:24:27:7a:3e:55:4f:09:99:c7:95:
31:35:ae:bd:ef:89:ea:79:dc:4b:2e:7a:84:f6:4a:
49:fb:4a:45:66:aa:7b:e2:25:0a:4e:a7:6a:cf:4e:
14:34:ea:cc:a4:e7:cf:78:eb:37:62:18:73:c0:8b:
12:ba:e9:4c:95:2c:60:ef:61:00:72:b2:ba:97:3f:
d8:c2:3d:b3:25:7d:85:6d:c8:1f:62:dd:03:e1:6b:
8d:d4:24:33:66:a2:d3:b5:f5:53:f1:7e:19:fc:83:
ba:ae:df:a3:0d:ca:58:bf:61:99:de:b5:97:86:e6:
c3:e8:30:0c:03:8b:6c:13:3a:ce:15:e9:5e:0b:7a:
2e:4e:cf:76:5b:46:3e:a8:be:64:4b:30:cc:83:73:
35:2c:0a:5f:58:ad:0f:60:23:fe:ac:84:f3:64:a9:
1f:fa:8c:ec:1b:df:d8:30:04:f6:b1:81:c9:4b:05:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:92:86:62:DA:60:4A:56:56:55:07:BF:CE:98:65:D4:84:32:77
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/y_OShmLaYEpWVlUHv86YZdSEMnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.216.0/23
Signature Algorithm: sha256WithRSAEncryption
69:d0:ef:ef:5f:2b:da:47:46:09:a6:cf:ac:1d:d1:51:cf:a3:
8b:c6:09:c5:a4:0b:8f:0a:bf:77:66:5c:9d:fe:37:05:04:e5:
92:b3:e2:79:71:34:57:a8:d9:26:74:71:22:4e:d8:04:f9:fd:
36:cc:74:04:7f:ce:a3:90:5f:44:e5:1f:65:28:a8:29:f7:6c:
ba:23:29:fb:1d:34:2d:0d:58:a9:7b:88:57:51:15:6a:98:0c:
ed:92:94:36:a0:06:9b:72:04:6c:96:2d:3a:56:e0:2b:33:b2:
fa:c8:ce:60:85:54:5e:24:5d:2d:c6:6d:a8:5c:f5:0c:ba:1f:
dd:ef:15:dc:b8:4f:48:a5:dd:d7:c6:d5:be:ac:7e:12:23:cc:
fc:00:04:65:85:89:07:50:2f:c6:2a:a1:30:b2:12:18:a6:58:
5d:88:34:1a:85:30:83:f3:16:d8:67:a2:fa:e5:3c:2b:25:44:
ef:bf:64:43:b6:b5:11:d2:c4:95:f5:df:55:a0:c3:36:a4:c6:
ef:f2:11:58:09:32:8a:32:5a:b5:68:f1:da:01:ad:92:f8:14:
8a:fe:eb:a1:a2:33:71:b5:a4:b0:75:2b:b5:43:0f:b9:1e:22:
2a:43:57:92:e7:d7:2b:a8:a7:ab:6f:49:aa:db:98:f5:d0:c3:
0c:7c:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:40 2024 by rpki-client on console-ams.rpki-client.org