Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Xso1oKIE8P96BLwcgjGdff-Pj8I.roa
File: Xso1oKIE8P96BLwcgjGdff-Pj8I.roa (raw, json)
Hash identifier: 8sfbiSTNtTvkdOSGlUx5pXVLIRIHBk/lCsZaz2lnoLc=
Subject key identifier: 5E:CA:35:A0:A2:04:F0:FF:7A:04:BC:1C:82:31:9D:7D:FF:8F:8F:C2
Certificate issuer: /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial: 337F1F00
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Xso1oKIE8P96BLwcgjGdff-Pj8I.roa
Signing time: Sat 01 Jan 2022 06:59:45 +0000
ROA not before: Sat 01 Jan 2022 06:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56995
IP address blocks: 176.58.64.0/20 maxlen: 20
176.58.64.0/24 maxlen: 24
176.58.66.0/23 maxlen: 23
185.6.16.0/22 maxlen: 22
176.58.68.0/22 maxlen: 22
176.58.76.0/22 maxlen: 22
176.58.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863969024 (0x337f1f00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Validity
Not Before: Jan 1 06:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eca35a0a204f0ff7a04bc1c82319d7dff8f8fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:99:d7:05:e4:41:ae:c9:f1:77:33:8a:88:56:
a5:6e:22:78:1c:aa:e6:2a:e6:67:74:36:92:9f:35:
09:ea:bf:02:d3:d9:8d:87:06:9c:05:b6:ab:90:b0:
17:e0:04:00:45:ac:39:00:c0:35:a0:1e:33:c1:50:
3c:75:f2:54:3a:27:b8:30:af:75:4a:e6:6b:19:74:
97:ae:86:b7:37:df:f6:d3:6b:36:2b:3b:a1:39:ec:
92:17:e8:2c:81:a1:43:a7:6c:ea:39:fe:ba:ab:df:
25:54:8e:67:50:dd:59:5d:15:72:a7:7d:bb:86:f7:
ec:96:5b:c3:b9:a8:b3:52:6b:92:6f:55:2b:bd:24:
f7:62:dd:6c:d3:24:63:b7:95:ba:6c:22:ce:de:1c:
d5:a6:aa:c4:ec:75:2d:86:c7:14:d4:0b:a9:63:f9:
ef:6e:e4:7d:1f:f3:da:d0:24:9f:98:c3:89:c9:5e:
a8:94:ff:19:0e:ae:ac:9f:9c:20:8f:0c:48:86:bf:
1f:fa:9e:8b:8d:2d:a2:d7:fe:8b:73:51:ed:bb:39:
2c:12:a2:f8:56:26:64:f7:62:97:8f:53:70:40:03:
2c:06:4d:37:35:67:f0:0d:75:b3:dd:9a:a6:f9:fe:
91:c6:78:29:7e:fb:36:b2:92:a8:29:67:1c:82:4d:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:35:A0:A2:04:F0:FF:7A:04:BC:1C:82:31:9D:7D:FF:8F:8F:C2
X509v3 Authority Key Identifier:
keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Xso1oKIE8P96BLwcgjGdff-Pj8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.64.0/20
185.6.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:11:67:ef:3e:78:60:b4:97:90:b1:94:83:3e:fe:3c:55:b6:
06:fd:98:86:b9:f8:ef:6f:8e:8d:8e:7a:e7:e5:d6:60:d9:d5:
bb:8a:7a:d3:9c:4d:cd:19:4f:36:c5:33:a5:2f:97:27:98:6f:
2c:56:84:39:19:5f:a3:9b:0b:f1:ff:08:45:48:aa:72:23:a8:
db:4b:2b:07:85:08:83:bb:30:1a:fc:5d:e9:4c:41:85:3c:c3:
86:71:4e:f3:b1:1a:04:2e:bd:97:c7:56:23:7e:51:8c:cf:1d:
58:5c:f1:e5:b4:6a:20:77:58:f6:7e:98:da:af:df:9c:20:09:
83:e4:aa:e8:ce:c3:a4:8b:cb:a7:d6:e2:51:18:d1:c1:f6:4f:
b5:83:7a:27:11:87:16:22:ea:df:39:14:6a:00:47:99:09:88:
0f:e0:e3:1c:b5:99:65:86:70:0d:be:81:03:6d:77:3c:10:7a:
c0:49:47:8d:ac:4d:9e:96:0e:f9:80:ed:3c:17:a4:ab:9b:b1:
c4:04:d8:b6:ef:0b:1a:28:9c:e4:72:59:14:45:d2:83:f2:03:
9b:27:6d:6b:0d:e7:e6:01:2e:e8:67:69:90:80:61:1b:c5:3c:
c4:7e:f9:fc:86:49:f7:12:42:0a:31:0c:98:67:8e:24:b6:88:
0c:db:43:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:02 2024 by rpki-client on console-fra.rpki-client.org