Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/6UFo3X-INZLigl4Pm63QdfmDQLA.roa
File: 6UFo3X-INZLigl4Pm63QdfmDQLA.roa (raw, json)
Hash identifier: pH2377iRjXS5tGvEXiSPOBY7scaTuyht+UwlzvmWHTM=
Subject key identifier: E9:41:68:DD:7F:88:35:92:E2:82:5E:0F:9B:AD:D0:75:F9:83:40:B0
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 0184480FDD08F283375D7C213188419DC503
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/6UFo3X-INZLigl4Pm63QdfmDQLA.roa
Signing time: Sat 05 Nov 2022 13:51:49 +0000
ROA not before: Sat 05 Nov 2022 13:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59956
IP address blocks: 176.117.80.0/22 maxlen: 22
176.117.84.0/22 maxlen: 22
176.117.88.0/22 maxlen: 22
176.117.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:48:0f:dd:08:f2:83:37:5d:7c:21:31:88:41:9d:c5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Nov 5 13:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e94168dd7f883592e2825e0f9badd075f98340b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8f:03:30:23:1a:5a:b9:17:4f:b8:55:bd:b7:
74:f5:a5:2d:37:5f:4c:d3:4f:8d:8b:03:42:fa:df:
d0:62:9b:da:80:e0:9e:42:02:85:fa:87:2a:65:c9:
8b:b5:e6:55:8c:f6:4f:aa:f0:a2:79:28:86:07:52:
0c:a3:da:13:48:a3:a7:6b:55:31:92:c5:de:7a:d0:
81:1b:eb:74:21:76:e0:b0:da:f2:33:bc:57:06:9b:
e1:ea:74:be:95:61:e3:51:d0:49:e2:42:b7:e4:55:
4b:72:9e:d8:bf:e6:cf:be:ce:20:35:4f:f8:d3:3b:
e4:f4:4a:63:9e:21:be:80:09:7f:6c:24:32:8c:76:
7f:2f:49:c6:26:b5:4e:f9:42:b1:6a:61:10:1d:ff:
0c:26:18:8b:e7:1a:7c:b2:c4:b1:09:7a:30:58:8b:
17:e7:55:b0:23:8d:0d:7d:f5:29:3f:c4:3d:8f:a9:
ee:0b:8e:9a:21:f6:9a:dd:48:fc:07:cb:82:aa:8d:
65:ab:17:77:1e:af:96:0e:cf:6d:a6:af:ca:92:d6:
66:f4:e4:61:ee:98:40:3a:65:b4:26:01:1a:a8:7b:
22:98:e7:a4:10:ac:12:b4:7f:39:6a:f4:ac:18:d3:
c0:3e:2e:a8:a8:28:20:4b:70:4c:06:94:fc:ba:f9:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:68:DD:7F:88:35:92:E2:82:5E:0F:9B:AD:D0:75:F9:83:40:B0
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/6UFo3X-INZLigl4Pm63QdfmDQLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.80.0/20
Signature Algorithm: sha256WithRSAEncryption
46:2f:ff:c9:6c:1c:f6:90:c7:f8:b4:b9:67:e6:1b:1c:03:1e:
44:63:77:3b:1c:3d:b7:ea:bb:e6:8b:f8:9d:5c:fd:dd:66:6a:
b2:77:23:84:9b:c0:4a:23:f1:f4:22:1d:4f:a8:f6:94:14:1e:
1d:d4:70:37:09:16:71:c4:d2:4f:0f:82:8e:18:3c:35:86:51:
2c:f5:64:58:53:24:0f:a9:b9:eb:93:fd:5e:80:48:9e:69:23:
b3:8d:3e:70:6f:52:bb:7b:bf:bb:a6:63:38:4d:b3:73:88:55:
d3:1f:3f:ed:69:ed:ed:83:ef:6d:b3:dd:7e:09:83:92:c5:53:
7f:c6:ee:36:97:03:29:04:32:61:87:08:c4:cf:23:0d:76:5a:
f2:64:a8:5e:e8:e8:40:7d:b7:e5:65:2a:92:7b:b1:68:4b:7e:
a4:87:d0:38:be:07:5b:32:61:71:44:cd:1b:1e:5d:da:fb:b6:
96:73:73:e2:e7:7b:52:49:e6:88:44:de:cc:26:1d:ae:72:40:
e5:dc:31:5d:3f:2b:86:af:1d:82:2f:50:1e:44:bb:ec:87:eb:
38:a0:f5:b8:b8:58:d7:e0:77:13:a9:ba:2e:ee:1e:0c:1c:3d:
4d:bd:09:6a:05:34:1a:fe:38:a9:34:8f:af:d9:ad:3e:8f:9e:
05:3c:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-ams.rpki-client.org