Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/DnonB7LtRJxyu_2L5fE6WnrCOnw.roa
File: DnonB7LtRJxyu_2L5fE6WnrCOnw.roa (raw, json)
Hash identifier: DqPoqMpxzU/ipRNaQbbwhJvQawm5rcOiVuusJN8drac=
Subject key identifier: 0E:7A:27:07:B2:ED:44:9C:72:BB:FD:8B:E5:F1:3A:5A:7A:C2:3A:7C
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 07B39155
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/DnonB7LtRJxyu_2L5fE6WnrCOnw.roa
Signing time: Sat 01 Jan 2022 08:59:45 +0000
ROA not before: Sat 01 Jan 2022 08:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39384
IP address blocks: 176.221.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129208661 (0x7b39155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Jan 1 08:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e7a2707b2ed449c72bbfd8be5f13a5a7ac23a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:19:f9:8a:b8:55:46:e7:11:1b:bf:bb:7a:
54:0e:f8:a7:2d:23:f0:63:5a:6a:88:86:ac:c2:bd:
9f:37:f7:98:87:9f:26:10:23:43:af:3c:36:a5:10:
40:e1:47:d6:20:d6:e4:4c:79:e6:f4:7e:46:27:6e:
bb:af:fc:c1:3a:78:26:e7:c5:33:ef:14:02:1a:f7:
77:cb:98:f4:e5:ef:c4:19:61:e3:9c:b1:fd:57:19:
aa:f8:bd:81:13:82:e9:08:48:00:82:86:23:cf:29:
e6:24:c2:11:0b:04:52:10:c6:35:f5:0b:bb:41:bb:
7d:a4:58:af:28:d7:cb:be:7d:a5:e7:57:22:6d:b4:
b8:03:06:01:f6:bf:b2:8a:23:b3:3e:5f:44:e1:8e:
4e:9b:6a:13:3a:3a:51:32:95:8a:e0:b9:f7:bd:31:
34:3c:ab:31:be:67:f3:39:2b:1e:0c:44:01:98:73:
6c:d8:20:db:49:83:80:13:ce:df:1b:ca:bf:28:91:
b4:bd:84:14:36:74:62:05:f1:1a:e7:29:01:30:55:
e7:8b:9e:b7:62:95:8e:25:57:1a:a8:3a:e7:a3:0b:
58:79:af:47:ac:fe:05:9c:3d:23:be:17:ad:b4:34:
a5:3b:4b:16:f7:16:52:e1:bd:12:b0:ce:77:e3:4b:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7A:27:07:B2:ED:44:9C:72:BB:FD:8B:E5:F1:3A:5A:7A:C2:3A:7C
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/DnonB7LtRJxyu_2L5fE6WnrCOnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.39.0/24
Signature Algorithm: sha256WithRSAEncryption
14:89:1f:8d:89:e1:e0:2d:4f:be:da:cc:31:79:7e:d1:57:6a:
a3:e2:b1:da:d1:36:69:b8:87:99:41:cc:c4:6f:21:56:2f:29:
0e:04:f3:ab:ee:a5:eb:4c:de:3f:30:a6:0c:e9:c5:80:3a:44:
b0:26:a9:6a:c9:2d:e3:13:84:b0:47:c8:28:69:a1:83:34:b4:
1f:ea:06:f8:da:0a:f6:11:c0:ca:a1:ed:df:44:89:e6:53:ea:
0a:f5:b0:b1:02:30:34:20:aa:c3:65:f1:e3:7b:b4:48:7e:3b:
da:ba:7a:df:95:9f:4a:fa:40:24:e1:62:a2:21:56:75:d4:9f:
af:5b:7e:7a:c0:56:02:df:ab:ce:0a:db:94:74:50:3c:ff:17:
c2:a7:d5:d7:17:fc:c2:87:a8:4a:bd:f8:83:d5:9f:44:45:33:
e3:1c:b8:d0:5e:1d:d2:9b:21:b2:dc:33:7b:31:5d:50:9a:ef:
37:cc:68:5b:67:b7:40:bb:01:ef:1d:06:0c:39:bc:00:83:c5:
6c:df:03:22:ac:c4:16:40:78:de:7c:75:12:62:ae:e5:3e:ec:
34:e2:6c:61:92:08:88:9b:b5:7b:a7:44:36:34:de:67:86:3f:
e1:3f:d6:2d:90:a3:85:2f:4c:b3:8f:69:12:de:17:0e:5f:c0:
4a:1f:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org