Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/dMw_y7f6PdTLPQa8GxSlCO-O9a8.roa
File: dMw_y7f6PdTLPQa8GxSlCO-O9a8.roa (raw, json)
Hash identifier: 0RdLEqJ4LPogI/EVnY/ABboFEqVhrUv9K+s8SHJfzoE=
Subject key identifier: 74:CC:3F:CB:B7:FA:3D:D4:CB:3D:06:BC:1B:14:A5:08:EF:8E:F5:AF
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 0C931B28
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/dMw_y7f6PdTLPQa8GxSlCO-O9a8.roa
Signing time: Sat 01 Jan 2022 05:54:10 +0000
ROA not before: Sat 01 Jan 2022 05:54:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15836
IP address blocks: 176.123.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210967336 (0xc931b28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Jan 1 05:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74cc3fcbb7fa3dd4cb3d06bc1b14a508ef8ef5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:35:28:e6:77:7b:9f:b8:53:88:1d:29:fb:
10:ac:58:63:c6:42:2d:8c:3e:a1:22:52:fe:a0:c8:
65:56:a9:7f:ca:c5:e6:37:c4:2a:57:1a:b8:75:1a:
cf:f8:bb:20:98:7d:c5:d6:d3:f1:45:6b:f3:2f:81:
ee:b9:4a:55:c9:84:33:78:39:65:a0:f5:58:af:ca:
cc:4c:ac:8b:e1:ef:ed:c1:cd:c5:b0:d7:5b:15:c1:
ab:92:87:b3:aa:32:71:e3:1e:01:79:53:fe:26:a2:
d7:40:69:89:32:55:55:70:d4:6b:d3:56:1d:3b:fa:
65:40:98:33:bd:f2:c0:8a:d0:1d:10:e2:a6:26:27:
d6:a7:29:79:d2:ad:a6:91:c1:1d:c7:d1:78:43:7e:
27:4a:e2:f8:65:5f:20:84:49:fe:83:d7:00:bc:ed:
0d:71:30:77:57:1f:44:b2:fe:4b:2a:89:37:d1:7d:
08:ef:5a:64:e3:dc:30:00:3d:e8:dd:1b:15:23:cd:
96:5c:14:41:d9:de:c6:f5:73:63:d2:e8:fb:b7:89:
cd:bc:1c:8f:2f:5e:fe:54:32:0c:2e:28:73:7f:c5:
e5:d1:03:2e:77:50:9c:2a:b5:ba:1f:d3:b5:0b:24:
bc:24:38:8b:bd:e4:7a:5d:74:cb:84:12:0f:23:0c:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CC:3F:CB:B7:FA:3D:D4:CB:3D:06:BC:1B:14:A5:08:EF:8E:F5:AF
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/dMw_y7f6PdTLPQa8GxSlCO-O9a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.0.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8e:d7:fb:1b:72:65:4f:18:82:e2:34:d2:c1:b8:9c:7f:96:
1b:45:71:31:bb:34:e2:a7:63:c2:5c:77:21:4e:13:da:10:1e:
4d:fd:f9:9c:78:63:3d:4b:d2:0e:97:53:5b:a0:e3:ce:f4:63:
cb:e4:dc:45:cc:06:20:be:83:47:21:ec:57:0c:e7:6f:3b:45:
93:89:88:d7:3a:99:4f:f2:0c:41:61:e1:dd:47:54:c6:20:81:
6e:af:24:1a:4e:cb:69:29:9d:11:d0:18:71:09:d9:93:2f:44:
69:9b:5b:e3:53:18:0c:27:fd:40:cc:36:c9:6f:9b:13:b8:22:
07:c7:78:a0:3c:a6:38:0a:57:fa:ba:21:b5:ff:d9:11:75:ca:
b2:87:e4:93:ec:7a:17:0d:61:97:0b:43:4c:e0:3c:9b:01:88:
d7:34:27:d7:1e:f4:a7:cb:ad:d1:ea:d8:99:4b:4f:58:cf:8d:
b2:cb:8a:00:f5:66:e6:81:02:a1:e1:c7:fe:08:d9:ae:a3:7f:
eb:ed:b0:7b:75:9e:32:1d:aa:66:8a:5f:57:7d:6b:12:40:af:
b6:e0:3d:34:45:77:fe:28:60:cc:90:17:2e:c7:78:e4:0e:87:
80:a6:e7:68:10:6b:af:ae:bc:1a:f7:4f:d8:0f:76:cf:18:1c:
58:38:7f:aa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDJMbKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZmQyNmFkNmY5MWJhNDQ3MjgxNGJhZTQ4NGE4ZGYxZjYzNGMzMzQxMB4XDTIyMDEw
MTA1NTQxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzRjYzNmY2JiN2Zh
M2RkNGNiM2QwNmJjMWIxNGE1MDhlZjhlZjVhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVxNSjmd3ufuFOIHSn7EKxYY8ZCLYw+oSJS/qDIZVapf8rF
5jfEKlcauHUaz/i7IJh9xdbT8UVr8y+B7rlKVcmEM3g5ZaD1WK/KzEysi+Hv7cHN
xbDXWxXBq5KHs6oyceMeAXlT/iai10BpiTJVVXDUa9NWHTv6ZUCYM73ywIrQHRDi
piYn1qcpedKtppHBHcfReEN+J0ri+GVfIIRJ/oPXALztDXEwd1cfRLL+SyqJN9F9
CO9aZOPcMAA96N0bFSPNllwUQdnexvVzY9Lo+7eJzbwcjy9e/lQyDC4oc3/F5dED
LndQnCq1uh/TtQskvCQ4i73kel10y4QSDyMMIM0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR0zD/Lt/o91Ms9BrwbFKUI7471rzAfBgNVHSMEGDAWgBSP0mrW+RukRygU
uuSEqN8fY0wzQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2o5SnExdmticEVjb0ZMcmtoS2pmSDJOTU0wRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvY2RhZDhmLWI5MTktNDVkMS1hZjE4LTYzNzQyZDE5YTAxMi8x
L2RNd195N2Y2UGRUTFBRYThHeFNsQ08tTzlhOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
Y2RhZDhmLWI5MTktNDVkMS1hZjE4LTYzNzQyZDE5YTAxMi8xL2o5SnExdmticEVj
b0ZMcmtoS2pmSDJOTU0wRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB7ADANBgkqhkiG9w0BAQsFAAOC
AQEAhI7X+xtyZU8YguI00sG4nH+WG0VxMbs04qdjwlx3IU4T2hAeTf35nHhjPUvS
DpdTW6DjzvRjy+TcRcwGIL6DRyHsVwznbztFk4mI1zqZT/IMQWHh3UdUxiCBbq8k
Gk7LaSmdEdAYcQnZky9EaZtb41MYDCf9QMw2yW+bE7giB8d4oDymOApX+rohtf/Z
EXXKsofkk+x6Fw1hlwtDTOA8mwGI1zQn1x70p8ut0erYmUtPWM+NssuKAPVm5oEC
oeHH/gjZrqN/6+2we3WeMh2qZopfV31rEkCvtuA9NEV3/ihgzJAXLsd45A6HgKbn
aBBrr668GvdP2A92zxgcWDh/qg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:44 2024 by rpki-client on console-fra.rpki-client.org