Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/CIZPv7DtaRJbPX7eJKPeIMmE9sE.roa
File: CIZPv7DtaRJbPX7eJKPeIMmE9sE.roa (raw, json)
Hash identifier: /P+2W0NFQAgk8DsBgOtvpdQWCg/NGycKjxOEAAt1skk=
Subject key identifier: 08:86:4F:BF:B0:ED:69:12:5B:3D:7E:DE:24:A3:DE:20:C9:84:F6:C1
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 016D5E
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/CIZPv7DtaRJbPX7eJKPeIMmE9sE.roa
Signing time: Wed 30 Mar 2022 12:19:03 +0000
ROA not before: Wed 30 Mar 2022 12:19:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56361
IP address blocks: 46.175.120.0/21 maxlen: 21
31.41.184.0/21 maxlen: 21
176.98.168.0/21 maxlen: 21
176.118.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93534 (0x16d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Mar 30 12:19:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08864fbfb0ed69125b3d7ede24a3de20c984f6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:f3:a7:45:03:cd:47:99:b4:eb:7d:70:d5:
43:04:b8:3d:b3:b5:9e:7d:25:96:17:c2:ad:24:b2:
35:ee:d7:f5:39:c7:fd:21:41:ae:3f:a7:9b:48:4b:
ba:30:b1:59:fc:7b:2f:54:41:2f:55:95:bf:fe:e3:
0a:34:74:3e:f9:b5:8d:6d:e0:e1:20:15:75:05:d3:
e3:93:79:e9:02:df:81:22:15:9b:b5:88:da:70:d7:
a2:dd:2e:44:c5:17:87:05:e0:93:2b:6f:d4:b7:e8:
2e:9c:2e:06:4a:8a:77:6c:f4:bf:eb:2b:32:c0:be:
4c:86:de:10:67:81:0f:ec:c9:d3:d9:1d:d9:7e:13:
87:ac:b5:53:95:f5:88:43:66:4a:71:6e:86:07:62:
60:ea:b4:bb:68:c2:bf:52:a9:13:1f:01:c6:6c:8d:
a5:82:7d:3f:8e:59:c4:27:ed:3e:98:80:4a:85:c2:
57:cc:a1:44:ca:05:11:70:55:d3:3a:62:85:7b:7b:
c5:1f:83:14:2e:be:b7:13:da:f7:2a:36:8d:30:a0:
b7:89:ae:e5:a1:00:5c:b7:ec:4a:bc:93:ed:81:73:
31:93:4b:2d:e3:da:fd:cc:81:68:fa:08:bd:a5:af:
c5:e5:9c:7c:99:98:6a:51:a6:f3:9b:99:fb:03:92:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:4F:BF:B0:ED:69:12:5B:3D:7E:DE:24:A3:DE:20:C9:84:F6:C1
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/CIZPv7DtaRJbPX7eJKPeIMmE9sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.184.0/21
46.175.120.0/21
176.98.168.0/21
176.118.128.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:00:88:8e:93:0f:97:a2:d9:cf:96:40:a1:77:7a:d9:1e:0e:
e7:80:af:a0:d7:70:d9:da:1c:8c:ed:c8:e1:a5:2c:90:80:a4:
8f:b3:8e:b8:3f:6c:f6:99:f0:52:fd:86:2f:c7:aa:dd:af:16:
b9:41:b4:23:d0:cf:75:a6:1a:f6:bb:0a:57:f1:46:8c:86:8d:
12:0a:fa:36:e6:97:ee:a6:44:00:e0:55:84:f2:b4:07:4a:14:
71:c1:c0:8f:fa:12:46:ca:2a:14:11:11:60:2b:39:81:27:41:
4f:af:50:47:14:1b:45:00:fe:03:e1:6d:65:57:b1:c2:0e:e5:
38:d1:54:34:31:17:a6:63:3f:01:f1:80:23:79:d7:78:a3:5d:
13:cd:40:1e:0b:01:90:54:43:ef:18:29:8d:75:19:15:78:c3:
14:06:87:2c:4d:85:eb:a6:f7:7c:a0:d1:49:ac:72:86:d7:cc:
ee:7b:c8:09:84:29:a6:2a:2b:47:7a:4d:05:87:17:ab:29:0c:
ee:f6:25:d4:e8:cd:98:11:d2:e7:06:09:d9:9e:b1:4b:8c:c5:
88:c7:34:66:91:07:4e:6c:14:c4:77:6c:6e:90:3c:5b:9e:69:
a2:1c:12:cc:55:92:13:36:55:07:1f:ce:3d:b1:2d:a7:db:e6:
3e:76:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:47 2024 by rpki-client on console-ams.rpki-client.org