Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/1-yalGC0l52y4oh2z-TsXzo8nrJA.roa
File: 1-yalGC0l52y4oh2z-TsXzo8nrJA.roa (raw, json)
Hash identifier: jcl4TvPrwcvjrKrxnciXzYe9ZVunC5eclk4GgKnlo5k=
Subject key identifier: FB:26:A5:18:2D:25:E7:6C:B8:A2:1D:B3:F9:3B:17:CE:8F:27:AC:90
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 039AE8C5
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/1-yalGC0l52y4oh2z-TsXzo8nrJA.roa
Signing time: Sat 01 Jan 2022 13:58:24 +0000
ROA not before: Sat 01 Jan 2022 13:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39422
IP address blocks: 176.108.232.0/21 maxlen: 21
176.108.232.0/22 maxlen: 22
176.108.236.0/22 maxlen: 22
176.108.236.0/24 maxlen: 24
195.182.203.0/24 maxlen: 24
195.182.202.0/24 maxlen: 24
195.182.202.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60483781 (0x39ae8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Jan 1 13:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb26a5182d25e76cb8a21db3f93b17ce8f27ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:8a:c4:23:14:18:b9:8c:31:23:9e:c6:05:
0b:32:de:e8:55:1d:83:36:d1:39:e8:11:9b:a8:6a:
4a:27:d5:18:aa:07:be:ce:20:5a:69:b8:39:bf:c3:
87:c7:6c:eb:9e:fd:f7:06:05:1a:47:a5:fd:26:1d:
89:2b:37:c2:7a:4d:29:9c:b0:02:03:bd:a7:4a:11:
ed:ef:1a:fd:28:43:d0:36:c8:88:25:ed:60:51:13:
1b:03:37:77:1a:54:14:69:13:6d:cd:68:b1:09:96:
f9:48:17:d6:25:ff:a2:8c:5e:6e:76:1e:da:5d:c5:
9f:46:d9:ba:3d:bd:b6:b7:88:36:b9:94:54:53:25:
83:5c:c2:45:ff:28:84:67:26:bb:6b:21:72:f5:8c:
bf:c8:c6:e4:f1:25:28:68:d4:69:a3:05:e5:fe:73:
3a:8d:ba:2b:f6:5d:54:5b:d9:dc:72:f2:2e:71:97:
29:60:83:04:90:09:a1:81:71:51:03:77:59:69:97:
61:20:e4:75:79:49:ef:67:08:bb:6d:72:f6:8b:88:
48:14:67:d1:cb:08:77:25:be:f7:8d:92:32:8f:76:
9e:39:35:d5:e5:cb:06:f7:e2:9a:64:3e:0b:ed:3c:
2d:c6:81:f2:b4:8a:ed:c7:d6:f9:d8:be:e1:1f:ac:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:A5:18:2D:25:E7:6C:B8:A2:1D:B3:F9:3B:17:CE:8F:27:AC:90
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/1-yalGC0l52y4oh2z-TsXzo8nrJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.232.0/21
195.182.202.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:dd:ac:fc:8e:28:5c:7e:e9:87:9a:f7:ba:8d:cc:1f:4f:30:
9c:6a:34:4c:61:b9:fb:c3:37:45:fc:bd:fb:5a:20:f7:70:5f:
f6:d7:16:c1:78:9a:7e:e3:74:08:bd:14:e0:08:3a:ed:53:00:
28:ab:61:dd:9a:da:4e:a5:38:f0:32:b0:21:95:37:44:86:4c:
50:b6:e8:be:e6:dd:44:02:da:6f:29:34:4a:09:41:d6:c3:41:
5c:b8:88:d4:00:73:fa:67:09:e4:69:f8:e7:14:db:dd:a5:db:
09:f7:90:ef:45:1b:3f:76:84:9a:88:4b:c8:5c:36:a5:e9:1c:
50:f9:4f:60:57:f7:1b:68:65:c0:df:fc:7c:99:14:05:a5:13:
60:b6:8f:ae:b1:6a:7e:6f:1a:22:92:4a:0f:e4:c2:ef:cb:6f:
06:c9:fd:f5:d0:d9:40:77:83:1f:bc:cb:4c:5a:c3:74:ad:74:
24:20:26:26:59:aa:69:ac:a6:e6:8d:89:cc:dd:8b:bc:34:a7:
6a:dd:db:89:5b:c8:ef:f0:30:f7:bb:d6:f7:29:52:09:c8:2f:
26:66:88:ff:4b:d9:94:4b:b9:c9:2c:af:2a:58:6e:09:04:11:
8d:7f:b3:a4:5c:6c:ec:11:8b:c1:2e:39:a3:d5:dd:09:91:e4:
7f:fa:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:11 2023 by rpki-client on console-fra.rpki-client.org