Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/nQgfDdmfX7RhS-38bzacRsJZKtc.roa
File: nQgfDdmfX7RhS-38bzacRsJZKtc.roa (raw, json)
Hash identifier: GIqJnnfA4PU4tAVjNSLWjuhsbY1GBZ4pdSFyFx1I7VU=
Subject key identifier: 9D:08:1F:0D:D9:9F:5F:B4:61:4B:ED:FC:6F:36:9C:46:C2:59:2A:D7
Certificate issuer: /CN=d21c92b72678c6f87fd9bf8fba2be19fac064b58
Certificate serial: 01A4CE71
Authority key identifier: D2:1C:92:B7:26:78:C6:F8:7F:D9:BF:8F:BA:2B:E1:9F:AC:06:4B:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hyStyZ4xvh_2b-Puivhn6wGS1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/nQgfDdmfX7RhS-38bzacRsJZKtc.roa
Signing time: Wed 09 Mar 2022 10:19:03 +0000
ROA not before: Wed 09 Mar 2022 10:19:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49943
IP address blocks: 176.100.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27577969 (0x1a4ce71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21c92b72678c6f87fd9bf8fba2be19fac064b58
Validity
Not Before: Mar 9 10:19:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d081f0dd99f5fb4614bedfc6f369c46c2592ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:c0:3e:fc:00:dd:d1:29:81:fb:26:d5:4a:
f6:64:d9:3e:90:d5:49:d6:fc:c1:03:cf:9c:e3:46:
b9:19:50:50:ea:64:af:dd:fe:0e:6a:b4:c4:97:08:
a3:e5:4d:6e:8b:d1:92:3c:8c:26:61:b5:f2:56:d9:
6d:f9:66:da:66:46:18:e2:30:d9:a2:1f:21:b7:55:
c5:00:56:c7:6f:d1:ff:92:0e:48:b8:93:d5:f6:1d:
e1:e7:71:70:fc:24:8d:a0:bf:da:56:a2:55:c5:47:
b1:ae:65:2a:c1:82:18:9c:48:09:2e:48:e7:28:fc:
9a:d1:c8:4c:44:5b:ce:11:86:3d:03:1c:1c:36:bd:
30:9b:53:dc:4e:4a:df:cd:c3:87:d7:d2:c2:db:8a:
ee:3b:ec:4e:70:2d:4b:f9:5f:1a:29:b8:f9:89:6f:
9d:5a:b0:64:d5:03:c3:9c:da:81:00:95:c6:46:e6:
4e:05:1e:df:4f:f5:b6:c9:da:74:c8:35:a4:f6:65:
0c:4c:9f:39:80:e4:ff:fc:2b:fc:79:28:d4:c4:71:
70:e8:f9:fa:ba:ad:92:d9:7f:f1:49:38:db:2c:2e:
63:de:0f:15:88:67:c2:be:4f:ee:56:df:ba:59:1b:
6f:96:00:07:e8:cc:e2:95:55:fd:e4:56:cd:16:2d:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:1F:0D:D9:9F:5F:B4:61:4B:ED:FC:6F:36:9C:46:C2:59:2A:D7
X509v3 Authority Key Identifier:
keyid:D2:1C:92:B7:26:78:C6:F8:7F:D9:BF:8F:BA:2B:E1:9F:AC:06:4B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hyStyZ4xvh_2b-Puivhn6wGS1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/nQgfDdmfX7RhS-38bzacRsJZKtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/0hyStyZ4xvh_2b-Puivhn6wGS1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.42.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f2:58:50:3a:c5:73:60:e3:a9:c3:f2:d9:9d:f4:39:65:37:
62:a4:41:07:6e:aa:d5:ef:56:2f:38:21:74:1d:52:1a:70:2f:
f4:db:56:09:e5:18:ab:a0:a3:fa:34:96:8d:2c:fa:4c:76:eb:
45:ab:53:df:6d:ec:6f:50:b7:8a:02:ec:b4:aa:51:d3:67:08:
6a:9a:2e:6e:b6:f3:04:68:09:5b:d4:9f:1c:a5:4b:2c:0f:9f:
18:dd:a9:c3:fc:9b:1f:d7:1c:a7:b1:27:33:79:30:2d:a0:b0:
db:26:1c:eb:e7:75:ad:6a:ed:9c:7a:e9:fa:fa:48:4a:29:d4:
2a:80:19:8d:bf:75:ee:f7:eb:08:92:12:3e:87:e3:a5:05:ae:
13:2d:c8:74:89:fd:06:70:cf:73:d0:72:78:f7:74:39:90:70:
b5:74:e4:c6:ad:99:dc:ec:e9:a1:5c:07:13:98:24:99:26:5e:
48:87:55:e7:d3:43:cd:53:0f:3c:40:ed:db:8f:82:e4:05:a8:
a2:dd:51:fa:17:dd:7d:05:99:a1:1e:5e:36:cc:a4:48:5d:35:
28:4c:2d:4d:ea:c1:c7:99:ae:ac:8c:a3:52:6e:f8:12:f1:2f:
a4:a1:c5:19:54:4b:8a:02:f7:7e:2b:d1:8f:6a:a3:f5:53:f8:
8c:21:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:36 2023 by rpki-client on console-fra.rpki-client.org