Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/03V42f_JlnfIyDzqPzWceLvbgrE.roa
File: 03V42f_JlnfIyDzqPzWceLvbgrE.roa (raw, json)
Hash identifier: fgUrU1W/0YRukki1uGnt/J8gwbgZt86Xzj3VR690CoI=
Subject key identifier: D3:75:78:D9:FF:C9:96:77:C8:C8:3C:EA:3F:35:9C:78:BB:DB:82:B1
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1BA3E7B7
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/03V42f_JlnfIyDzqPzWceLvbgrE.roa
Signing time: Sat 01 Jan 2022 05:03:45 +0000
ROA not before: Sat 01 Jan 2022 05:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58065
IP address blocks: 176.103.122.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463726519 (0x1ba3e7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d37578d9ffc99677c8c83cea3f359c78bbdb82b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:61:c1:ae:69:1d:8a:4f:73:1d:46:0c:bb:
dc:77:5d:67:36:c2:54:bc:80:8f:ca:0c:13:8d:50:
25:8b:b4:37:10:84:d1:bf:b3:5d:91:22:54:09:98:
e6:e2:62:dd:01:d8:85:3f:d6:90:5e:f7:4a:3f:07:
c2:4a:5f:d0:2b:7f:dc:79:85:1e:a3:42:2d:af:10:
d8:da:ad:15:d1:16:16:e9:d1:1f:f0:8f:ed:18:26:
de:9e:33:7a:02:36:dd:87:77:39:c2:be:d6:af:86:
95:23:43:7d:46:eb:a5:f5:28:a9:90:10:15:0d:3e:
5f:98:df:26:e2:cb:7f:c2:7f:79:e1:6c:77:c2:62:
f3:3b:b2:46:3a:a9:04:f6:60:96:46:41:b0:90:25:
4f:46:68:84:97:07:45:a8:b7:f6:45:d7:21:8f:1e:
c7:c9:bb:7b:cb:91:ae:c8:bd:14:45:1d:d7:e8:2a:
bb:38:6f:31:0c:74:dd:10:f4:d7:9a:ee:68:09:dc:
23:f5:d5:4a:87:a6:ad:b2:5c:a5:31:6f:41:45:56:
9d:de:2a:02:c1:43:01:49:66:42:1c:46:a7:e7:b2:
80:1c:e8:64:50:d8:14:ef:c1:15:cc:23:d2:2f:38:
1e:a1:d7:ea:82:ab:d9:6b:1d:76:fd:08:2d:f0:b0:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:78:D9:FF:C9:96:77:C8:C8:3C:EA:3F:35:9C:78:BB:DB:82:B1
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/03V42f_JlnfIyDzqPzWceLvbgrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.122.0/23
Signature Algorithm: sha256WithRSAEncryption
29:a1:9e:58:c1:fb:00:8e:6f:49:24:a4:16:15:51:d7:15:78:
45:00:64:cd:4f:6c:72:2f:29:8e:ed:7b:8b:d0:28:97:89:64:
b8:33:15:d7:e6:e6:78:a2:21:ed:98:50:bc:ba:b8:39:07:c6:
88:de:17:54:a3:e9:91:8e:d6:b0:48:b5:cc:78:b2:5b:8f:df:
ed:69:e2:35:9f:6c:59:92:57:0f:03:57:a2:28:16:d8:7a:57:
8f:06:2c:1c:78:85:ce:bd:0f:c0:0f:70:87:71:03:24:f9:31:
43:4a:c2:21:e2:b2:e7:3b:59:4b:dc:05:70:56:83:54:aa:1f:
ad:ff:e7:87:4b:68:2d:05:13:14:fb:3a:3d:0b:f4:77:de:2e:
82:f8:89:f8:9e:65:89:12:e2:59:df:6b:60:d7:33:65:fe:01:
9c:73:93:6b:d0:1a:ec:fe:28:c9:f3:27:01:67:d8:45:16:d9:
28:e5:2a:42:c4:13:4b:ef:b5:71:53:bd:37:2b:dc:f4:13:65:
77:4f:30:70:37:bc:f5:b7:4b:7a:9c:59:8d:28:50:c8:2f:20:
2f:b2:15:c0:70:5b:b8:7f:51:e6:3c:2b:1a:68:e2:ee:57:a6:
bd:88:f1:41:0b:e6:c0:1e:31:38:71:78:5c:86:ec:66:de:cd:
53:51:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:56 2024 by rpki-client on console-fra.rpki-client.org