Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/yHaYVFjCREx7PBoB6xL7ELFoUms.roa
File: yHaYVFjCREx7PBoB6xL7ELFoUms.roa (raw, json)
Hash identifier: p2EwaVmH4UOO62tnCbIJlfZiqIWww9QWAlbQmzCWmqo=
Subject key identifier: C8:76:98:54:58:C2:44:4C:7B:3C:1A:01:EB:12:FB:10:B1:68:52:6B
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: B52E
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/yHaYVFjCREx7PBoB6xL7ELFoUms.roa
Signing time: Tue 12 Apr 2022 08:33:21 +0000
ROA not before: Tue 12 Apr 2022 08:33:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199008
IP address blocks: 176.122.50.0/24 maxlen: 24
176.122.49.0/24 maxlen: 24
176.122.48.0/24 maxlen: 24
176.122.51.0/24 maxlen: 24
176.122.56.0/21 maxlen: 21
176.122.52.0/22 maxlen: 22
176.122.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46382 (0xb52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Apr 12 08:33:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c876985458c2444c7b3c1a01eb12fb10b168526b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:d5:5e:c3:64:b0:70:c9:90:ea:d7:46:02:
bf:5d:ef:5a:12:fc:15:2d:bc:c5:cf:1c:8e:87:ed:
c4:d4:7c:8e:fd:73:61:33:7e:b2:1f:3e:20:a2:e4:
5c:69:b5:db:fd:bc:d8:08:5e:cb:4b:e0:97:07:f5:
db:09:27:4f:af:63:89:e3:e7:fa:67:97:75:99:f1:
65:f1:8e:2e:72:07:80:89:19:22:13:b4:fa:d7:05:
c9:94:3e:3d:94:d8:8d:99:de:52:c3:fe:c1:30:df:
07:0b:3e:bf:d5:6c:88:86:c3:1e:4c:ea:ea:cf:bc:
ce:31:bb:af:41:c1:21:cb:96:e1:ff:57:f2:a9:17:
d5:1f:64:c0:0b:e7:40:ae:80:20:b6:27:ee:3d:98:
a7:32:53:cd:ba:55:22:39:5a:30:63:87:bf:ee:2e:
3f:bc:f9:ff:50:5e:08:64:c2:cd:0b:23:14:72:cc:
77:dd:17:58:c8:91:fd:7d:5b:1e:2d:c9:87:fa:06:
44:da:12:07:0d:34:2f:23:23:c8:80:0c:2e:9c:fe:
fa:1f:63:b2:3f:13:1e:3f:d2:e1:a3:e0:38:14:12:
b6:48:da:67:2f:0a:5a:0f:01:19:39:11:05:6b:81:
24:b5:8f:c1:0f:8f:47:76:42:5c:5b:0c:17:32:aa:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:98:54:58:C2:44:4C:7B:3C:1A:01:EB:12:FB:10:B1:68:52:6B
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/yHaYVFjCREx7PBoB6xL7ELFoUms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.48.0/20
Signature Algorithm: sha256WithRSAEncryption
72:18:4e:09:49:14:4e:e6:38:34:f4:b8:9c:f8:ea:a4:8b:a7:
c1:5d:dd:8c:ed:77:02:2b:f7:ea:2f:30:23:a2:38:69:44:b4:
1c:15:57:80:40:b1:be:87:27:c6:bc:b0:9e:23:6c:ef:d2:c9:
ef:61:3a:8c:90:26:cd:15:62:46:1f:40:8e:d8:a6:90:ca:9c:
44:54:dd:80:b9:7d:9d:8e:ed:b5:ff:2b:3e:e8:25:70:32:19:
06:9b:1d:86:90:67:57:4f:da:44:5c:10:9c:c1:65:d5:8a:a6:
54:3b:e4:2a:99:c4:3e:24:7e:b7:4a:25:f6:1e:32:af:a9:34:
d8:00:d2:aa:e9:19:5f:6f:8c:fb:c2:ef:f8:85:9a:75:c7:de:
f8:89:3e:7f:06:57:a9:b6:2c:c8:33:0a:fd:ef:de:df:dc:c4:
58:b7:d4:55:2b:5c:19:69:e0:cf:53:4b:99:04:01:98:14:71:
eb:85:dc:42:88:b0:56:a8:c0:8f:e2:41:da:04:86:71:d0:6d:
f8:8f:47:f5:2b:c2:a2:eb:10:b2:cc:a5:ad:69:c6:93:9a:61:
98:f6:22:bc:e0:4d:de:06:b2:c8:16:ea:99:0b:af:97:ab:8c:
39:45:4d:65:b4:5d:15:45:cd:52:b1:c3:0e:b7:aa:9d:be:14:
63:1d:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:25 2023 by rpki-client on console-fra.rpki-client.org