Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/RB_CcaJM9AFyKcoAMPrpwxryq5A.roa
File: RB_CcaJM9AFyKcoAMPrpwxryq5A.roa (raw, json)
Hash identifier: FhESJdc/S4Bp2IA/3pf7Izk2wd15Jlu3h28L1J2rJiU=
Subject key identifier: 44:1F:C2:71:A2:4C:F4:01:72:29:CA:00:30:FA:E9:C3:1A:F2:AB:90
Certificate issuer: /CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Certificate serial: 05D2F593
Authority key identifier: 21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/RB_CcaJM9AFyKcoAMPrpwxryq5A.roa
Signing time: Sat 01 Jan 2022 14:07:33 +0000
ROA not before: Sat 01 Jan 2022 14:07:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210052
IP address blocks: 176.118.178.0/24 maxlen: 24
176.118.179.0/24 maxlen: 24
176.118.176.0/24 maxlen: 24
176.118.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97711507 (0x5d2f593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Validity
Not Before: Jan 1 14:07:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=441fc271a24cf4017229ca0030fae9c31af2ab90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:b4:c1:fc:bf:ba:ce:1a:9b:8f:2d:e1:75:
e9:78:0b:2a:7a:f3:a9:1f:d7:1a:08:8a:17:87:df:
53:b9:56:08:20:80:92:1b:98:1b:e7:35:01:f1:30:
93:eb:a4:d7:8b:d3:06:ad:e3:68:51:81:f2:aa:7f:
78:cc:df:c4:10:b9:57:f4:84:11:e8:c3:45:43:b5:
a4:f9:2d:c8:86:5f:87:82:df:7f:3e:4c:61:ea:42:
f6:3b:fe:03:10:62:36:d4:63:02:a4:24:e7:ad:f1:
f2:4a:0f:8f:f2:a5:9c:0c:20:55:b7:20:be:00:98:
3a:40:ea:47:f2:ca:79:19:fd:1b:18:ee:f7:fd:25:
bb:96:9b:47:35:fd:ff:a3:ce:17:3a:0e:55:01:9d:
70:32:6b:06:a1:1b:6c:86:c8:8d:90:c4:8f:d2:a0:
88:a4:a4:ba:27:ee:01:24:bc:e0:1c:74:ba:1b:59:
ef:7b:48:71:16:83:5f:c2:32:60:5d:12:c0:75:46:
39:eb:b6:29:12:ed:40:dc:1b:17:0b:6e:7a:8a:f0:
a6:f8:be:51:1a:17:11:1d:6f:d9:e0:1c:28:fb:3f:
21:34:9e:16:f9:2e:56:dd:a7:eb:6d:bd:66:dc:a1:
66:d6:f6:84:e7:8e:86:7e:01:d1:17:0e:99:e4:e8:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:C2:71:A2:4C:F4:01:72:29:CA:00:30:FA:E9:C3:1A:F2:AB:90
X509v3 Authority Key Identifier:
keyid:21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/RB_CcaJM9AFyKcoAMPrpwxryq5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.176.0/22
Signature Algorithm: sha256WithRSAEncryption
22:b4:38:8a:0a:35:89:20:b9:82:1a:35:1a:73:61:ad:d8:a5:
7f:6f:af:97:53:33:f6:aa:f2:cb:45:7e:6c:71:94:fa:93:38:
d9:b5:a9:36:5d:a9:13:9e:ae:c0:ce:fc:21:07:a5:6e:51:e8:
10:9a:96:37:0f:e0:e7:85:84:50:1d:40:54:ba:7c:3c:0e:85:
89:68:80:3d:1c:e7:fc:19:a5:a4:92:53:b6:c6:90:e0:7c:5e:
0c:13:2c:24:3c:9c:5f:e5:88:36:5e:06:9f:7c:fc:26:01:15:
41:e6:4e:84:3e:85:f4:e4:92:df:75:69:4f:8c:e6:de:0f:81:
32:98:18:72:03:a9:cf:2b:75:c6:e8:77:f1:95:cf:d6:d3:9d:
a8:8b:63:5c:18:0d:46:1c:7c:30:83:a1:81:3b:02:29:1d:dd:
70:ad:12:22:e3:88:3f:fb:27:0f:94:a9:f8:b0:6e:4d:f5:22:
29:cf:5f:5c:62:b2:ea:2b:2f:1b:7f:d5:74:69:8d:23:f5:50:
52:a5:9e:1b:0d:c0:29:57:df:14:0b:bd:7a:a1:97:79:aa:9d:
f7:e9:18:57:b7:d2:8e:34:ca:e6:43:64:99:b5:9b:ef:1b:97:
90:26:4b:ea:4c:37:12:b3:fd:7c:a2:a1:56:65:16:91:6d:a5:
d1:88:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:25 2023 by rpki-client on console-ams.rpki-client.org