Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/cdPCpbGx_N37venWbPBINqC0En4.roa
File: cdPCpbGx_N37venWbPBINqC0En4.roa (raw, json)
Hash identifier: jD6tJTzJUbWcsPvCezUANaMYha3JmM8hpZFc776K+b0=
Subject key identifier: 71:D3:C2:A5:B1:B1:FC:DD:FB:BD:E9:D6:6C:F0:48:36:A0:B4:12:7E
Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial: 03FA1B73
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/cdPCpbGx_N37venWbPBINqC0En4.roa
Signing time: Sat 01 Jan 2022 01:57:23 +0000
ROA not before: Sat 01 Jan 2022 01:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 176.124.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66722675 (0x3fa1b73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Validity
Not Before: Jan 1 01:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71d3c2a5b1b1fcddfbbde9d66cf04836a0b4127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:d9:eb:1c:0e:b9:35:24:f9:d6:1d:d5:98:
29:a2:1b:67:b7:fa:5a:bb:c8:97:6d:d3:50:ca:54:
4c:8d:a9:03:99:40:43:8e:be:b8:0e:33:96:10:1b:
11:f9:bd:42:ad:2e:8d:37:9a:2d:7c:21:ef:f0:a5:
6f:d2:b6:a7:20:52:03:76:c1:c2:eb:6e:5e:17:d1:
eb:64:70:81:a1:45:5a:ee:9d:42:2d:88:b2:ac:a7:
1d:47:3f:91:bc:9e:a6:55:ba:c3:d7:f8:2f:2f:74:
65:83:5e:a4:63:8e:ef:9d:5b:d4:f3:14:92:33:2e:
77:28:3a:5e:c2:58:32:83:39:de:9c:6f:33:0c:b6:
79:4d:9f:2a:8d:22:3e:33:e4:18:a9:ff:09:21:2e:
6b:51:ff:c4:45:d8:a8:ab:54:3b:b7:91:0d:09:ac:
7d:60:88:cf:6d:28:34:3e:e9:4f:ee:b3:1f:db:07:
a6:25:34:c0:27:f2:1a:e3:9c:8b:79:5e:87:38:65:
cc:25:19:23:bc:d4:ac:c4:b8:88:e7:54:83:93:c7:
99:5a:db:a9:1b:92:32:68:d4:f6:13:c4:83:df:f3:
c0:0e:e5:02:17:2f:e0:58:85:6a:d6:07:76:e9:34:
8e:1c:8f:fd:c8:b6:ed:c6:04:fb:91:a8:5b:6e:bc:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:C2:A5:B1:B1:FC:DD:FB:BD:E9:D6:6C:F0:48:36:A0:B4:12:7E
X509v3 Authority Key Identifier:
keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/cdPCpbGx_N37venWbPBINqC0En4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e4:e7:93:a5:a2:cb:c9:8e:c3:82:e9:8b:3b:02:4d:c2:3a:
ac:4b:83:fd:1a:ff:12:40:0b:24:35:9a:7e:4b:1a:ae:79:4d:
a5:ee:e0:88:db:ca:2b:2a:28:8f:de:78:d9:5d:a0:ce:94:e0:
3f:f2:f1:0f:75:62:0b:22:c0:4d:bb:fc:33:59:4d:77:f0:e7:
25:8f:5a:d7:f8:a4:95:48:7a:4d:00:06:89:1b:2c:9d:c9:51:
c4:e2:7b:e1:fa:6f:d3:ab:98:ed:4f:9f:59:00:cb:15:cd:cf:
4e:7a:65:38:ef:e3:74:2a:9d:00:57:da:8b:68:83:83:0f:93:
9b:5e:c2:f7:db:43:17:d3:21:85:05:07:d1:1e:8f:4d:ac:12:
e0:93:8b:a1:03:c8:34:65:69:92:52:e7:1b:8c:ef:ec:4b:26:
8c:68:3c:d9:a3:99:58:ee:29:73:f7:c7:f4:46:69:2e:b0:42:
62:f4:51:cc:1d:50:f7:6b:e3:b8:3f:66:2b:fd:50:aa:c5:01:
9e:3c:ae:7d:c3:83:e1:07:2d:e6:33:8d:45:83:fa:58:75:f8:
4a:2d:42:81:f5:0d:db:e7:29:65:d0:6c:1c:0c:68:3f:8d:07:
3b:0b:c9:04:43:8c:6a:d7:47:96:53:fb:5f:e5:e1:4a:a1:83:
72:06:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:07 2024 by rpki-client on console-fra.rpki-client.org