Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/UDSD4ffv1otsowT2SuH1iEa0yTA.roa
File: UDSD4ffv1otsowT2SuH1iEa0yTA.roa (raw, json)
Hash identifier: w5dUtDUC4YmzcnyFqKqomcbfyBBUNcm4YLt6m8ZBRog=
Subject key identifier: 50:34:83:E1:F7:EF:D6:8B:6C:A3:04:F6:4A:E1:F5:88:46:B4:C9:30
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 085B39D5
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/UDSD4ffv1otsowT2SuH1iEa0yTA.roa
Signing time: Sat 01 Jan 2022 04:56:41 +0000
ROA not before: Sat 01 Jan 2022 04:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57395
IP address blocks: 176.124.36.0/24 maxlen: 24
176.124.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140196309 (0x85b39d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Jan 1 04:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=503483e1f7efd68b6ca304f64ae1f58846b4c930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:24:c6:34:2d:15:b5:ab:81:06:b6:a2:28:
ca:0c:c5:53:ba:40:6b:72:d8:85:e0:be:9f:62:10:
63:a3:e3:d7:e0:16:19:eb:a9:1b:00:c1:78:54:de:
45:b8:19:54:59:24:cb:44:f7:0f:71:4a:6f:97:b4:
b7:7d:be:a4:5c:49:64:af:a0:bc:a0:1b:9c:0c:2c:
7e:97:6a:fd:b5:5a:25:23:ab:a5:01:76:92:7d:8b:
2f:36:50:1c:21:ef:6f:b6:0a:40:68:6a:13:6a:a1:
0e:fd:10:c7:d0:82:ed:d9:7a:74:eb:2a:68:05:d2:
64:27:52:01:48:0f:c7:29:13:ed:c0:2b:f3:3d:5d:
2c:f8:12:94:10:92:27:c9:e8:e1:d6:77:42:3e:5c:
79:89:af:d7:d4:8b:ff:40:5a:11:4b:0a:72:3b:12:
c4:01:34:d3:da:5a:16:12:04:dc:5b:82:82:18:71:
3d:9c:3d:3d:fa:14:27:3e:6e:9b:78:6d:10:d5:2d:
a0:0a:c9:37:6e:59:81:c2:09:1f:72:95:a7:80:25:
bc:e5:01:5a:2d:ad:67:67:7e:33:d4:68:72:fc:67:
3b:4f:01:e5:20:b0:ac:73:4b:18:28:9f:bc:0a:64:
f7:b3:b8:43:a4:e6:87:8d:88:93:b5:c6:7c:0d:d9:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:83:E1:F7:EF:D6:8B:6C:A3:04:F6:4A:E1:F5:88:46:B4:C9:30
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/UDSD4ffv1otsowT2SuH1iEa0yTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.36.0/23
Signature Algorithm: sha256WithRSAEncryption
87:4d:07:45:ab:ee:85:0b:43:b2:d4:05:e8:de:c5:47:bb:4b:
c4:51:66:52:88:38:25:e0:ab:b8:3a:58:62:85:9f:7e:07:7b:
6f:73:4c:c3:93:34:c1:16:43:28:53:82:ba:25:6c:75:b1:29:
27:9c:fe:ef:29:ff:49:a4:22:55:57:8e:f4:db:b8:25:b0:af:
94:34:c7:5a:4f:a9:30:45:e7:7f:62:99:10:7b:4a:40:c3:a1:
6d:7a:89:e5:21:21:5b:44:3f:c0:b8:99:d0:ab:7b:38:3f:2d:
aa:fb:a8:a6:0c:fb:77:14:da:93:8a:82:54:2d:e4:45:df:07:
a5:f8:a9:ea:a1:60:29:f5:e9:31:6b:0c:db:8d:5c:7c:4e:7a:
cc:a0:1d:3c:2b:4a:1c:86:24:1a:0b:84:54:b8:0a:19:fe:a9:
32:e7:c0:e1:4d:34:dd:ed:d0:fb:4b:9b:13:1e:e7:6c:3d:51:
c7:0b:81:96:de:84:15:b6:6e:d9:63:65:ec:b1:e6:16:9a:0e:
97:f4:22:98:22:68:a1:96:f4:50:29:2a:90:e4:6a:a1:be:c3:
2d:7d:46:bb:12:73:4e:36:d2:47:a0:f0:48:af:e6:a9:0f:0f:
c4:9d:3d:4b:21:b2:1b:3f:80:de:49:8b:ad:d9:b4:e1:a9:2c:
1f:88:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:11 2025 by rpki-client