Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/dLez3TaPP3W7ENIEDmdSfHuIPLU.roa
File: dLez3TaPP3W7ENIEDmdSfHuIPLU.roa (raw, json)
Hash identifier: QNCzm04GK9nkh+PFnQkZ1vTVt880tdIH0Jd9N9mHK9k=
Subject key identifier: 74:B7:B3:DD:36:8F:3F:75:BB:10:D2:04:0E:67:52:7C:7B:88:3C:B5
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 07B8D722
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/dLez3TaPP3W7ENIEDmdSfHuIPLU.roa
Signing time: Sat 01 Jan 2022 10:56:26 +0000
ROA not before: Sat 01 Jan 2022 10:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31257
IP address blocks: 176.116.160.0/21 maxlen: 21
176.116.160.0/20 maxlen: 20
176.116.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129554210 (0x7b8d722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 1 10:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74b7b3dd368f3f75bb10d2040e67527c7b883cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:c4:9b:18:fb:d4:a8:68:47:5e:17:c7:ec:
21:c2:07:ca:32:61:1e:f1:3c:bd:98:75:25:8e:41:
93:d9:30:bd:b4:d4:1d:69:a2:59:a3:60:1a:b1:92:
de:4a:49:b9:7e:b7:75:50:d4:8e:76:26:d3:58:e5:
3b:03:69:09:be:71:b1:0c:d9:19:8b:1e:01:a8:7b:
96:f0:48:9d:16:87:d9:5d:cf:d7:e8:5d:55:67:cf:
06:22:f9:84:f7:aa:51:6f:0d:65:7d:4e:d1:4d:1e:
54:de:9e:0e:e9:d8:f4:28:a1:82:69:41:17:11:ea:
e0:5d:8b:bb:29:b0:34:cb:e8:bd:e6:97:28:70:7f:
58:ac:a6:32:68:2b:08:7e:e9:16:0c:6e:bd:27:61:
97:fe:0e:51:81:18:79:e5:ee:43:e3:55:24:c9:09:
36:42:a5:92:a2:89:fc:fe:7f:b0:06:86:8c:c8:28:
3e:f5:11:46:48:d5:82:d8:d5:7a:fd:0a:ac:22:3c:
9e:55:a6:44:20:cd:2d:34:cf:30:1c:97:b0:60:ce:
e7:3c:2d:ef:3b:b1:ac:fa:c7:2d:b0:c6:97:6d:de:
79:3c:34:ad:30:9f:31:0c:3b:72:05:21:18:9b:82:
c0:9f:50:e8:df:a2:83:81:0b:60:f4:b2:17:43:5b:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:B3:DD:36:8F:3F:75:BB:10:D2:04:0E:67:52:7C:7B:88:3C:B5
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/dLez3TaPP3W7ENIEDmdSfHuIPLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.160.0/20
Signature Algorithm: sha256WithRSAEncryption
40:ca:36:e8:8b:b6:e0:1f:98:38:93:5a:6e:3f:54:1d:b4:6b:
44:fa:95:54:dc:15:21:25:33:dd:0a:c3:7f:74:c4:20:5b:d4:
e9:23:a2:ac:d5:b3:40:ea:8f:08:36:76:a9:9a:7a:82:8c:7c:
8c:19:54:a4:60:bb:60:7e:aa:0c:1f:7d:e3:8d:08:c5:50:fe:
ec:95:bc:6c:ff:14:98:5a:18:e2:a4:a8:f5:31:88:38:b1:20:
f0:58:a8:d3:b2:29:f7:c2:48:86:e7:c0:1f:96:94:89:b0:6e:
39:04:d3:96:32:9e:a5:37:66:f2:58:f5:cf:17:2c:01:44:a4:
0b:ec:85:49:d7:b0:0c:79:dc:1e:d0:4e:0a:b0:21:29:6b:21:
1e:87:eb:26:fe:41:b9:87:7b:e1:e8:1a:ce:51:2f:75:b1:d0:
e9:87:5d:f2:31:3c:1a:eb:17:e1:48:54:af:78:b5:be:96:7a:
52:c3:c9:4f:68:24:16:37:66:43:d8:7f:05:53:21:72:3a:d0:
77:2e:4a:e9:ba:d5:f0:4b:d7:02:f7:3c:4a:8a:50:93:ce:97:
2b:e6:53:47:78:4d:d6:e5:1a:15:6c:37:f8:c3:a6:31:6e:f0:
3a:89:64:f3:4d:62:cd:80:69:6a:70:a3:cd:52:7c:94:b5:b8:
fb:4c:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org