Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/YGkklabjOKWCRPXWgy4fOZ7oGJs.roa
File: YGkklabjOKWCRPXWgy4fOZ7oGJs.roa (raw, json)
Hash identifier: TeiirK2Gc1Y+m50kVlB2CCc+5JqaGqz7YEO6CXWF/1w=
Subject key identifier: 60:69:24:95:A6:E3:38:A5:82:44:F5:D6:83:2E:1F:39:9E:E8:18:9B
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 05B2FF4A
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/YGkklabjOKWCRPXWgy4fOZ7oGJs.roa
Signing time: Sat 01 Jan 2022 07:57:15 +0000
ROA not before: Sat 01 Jan 2022 07:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59606
IP address blocks: 176.119.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95616842 (0x5b2ff4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 07:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60692495a6e338a58244f5d6832e1f399ee8189b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:c0:3d:8a:83:aa:5a:92:8d:7d:83:c0:7a:
99:f8:60:9f:aa:b4:a3:6a:17:2d:38:ef:94:cc:7f:
6a:d2:13:e6:5b:21:ce:20:d9:b5:ba:dd:78:3f:5d:
c2:21:16:ee:1f:81:73:c1:39:f9:a9:9c:93:1c:a5:
0b:12:64:5b:54:30:ed:dd:28:4d:c3:31:75:e9:00:
f0:fe:19:44:81:60:51:33:f5:cf:21:91:ad:40:32:
14:c2:51:41:b8:74:36:d7:41:9c:08:b8:48:cb:1e:
b3:48:49:7f:63:fa:3c:5a:d9:c7:d2:e2:23:e0:b9:
58:a5:dc:ff:72:40:e5:90:b9:79:26:69:46:41:cc:
b7:47:9c:bd:19:27:74:24:08:5f:0a:a4:71:57:1f:
99:9d:d3:62:6d:69:36:51:d3:0c:e3:93:9e:f9:b3:
0e:ae:8d:f3:a3:96:79:88:07:fa:34:71:19:23:9e:
3d:8a:f4:b7:9a:d4:ac:fe:87:fc:90:a4:35:18:64:
0d:df:a0:17:f6:56:fe:31:e5:38:4c:5a:83:a1:c5:
3e:49:c2:03:a6:41:2b:b8:c9:b5:8f:2a:ea:fc:aa:
19:ec:a8:3a:1d:45:c4:99:b9:17:2a:8c:d6:a1:21:
b4:0a:a0:02:30:f7:ff:de:8c:fd:17:a4:ee:d0:12:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:24:95:A6:E3:38:A5:82:44:F5:D6:83:2E:1F:39:9E:E8:18:9B
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/YGkklabjOKWCRPXWgy4fOZ7oGJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
38:29:fd:59:a4:0a:98:94:bd:1e:29:ca:e3:3c:14:81:cb:be:
a5:8d:77:b0:4f:40:2e:aa:41:7a:85:df:76:1c:a1:f9:6a:72:
d8:93:b6:bb:45:ed:f9:3c:01:f9:38:18:b4:86:18:f5:ff:c2:
ac:7a:32:63:09:cb:d1:86:11:d8:3b:af:2e:d6:4e:65:a5:08:
83:ae:f7:84:ad:65:a2:cc:e6:b4:b7:ed:23:1d:f3:ee:95:56:
b9:93:9f:b5:f8:3f:fa:95:27:2b:3e:27:f2:ce:09:de:8e:af:
03:2c:60:0d:55:1a:c8:f6:be:41:61:ee:9e:ed:73:ab:19:97:
01:df:c2:c8:a5:bd:aa:7d:53:5b:bc:1c:bc:88:26:e6:06:0d:
ac:9d:5c:3e:da:53:d0:ef:3c:65:93:71:71:82:95:40:15:cc:
b2:f6:e6:52:e2:ec:e6:f0:9d:62:19:86:62:bc:88:aa:83:fe:
25:31:54:34:1f:86:a9:5b:5b:47:36:5d:b0:a9:f5:66:78:2e:
2c:54:4c:a1:f4:52:48:8e:13:b4:cf:b2:37:79:00:48:1d:68:
88:ee:5a:35:74:6b:80:8c:1b:aa:ab:fb:4b:d9:36:e6:41:61:
18:f7:13:4d:f7:5f:5a:89:37:13:9f:fb:f7:6f:77:e3:51:6d:
fa:80:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org