Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/8hIo6ycAX8GsqQJlfocRJoGSt8Y.roa
File: 8hIo6ycAX8GsqQJlfocRJoGSt8Y.roa (raw, json)
Hash identifier: JeoVeMaJklwa58FAcKALqlUbs4GW59dtVjK5N0BIUfA=
Subject key identifier: F2:12:28:EB:27:00:5F:C1:AC:A9:02:65:7E:87:11:26:81:92:B7:C6
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018379463A504A46351D5A9E5986ED43E057
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/8hIo6ycAX8GsqQJlfocRJoGSt8Y.roa
Signing time: Mon 26 Sep 2022 10:09:49 +0000
ROA not before: Mon 26 Sep 2022 10:09:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48624
IP address blocks: 176.56.80.0/22 maxlen: 22
176.56.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:46:3a:50:4a:46:35:1d:5a:9e:59:86:ed:43:e0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Sep 26 10:09:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f21228eb27005fc1aca902657e8711268192b7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:b3:f6:99:4b:fc:fc:c1:c6:a6:bf:73:60:
be:6b:fd:61:3e:dc:56:4f:94:5e:f0:b6:60:a3:b4:
76:04:d2:42:f4:8a:31:14:d7:4c:20:9e:bc:35:bc:
85:7b:f9:c6:f6:78:34:6d:36:9c:e2:f0:53:3f:ba:
c0:a7:07:6b:56:be:f2:ad:c8:08:31:c2:f4:86:0c:
e4:4e:f5:23:22:29:7d:e6:8b:3f:87:b1:0d:41:8c:
9f:ef:84:0f:55:8e:63:83:74:0f:30:61:d0:85:9a:
45:90:6b:2c:47:bf:8b:52:7a:18:ee:1b:44:37:00:
f4:76:31:79:36:ef:e5:f5:92:09:c4:62:18:61:da:
76:94:56:f4:8e:c3:c4:1a:0c:16:c0:d5:a1:92:da:
c6:b6:4c:fd:cd:48:06:76:c0:e1:51:94:d6:a4:2e:
c7:1b:39:ad:3c:64:7f:15:2b:7c:d4:34:7d:54:d2:
cf:32:cd:24:86:d3:19:bc:69:d8:96:a5:e0:2f:b3:
00:27:3e:fe:92:ce:ea:03:d4:8a:13:7a:4a:4b:42:
db:94:19:24:40:05:2a:32:c4:26:11:d7:4e:3c:7e:
e5:0f:77:00:97:46:72:0a:37:45:34:c5:0a:1a:c8:
51:e5:62:cc:b3:16:3a:74:bf:bf:ac:a3:57:5e:82:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:28:EB:27:00:5F:C1:AC:A9:02:65:7E:87:11:26:81:92:B7:C6
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/8hIo6ycAX8GsqQJlfocRJoGSt8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.80.0/22
176.56.88.0/22
Signature Algorithm: sha256WithRSAEncryption
05:0c:6c:49:21:a2:86:04:2e:e6:9b:d6:6a:e5:6e:f7:6b:70:
11:3d:dc:55:64:58:62:b3:7c:b5:c9:6c:99:6e:1a:aa:c6:e7:
98:2b:08:34:1b:f5:c5:6c:c7:1c:21:db:4d:71:72:5d:a4:8a:
5c:bb:13:d0:37:e1:eb:98:09:89:4b:12:00:c5:8a:c7:6a:4e:
2f:1e:38:1e:52:1a:7f:7c:b5:1a:af:e3:7f:43:1e:ce:0e:0a:
f4:68:3b:13:b6:32:99:88:53:45:bb:06:fb:43:48:af:26:e0:
72:ad:55:56:6e:f7:21:48:49:05:88:99:b7:cc:26:55:e4:8e:
2f:b6:88:93:72:20:43:49:3b:29:81:37:96:76:12:3d:8d:05:
96:ba:15:ec:f9:20:e0:e0:7c:42:ad:cd:5c:9e:11:ad:52:c7:
05:6d:a8:50:e2:d6:26:ce:88:76:f8:ac:61:c5:e4:90:cf:44:
d4:4a:f1:81:92:9f:f5:4e:c3:ab:61:f6:b3:f9:72:4b:98:c5:
40:58:47:ae:d6:e6:ef:a4:79:2a:77:b1:75:5b:ca:69:20:7e:
ea:3a:4e:5f:71:32:e8:34:7f:d3:c3:55:c7:19:f3:1e:91:08:
e3:97:c0:c2:84:d5:4d:48:fb:ff:27:65:1a:f2:e9:76:af:e6:
7c:e6:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org