Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/Tdmh43UsQC7ombgnNs7aGSO4KY8.roa
File: Tdmh43UsQC7ombgnNs7aGSO4KY8.roa (raw, json)
Hash identifier: MKvm4mW9dHltT9AT/VvjypDAm4lSp7zQ2bQxQEf5IYE=
Subject key identifier: 4D:D9:A1:E3:75:2C:40:2E:E8:99:B8:27:36:CE:DA:19:23:B8:29:8F
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 01839499CBCB0F247CE99070E79B27E4294D
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/Tdmh43UsQC7ombgnNs7aGSO4KY8.roa
Signing time: Sat 01 Oct 2022 17:30:50 +0000
ROA not before: Sat 01 Oct 2022 17:30:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208306
IP address blocks: 176.222.62.0/24 maxlen: 24
176.222.63.0/24 maxlen: 24
176.222.60.0/24 maxlen: 24
176.222.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:94:99:cb:cb:0f:24:7c:e9:90:70:e7:9b:27:e4:29:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Oct 1 17:30:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dd9a1e3752c402ee899b82736ceda1923b8298f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:4c:1e:df:c0:95:53:a6:55:65:d0:c1:fd:
3f:2e:c3:ee:0d:a9:a4:fb:2f:a2:6b:1d:b0:32:73:
dc:60:17:a3:5d:20:7d:2e:db:e9:f9:05:aa:05:46:
ae:a0:67:58:b7:2a:47:d4:e1:a0:81:c6:5f:32:1c:
d6:eb:85:02:fc:b5:7a:4f:e8:72:78:63:dc:26:89:
0f:c4:1a:a2:57:9c:d2:da:c4:44:86:59:a7:f1:22:
ab:89:da:8e:69:33:ea:fe:34:9c:de:ed:9e:90:d0:
b9:cf:f2:30:18:53:93:f0:1e:81:a5:3b:d5:42:20:
23:55:3a:1a:96:ef:b8:47:28:7d:74:5a:e4:ee:58:
7c:39:07:31:51:f6:8a:a3:65:3c:4c:4a:d0:03:72:
9d:f3:ce:93:0a:61:db:ca:a7:e9:8d:44:31:d4:b6:
ad:e9:3b:91:68:e1:e9:21:52:15:e5:fe:94:74:6b:
bd:f2:b5:fc:22:9c:f8:e0:16:97:ab:f7:75:3d:21:
05:79:b1:8d:85:58:4a:c4:19:32:59:01:b2:b0:54:
5d:ea:2a:3c:8d:2e:0b:df:01:b7:04:f0:c1:62:a2:
07:4c:f4:15:bc:35:c9:a4:0d:3e:b4:a0:b1:a3:8b:
be:4c:7f:99:ec:3b:25:21:4b:9f:e7:9e:2d:83:a5:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D9:A1:E3:75:2C:40:2E:E8:99:B8:27:36:CE:DA:19:23:B8:29:8F
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/Tdmh43UsQC7ombgnNs7aGSO4KY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.222.60.0/22
Signature Algorithm: sha256WithRSAEncryption
49:2b:8e:43:03:b8:eb:1a:1a:7c:63:27:86:c8:b0:dd:00:d2:
c8:cf:f7:e8:b3:ff:3d:31:05:87:e4:b4:00:a3:7f:45:20:35:
5c:e3:d3:32:17:f4:6c:e7:55:9b:44:c1:1d:f8:72:34:c7:46:
ab:db:f2:e7:22:1b:44:d7:05:5e:f8:0f:ae:4e:fb:13:a4:4f:
a2:c1:b0:08:ae:24:df:ca:79:0a:6a:47:a3:0c:6e:b5:ed:29:
6c:f4:26:4c:26:53:64:1d:0d:67:c7:d8:bc:ea:2a:44:7c:7d:
77:80:77:c3:8d:38:46:0b:2c:d7:8b:94:4c:1f:50:4d:d7:0b:
5b:c4:72:38:a5:d0:04:33:48:de:1d:20:08:ca:0d:97:1e:4b:
ce:c9:0c:01:89:a9:65:30:33:56:28:9a:02:5b:44:1b:c8:7c:
ba:f9:86:a7:93:23:22:e7:88:67:57:4d:5f:79:21:95:a4:bb:
8e:3d:8b:07:0a:27:4e:51:03:d5:f4:d8:ff:a6:6a:16:af:d8:
06:c4:00:9a:ba:f0:9d:f1:29:c7:73:ba:af:62:db:ff:8c:92:
50:1f:0f:0b:20:a4:5c:7f:46:c4:66:a3:70:a1:81:73:77:c7:
b8:b5:96:f9:20:18:40:50:ee:5c:31:b9:a9:93:8a:05:e4:bd:
c5:ae:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:55 2023 by rpki-client on console-fra.rpki-client.org