Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/k3XY_Z6-uu-NgcFOSpLxhCtnf3E.roa
File: k3XY_Z6-uu-NgcFOSpLxhCtnf3E.roa (raw, json)
Hash identifier: DBKKHYEbcx7TmZ2mC6OfCRZwy733+uEqKNcy8gbd4Dc=
Subject key identifier: 93:75:D8:FD:9E:BE:BA:EF:8D:81:C1:4E:4A:92:F1:84:2B:67:7F:71
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 052098D5
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/k3XY_Z6-uu-NgcFOSpLxhCtnf3E.roa
Signing time: Sat 01 Jan 2022 05:01:49 +0000
ROA not before: Sat 01 Jan 2022 05:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203653
IP address blocks: 176.222.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86022357 (0x52098d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jan 1 05:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9375d8fd9ebebaef8d81c14e4a92f1842b677f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:e9:fa:2c:7a:d2:16:28:aa:43:a4:9c:26:
c2:e3:66:78:73:e3:bd:89:29:79:39:13:9b:fa:54:
03:4c:9f:18:2f:67:f4:e1:15:af:c9:cd:07:65:5f:
67:85:b5:6d:f4:63:bf:4a:b4:7c:6d:36:f9:4a:c0:
c6:da:c6:84:ef:6f:2d:39:34:7a:9b:b2:46:c3:70:
a2:ca:c4:b9:b2:db:b5:3a:c8:0c:ea:27:77:6d:90:
9e:ea:c9:f6:83:14:72:9a:ce:4c:29:eb:27:64:e7:
f7:a6:84:54:9d:3e:1e:e8:89:03:dd:93:90:f9:ee:
28:3d:0f:47:cc:b9:1d:be:99:9c:c7:e3:8b:66:d0:
0c:5a:95:16:a5:ac:43:19:4d:aa:96:cb:db:79:42:
67:a4:12:55:bc:a7:24:c5:b8:aa:a9:46:a6:37:18:
47:aa:6c:80:d8:cf:6d:d8:29:3a:79:e3:49:c1:6e:
30:02:e2:7a:08:6b:cd:82:93:21:3e:5e:36:74:36:
42:e7:f2:71:21:54:bd:d8:ae:68:78:ac:bd:ce:e5:
75:27:03:c0:8d:63:60:ed:8e:4a:0d:fa:c5:df:de:
60:e1:b1:3f:44:0f:5f:52:e4:6a:66:3f:1f:93:b5:
9c:d6:71:9c:6c:a5:73:cd:12:f6:ba:3a:b5:b0:24:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:D8:FD:9E:BE:BA:EF:8D:81:C1:4E:4A:92:F1:84:2B:67:7F:71
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/k3XY_Z6-uu-NgcFOSpLxhCtnf3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.222.61.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f9:dc:da:3a:68:32:c1:2a:21:54:cd:e2:10:2f:23:69:56:
bd:32:b1:83:29:68:36:bc:09:eb:f5:dd:78:a4:72:60:af:46:
4e:a4:75:a7:19:ac:b6:24:5d:61:17:3b:00:da:98:f7:25:5d:
c3:c7:53:8b:26:ca:71:40:ee:49:60:36:2e:69:53:da:b3:f7:
54:30:a1:7b:d1:5c:6e:af:d7:1d:08:a2:c4:63:b8:c0:0f:2a:
33:92:49:46:b7:7c:35:65:08:59:af:d4:4f:5b:5c:36:c3:37:
bd:e5:99:2c:72:be:1d:60:f9:f5:14:0b:db:9e:d0:62:45:f1:
25:0c:87:aa:24:bb:85:9c:98:9b:3c:3e:47:b5:60:2e:52:25:
12:09:5c:5b:84:8c:47:a0:de:7c:b9:15:05:6e:09:2b:09:b7:
88:ab:77:87:7d:ce:c9:ee:cd:76:f5:b9:8c:0d:85:d5:bd:76:
6c:1b:6d:38:78:20:dc:f8:e3:bc:a4:6f:92:3d:e6:e7:02:18:
a1:55:36:8c:cf:99:70:d2:89:04:1d:2a:78:73:a4:d3:07:7b:
a9:d3:ea:3d:5c:ec:11:8a:2d:34:f0:c4:ea:09:83:b2:cd:3c:
1f:7f:1e:09:c9:33:a5:cd:f5:70:d3:8b:7e:dd:8e:46:19:1b:
3a:3f:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:00 2024 by rpki-client on console-fra.rpki-client.org