Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/4oZTTJ7QTjd2Sz0tkMPLTBOshmc.roa
File: 4oZTTJ7QTjd2Sz0tkMPLTBOshmc.roa (raw, json)
Hash identifier: siP6jfPxEtdpc2eM/nYLymApF0BMsFNcWvsXFVEs5+4=
Subject key identifier: E2:86:53:4C:9E:D0:4E:37:76:4B:3D:2D:90:C3:CB:4C:13:AC:86:67
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 01896C9A6C24587841288C3FE1199D25A0FD
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/4oZTTJ7QTjd2Sz0tkMPLTBOshmc.roa
Signing time: Wed 19 Jul 2023 05:23:26 +0000
ROA not before: Wed 19 Jul 2023 05:23:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24837
IP address blocks: 176.108.176.0/22 maxlen: 22
176.108.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6c:9a:6c:24:58:78:41:28:8c:3f:e1:19:9d:25:a0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Jul 19 05:23:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e286534c9ed04e37764b3d2d90c3cb4c13ac8667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:71:d5:8e:f8:c0:43:c2:aa:20:f2:19:98:
d6:fa:8e:07:ba:10:c6:c4:8d:99:c0:77:15:03:0a:
7e:25:34:a3:79:c2:47:10:12:b8:df:f3:6a:71:da:
61:e4:5b:c3:0b:ff:70:fd:27:4d:a8:bc:7b:31:9d:
43:52:2f:2b:b7:07:a5:93:90:b8:07:e0:0f:79:76:
a2:9d:90:6b:66:76:18:56:bf:74:b1:88:cf:6a:08:
66:24:83:12:85:c2:9d:b3:33:3c:48:35:a5:5e:38:
95:a4:70:03:07:c5:bb:be:26:8c:49:98:3e:4c:e5:
a2:d7:ce:e7:49:05:a9:f0:fe:f1:cd:03:9c:dd:75:
55:5d:50:72:12:11:a9:27:45:c3:c6:fd:fc:f8:c8:
a8:d5:17:50:ca:1f:ed:de:8e:56:65:f5:b6:06:b9:
3b:0d:c5:97:cb:53:0f:0b:c8:ec:08:e0:3d:e9:7e:
22:33:97:2d:85:e3:b9:46:c1:2f:88:47:ec:5a:56:
b4:7d:79:02:84:9d:ac:aa:69:63:9c:21:e8:5d:4c:
15:c3:f0:a2:18:46:e9:54:06:4b:42:a4:16:cc:68:
38:46:fc:22:9f:de:7d:d6:af:06:8f:19:9d:1b:7c:
3c:89:9c:c3:d7:b8:68:a7:d2:07:47:6f:3e:3f:c7:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:86:53:4C:9E:D0:4E:37:76:4B:3D:2D:90:C3:CB:4C:13:AC:86:67
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/4oZTTJ7QTjd2Sz0tkMPLTBOshmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.176.0/22
176.108.183.0/24
Signature Algorithm: sha256WithRSAEncryption
79:83:4e:16:52:2e:2b:a3:36:f8:72:f9:ec:b0:b4:61:41:2c:
20:a3:77:12:e1:b4:c0:59:48:47:2d:f1:08:91:b6:56:55:c2:
87:8e:da:06:b5:25:17:37:83:34:cb:22:e5:81:3a:db:b2:24:
ab:56:45:69:73:16:75:b5:cd:97:65:17:a1:6d:82:20:75:00:
34:af:a1:62:70:02:6f:26:71:83:81:08:ae:ad:06:03:e7:55:
60:f1:3a:b1:5a:ae:72:8d:83:fa:61:77:11:b9:9d:10:f0:55:
6d:a1:e7:c8:54:85:23:4a:a7:b4:d7:18:81:0f:ed:55:d0:cf:
07:bf:fd:8f:d1:14:da:1f:b3:9b:80:18:53:c8:9a:0a:cf:34:
ba:09:a1:11:b2:7e:3f:5e:76:5a:2d:fe:b1:20:3b:de:8c:3a:
c1:80:10:09:f7:56:42:25:da:f0:e6:e2:41:ab:4f:87:88:29:
a6:e9:7a:d1:d8:06:d0:c1:42:44:7c:98:ef:25:9b:28:a3:08:
29:de:dc:08:9d:b0:8a:0d:13:a7:15:44:6b:e1:0f:6e:07:f5:
47:d5:6b:f7:0c:58:95:10:3c:34:9f:98:c1:11:b6:bb:8e:d9:
f0:3a:c0:b0:48:d6:35:ee:73:0c:17:c7:57:5a:be:db:b3:28:
98:c2:45:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:24 2025 by rpki-client