Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/7eWKk11j8wbifr127E_klEo2AUk.roa
File: 7eWKk11j8wbifr127E_klEo2AUk.roa (raw, json)
Hash identifier: ZEBIt4EJ/yXCngZSZuMB95hJFNf8XCUKjE9PCoU0afE=
Subject key identifier: ED:E5:8A:93:5D:63:F3:06:E2:7E:BD:76:EC:4F:E4:94:4A:36:01:49
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1AC1216C
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/7eWKk11j8wbifr127E_klEo2AUk.roa
Signing time: Sat 01 Jan 2022 16:03:14 +0000
ROA not before: Sat 01 Jan 2022 16:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204348
IP address blocks: 176.236.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448864620 (0x1ac1216c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ede58a935d63f306e27ebd76ec4fe4944a360149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:c8:bb:d2:be:b9:fa:69:19:6f:23:50:37:
ba:40:9e:18:96:28:38:72:88:8f:51:ab:c2:f8:2b:
60:23:4a:27:5e:52:8d:14:b8:1d:de:c0:1c:a9:e7:
99:78:55:5e:25:fa:f2:56:be:c3:d6:d2:ed:0c:ef:
1b:0e:02:b6:05:0c:10:b8:fa:3c:a1:22:0d:19:9f:
cb:a7:30:cb:92:35:6d:09:9d:b9:9f:8d:07:a1:a6:
50:1c:ed:a3:e9:85:a3:d7:a8:87:d7:b4:c2:af:5d:
ef:8d:03:10:62:06:7b:6f:fe:2a:a1:96:71:b2:93:
ac:f9:d6:4d:5e:e3:a1:3f:48:b7:71:6b:bf:07:3d:
79:9d:16:7c:5d:3e:73:9e:07:14:a7:91:0e:8f:ad:
9a:90:8a:d0:8b:1f:f8:1a:a1:86:bb:86:e2:54:0f:
e2:0f:20:7a:11:de:40:cf:ad:3a:f3:40:89:e5:94:
82:00:27:af:61:a9:e7:98:34:39:bd:f5:93:54:d8:
cb:d4:6e:11:70:b5:8a:85:ef:39:e6:8a:6c:a5:d3:
3f:8e:e2:77:13:9a:4f:5c:a1:3c:a1:4a:cf:48:4d:
a0:db:2e:c8:3f:f6:af:16:80:af:ca:39:f5:e6:bc:
94:27:15:1d:08:d5:2f:3f:74:09:3c:4a:cb:8c:30:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E5:8A:93:5D:63:F3:06:E2:7E:BD:76:EC:4F:E4:94:4A:36:01:49
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/7eWKk11j8wbifr127E_klEo2AUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.236.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:74:09:ea:3b:39:fe:d0:e7:ec:3e:3f:0e:7c:d8:b9:25:c3:
42:8f:73:0b:42:0e:b2:3b:ba:50:0d:6e:04:74:6b:ae:d9:35:
ac:8f:ef:91:58:eb:f1:56:3d:fe:84:98:4e:1f:ad:14:89:5a:
4b:8c:6d:ae:8d:b5:b6:7d:2e:6d:5c:18:d3:ab:f4:39:dc:b7:
44:c9:6e:31:ce:38:88:9e:13:cc:c2:ad:fb:56:e5:86:01:5f:
7e:b5:64:39:7a:15:44:6a:86:f0:25:84:a2:3a:fa:1e:a8:a7:
0f:99:c0:4d:ca:ad:8c:e8:72:db:18:a4:1d:88:4b:41:81:eb:
9d:3e:e6:25:0a:27:53:ab:7e:6d:6d:33:1c:3c:69:da:21:45:
77:36:89:e0:2e:8f:2e:93:0d:bd:03:95:af:1a:3c:f5:50:be:
3c:c4:5b:d7:aa:e0:25:69:bc:e2:52:56:f0:68:90:bf:10:a4:
3a:74:6f:40:f3:5b:1b:1a:35:45:c9:88:fc:e1:df:80:dd:ab:
d0:ea:04:92:ea:b7:cf:6b:d5:5e:2e:8c:31:ce:51:4b:96:98:
7c:49:5a:dd:e2:16:84:86:78:ff:f6:98:38:ec:76:d7:bb:16:
05:ac:33:e2:26:d3:1b:1b:3a:8b:4d:6a:d3:74:3d:90:71:c1:
95:42:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org