Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/0zMZdKSvaUWs83NOJ8K_RvSXEhk.roa
File: 0zMZdKSvaUWs83NOJ8K_RvSXEhk.roa (raw, json)
Hash identifier: KHBhyWQnqOufgMoNNlEdWGDjgLLnsbi8bUlfSqR8ODs=
Subject key identifier: D3:33:19:74:A4:AF:69:45:AC:F3:73:4E:27:C2:BF:46:F4:97:12:19
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 010B375C
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/0zMZdKSvaUWs83NOJ8K_RvSXEhk.roa
Signing time: Sat 01 Jan 2022 10:54:37 +0000
ROA not before: Sat 01 Jan 2022 10:54:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210808
IP address blocks: 176.100.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17512284 (0x10b375c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Jan 1 10:54:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3331974a4af6945acf3734e27c2bf46f4971219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:70:8d:44:05:35:bd:28:1f:51:40:b6:86:
5b:d5:b2:20:87:b7:42:92:fd:78:06:a8:7a:08:90:
98:a2:31:60:e1:5d:6c:5f:71:48:94:d3:32:60:c1:
4e:c0:2d:5b:95:7e:6d:c3:aa:87:f3:87:e7:17:0c:
83:d1:5f:48:8b:f8:95:39:b2:a2:94:0f:c5:41:aa:
3f:ee:39:16:be:06:55:ee:b3:28:d7:43:e8:0e:61:
ea:80:ea:30:ac:82:f3:e7:b9:80:4d:a5:14:ce:0f:
cd:5d:ab:ee:79:20:d6:56:45:46:5d:52:98:21:01:
8a:dc:c7:0d:21:62:c9:b0:27:eb:f3:9e:89:fb:8e:
4c:b1:98:cd:0a:ec:7c:53:a2:bd:12:32:d2:cd:3d:
ee:59:a1:73:19:9f:bf:2e:f5:35:2c:4d:d3:ba:3e:
e8:1f:a1:13:5c:28:17:d2:cb:e4:77:c2:fd:ae:ce:
f9:6d:98:a2:16:85:11:c4:95:a3:43:8c:11:e0:3c:
e8:ef:86:ff:bc:c5:97:ca:4b:0f:8e:62:fb:35:59:
61:e4:38:38:3b:0a:2c:d0:1a:90:ae:5c:c0:80:9b:
56:7a:a3:d8:75:93:a2:90:6d:e3:d1:cc:e3:99:b7:
98:4a:18:ca:de:44:3a:8b:76:40:19:85:13:c5:dc:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:19:74:A4:AF:69:45:AC:F3:73:4E:27:C2:BF:46:F4:97:12:19
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/0zMZdKSvaUWs83NOJ8K_RvSXEhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.46.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8b:c6:f7:65:ba:fa:fd:e0:7f:65:8b:22:10:ed:ca:59:8a:
0b:90:a0:b5:fc:ca:05:5f:36:5b:e5:79:2d:4b:fd:2b:d8:b6:
4c:7b:96:b5:cb:2a:5f:24:c2:9f:e8:99:70:9f:e2:54:7c:62:
64:56:b5:8b:e7:1d:89:d8:fb:f4:97:86:c4:03:8b:d3:fe:9f:
b3:5f:d6:69:13:39:ee:28:cd:88:bf:0e:90:98:46:46:57:e5:
0f:58:91:47:53:e4:b8:3b:2c:cd:c5:66:46:62:03:07:b0:18:
6f:f3:69:ae:a7:da:56:d1:dd:c2:3c:00:48:39:eb:80:2b:7a:
7a:9c:bf:d0:b4:7b:25:99:81:fd:96:2f:39:8d:08:2a:41:a7:
f7:bf:18:78:56:4e:54:1f:ad:92:e9:e3:f9:72:c1:71:24:5b:
b7:da:2a:79:92:5a:ee:3b:64:67:94:2a:d2:15:15:19:c9:b9:
bd:a3:40:2b:72:4f:25:6a:6c:93:82:e4:64:c4:98:3e:ca:0c:
6b:f6:38:00:2e:39:6d:f8:3a:be:68:b9:fc:dd:52:70:08:25:
66:a4:5d:eb:b8:5a:30:08:4a:06:86:8c:74:d3:20:87:e7:4b:
bd:bc:9c:10:c1:0a:d0:f3:9a:9d:93:0c:64:b6:85:c8:20:a8:
d8:c9:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:00 2023 by rpki-client on console-ams.rpki-client.org