Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/4VzN_qaLH-7FEvIBGuP7j6GPfNc.roa
File: 4VzN_qaLH-7FEvIBGuP7j6GPfNc.roa (raw, json)
Hash identifier: inP4tEXOBKyY3W60iGR1rWOcLaicmBizbsLsBLrKmC8=
Subject key identifier: E1:5C:CD:FE:A6:8B:1F:EE:C5:12:F2:01:1A:E3:FB:8F:A1:8F:7C:D7
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 01856275702699E5955BF75D21290FBA4919
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/4VzN_qaLH-7FEvIBGuP7j6GPfNc.roa
Signing time: Fri 30 Dec 2022 09:55:41 +0000
ROA not before: Fri 30 Dec 2022 09:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198333
IP address blocks: 176.123.51.0/24 maxlen: 24
194.139.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:75:70:26:99:e5:95:5b:f7:5d:21:29:0f:ba:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Dec 30 09:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e15ccdfea68b1feec512f2011ae3fb8fa18f7cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5a:4c:bc:af:5c:35:4a:61:1b:4b:a6:c4:d2:
8e:21:73:6c:fe:3e:95:e1:f8:05:bd:ef:98:38:4c:
73:24:6e:19:22:9d:3c:23:de:56:74:28:b8:31:41:
1e:c5:c9:01:14:6b:61:00:d7:f5:e8:10:90:81:f0:
24:f0:21:31:0c:c6:5b:04:7f:19:74:22:77:d4:17:
54:a2:02:b1:5c:57:13:53:d9:6f:09:8f:7b:55:b2:
d4:57:b6:59:a9:0e:57:2a:42:29:c2:77:c9:95:09:
b1:da:24:dc:d9:cd:ea:f7:ef:6b:42:85:b4:2e:c3:
fa:19:b4:1c:2e:9d:8f:4c:4d:20:cc:ba:0f:b8:28:
e6:ea:d2:68:ca:7d:ef:6d:fc:50:84:8e:1f:22:ba:
ca:ec:6b:00:64:a9:6d:d1:36:8e:21:87:80:13:26:
fe:b5:17:d9:ba:79:40:22:52:5e:6d:5c:b1:cc:82:
cd:1d:9c:be:0a:55:9d:ff:d4:ea:c0:c0:9a:13:bf:
09:9f:5f:03:60:de:80:67:22:b6:80:52:4a:14:07:
7a:56:56:c9:46:5d:cf:52:f8:68:10:b0:1a:54:44:
3b:64:f1:34:4c:46:e1:ad:a8:a1:8c:f3:b2:16:e1:
5b:c1:ef:f6:85:8a:9a:c8:2d:aa:72:fe:51:0f:79:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:CD:FE:A6:8B:1F:EE:C5:12:F2:01:1A:E3:FB:8F:A1:8F:7C:D7
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/4VzN_qaLH-7FEvIBGuP7j6GPfNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.51.0/24
194.139.6.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:b6:34:3c:2e:0f:7e:41:f7:08:2c:95:42:4a:37:e7:42:4c:
d0:f1:88:95:ad:97:64:0d:91:45:d4:eb:2e:bc:9f:f7:fa:a3:
1c:58:7d:03:35:6b:59:53:b9:5a:9b:20:b3:ed:5e:1f:1f:b4:
59:3f:92:5f:4d:e2:b3:a2:58:bd:40:ba:c1:43:15:17:fc:61:
68:e7:b0:6d:f0:f6:d2:d9:52:25:92:ab:b6:e2:a4:15:ca:b0:
ae:c7:27:d9:07:83:5d:54:cf:e1:21:b1:24:94:e0:58:ea:fa:
7d:e5:4d:1f:87:8b:ab:a4:80:6a:94:67:d5:e6:44:6e:36:f7:
d0:aa:7c:34:98:f9:9e:b3:43:a6:c3:90:1e:02:4c:a4:9c:8e:
42:c8:26:50:c0:d4:65:c1:b7:4a:0a:a3:a5:9a:3b:a5:af:fc:
92:8c:af:aa:fb:a3:78:b3:25:eb:da:11:e7:0c:0b:78:82:8a:
99:ae:bf:eb:69:af:47:b1:0f:71:da:fe:5b:d7:ab:ca:3e:bb:
de:00:cc:7d:7b:2b:c4:eb:d3:48:36:0a:2d:7b:99:7d:0d:97:
03:36:06:58:c4:76:1f:7e:12:c4:44:b8:65:ff:bf:3a:d2:2e:
ba:8b:8d:fe:26:32:ce:8d:5d:36:83:e2:83:5c:a9:d1:a0:54:
57:ed:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:39 2024 by rpki-client on console-ams.rpki-client.org