Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/wc8XlBWxTW8DlJBBx3Ya3QHWl7s.roa
File: wc8XlBWxTW8DlJBBx3Ya3QHWl7s.roa (raw, json)
Hash identifier: PGCi8GTEBvy12N6gb8g/Q9XCk/3y6WRhgqJmTHDPJEc=
Subject key identifier: C1:CF:17:94:15:B1:4D:6F:03:94:90:41:C7:76:1A:DD:01:D6:97:BB
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 06DFCE
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/wc8XlBWxTW8DlJBBx3Ya3QHWl7s.roa
Signing time: Wed 22 Jun 2022 06:01:44 +0000
ROA not before: Wed 22 Jun 2022 06:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50392
IP address blocks: 176.120.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450510 (0x6dfce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jun 22 06:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1cf179415b14d6f03949041c7761add01d697bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:97:b4:03:20:86:74:95:f5:ac:66:cb:4d:
d7:33:db:fc:7c:f4:ec:72:b8:66:39:f4:b9:08:cb:
23:23:28:27:d9:98:9e:f9:53:e9:8c:e1:af:8e:a9:
57:46:cc:40:a2:86:16:1f:74:cc:1a:74:49:93:b7:
c2:18:b9:9d:5e:e2:7a:69:41:17:ea:8a:a0:3e:72:
0d:33:e7:9d:07:36:49:75:0d:b1:62:89:57:b3:33:
70:75:3e:4e:0a:bc:d6:cd:1d:90:57:74:a5:2a:01:
3f:46:27:3e:18:17:73:a0:f1:92:cf:d4:7b:46:70:
d8:94:40:af:6e:40:16:23:78:b9:e2:23:65:cd:11:
78:08:3f:60:0d:5f:68:66:15:97:52:78:c6:72:42:
5f:06:cd:0d:52:fc:d8:1b:ef:13:73:cd:ba:d8:76:
8d:be:40:71:b6:4c:7c:6d:50:cf:f2:22:7e:ae:c4:
ca:70:2f:29:2e:bc:f1:b7:7b:5f:00:15:22:83:29:
f9:86:11:1e:69:1f:ef:90:83:d0:b0:22:15:73:f7:
90:20:e7:3e:63:f6:3f:cf:b3:bf:f3:c9:2d:81:dd:
58:6f:5c:f8:f3:4b:7c:db:df:2f:3d:23:5c:ca:70:
ee:24:eb:ac:05:52:4f:e2:57:9a:08:ed:4c:f0:a2:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:17:94:15:B1:4D:6F:03:94:90:41:C7:76:1A:DD:01:D6:97:BB
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/wc8XlBWxTW8DlJBBx3Ya3QHWl7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.101.0/24
Signature Algorithm: sha256WithRSAEncryption
83:03:68:10:09:a6:15:5d:14:ef:3d:10:4f:ac:0f:d1:41:a1:
ff:87:28:71:0c:29:25:c1:49:9b:43:6a:a3:d3:83:d8:3f:07:
94:94:9f:93:da:1a:cc:b6:32:3f:94:df:a2:bb:c4:3f:b8:03:
ac:2e:67:06:e3:43:47:d4:92:81:3d:f0:49:2a:4b:a6:39:38:
38:d2:15:40:b5:4a:e9:04:d3:e2:d1:2d:f4:fe:bb:28:28:cf:
fc:df:64:90:92:8a:b4:02:55:9a:4b:72:d2:3b:d1:cc:61:0c:
c0:47:8f:09:3b:f4:24:7e:41:39:03:35:09:54:53:c1:70:fc:
ee:79:8d:c5:47:ba:2a:16:fe:c7:6a:af:da:06:f9:ab:5e:6c:
8f:e8:ac:a6:5c:ae:35:1e:b4:b8:62:88:d6:02:26:42:41:f3:
4c:6c:27:9b:cb:32:1c:6d:5f:a8:5c:de:1c:1d:fc:20:94:d9:
30:90:8e:a2:fe:12:1e:dc:55:45:01:a9:a4:82:60:98:ae:d8:
04:d9:40:4a:46:4a:a1:52:27:f5:35:b5:e6:74:71:6f:cb:80:
12:6b:f4:ea:82:44:c8:85:ff:4f:8f:44:0e:f2:ed:02:5a:90:
3c:68:86:07:4e:56:b5:cc:15:aa:07:93:38:91:f1:e5:8f:95:
d7:6d:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:54 2023 by rpki-client on console-fra.rpki-client.org