Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Jzy-Zd_laItU70wCUVN6Sz--uW0.roa
File: Jzy-Zd_laItU70wCUVN6Sz--uW0.roa (raw, json)
Hash identifier: Df/ThrwDHTks0pDroWual6C0fxapqSdBILgRxfhuOyw=
Subject key identifier: 27:3C:BE:65:DF:E5:68:8B:54:EF:4C:02:51:53:7A:4B:3F:BE:B9:6D
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 07AFFF02
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Jzy-Zd_laItU70wCUVN6Sz--uW0.roa
Signing time: Sat 01 Jan 2022 08:01:52 +0000
ROA not before: Sat 01 Jan 2022 08:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209484
IP address blocks: 176.113.71.0/24 maxlen: 24
176.113.69.0/24 maxlen: 24
176.113.70.0/24 maxlen: 24
176.113.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128974594 (0x7afff02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=273cbe65dfe5688b54ef4c0251537a4b3fbeb96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:4e:82:26:8c:b5:36:75:56:72:ea:f9:da:
7c:d9:6f:c0:4a:7c:b0:fd:89:42:13:5a:cc:0c:59:
e4:18:3f:69:6e:75:18:6c:80:0b:f5:8d:99:c6:9e:
d2:bc:90:75:cc:6f:84:4c:99:35:1b:e6:7d:2b:30:
0c:b7:9f:af:a0:0c:a7:7a:7b:a1:17:42:d5:fe:ad:
b0:12:70:77:b3:82:88:19:09:18:f5:7e:f1:6d:89:
32:36:9a:ee:3e:90:82:b5:22:9e:d9:45:a6:9c:59:
fa:36:c1:0a:cc:e8:95:84:7a:0d:be:11:99:c8:a8:
f3:68:ac:ec:8f:2c:3e:59:3f:a6:02:e1:84:63:d1:
8b:d7:0e:8b:21:01:63:a1:d7:bc:10:61:e8:42:62:
a0:37:4d:d6:e0:76:53:54:2b:55:c7:fc:e4:e2:65:
e4:ba:5c:1f:f3:95:c7:71:ed:3e:0b:65:92:fe:a5:
57:e2:d6:37:dd:a3:7c:15:2d:cb:2b:19:5b:ba:a0:
d9:cf:d6:43:d2:df:e2:b1:43:d0:2b:7d:eb:ad:3c:
21:04:ad:d2:51:71:f7:ed:15:e3:7b:ed:fd:e3:55:
43:0a:18:b5:3e:06:0b:8c:46:cf:90:a2:03:bc:94:
3b:4f:5b:1c:02:0f:12:1e:0b:1f:57:2f:9a:34:ed:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:BE:65:DF:E5:68:8B:54:EF:4C:02:51:53:7A:4B:3F:BE:B9:6D
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Jzy-Zd_laItU70wCUVN6Sz--uW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.68.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ae:63:5e:05:c1:03:65:60:14:22:eb:09:55:a8:d2:e9:2a:
e4:2e:ef:82:76:f2:b4:f1:c4:a9:9b:b4:76:21:e2:83:b0:2f:
91:a4:2d:7d:dc:35:f2:27:c7:9b:c4:1e:6e:27:22:0a:1f:ef:
ac:dc:22:2a:f7:82:f6:7b:89:2a:fd:35:2d:01:2c:f8:c6:24:
e1:d4:e7:41:d2:ce:05:b0:cf:c2:72:80:5c:9b:90:11:f1:6e:
bd:a9:14:41:16:72:6d:94:9e:89:cf:71:7f:8a:f6:80:3c:91:
56:93:09:fd:46:ca:7c:8e:29:d4:7c:66:80:94:ff:e0:f3:45:
72:ea:72:3d:26:cc:1b:c1:ac:3c:81:ff:d7:9a:f8:78:d5:bb:
fe:cb:ac:8c:5c:fe:b9:13:5b:6a:3b:3d:cf:8b:f3:99:fa:c5:
00:4a:b1:82:3e:9f:c3:96:9d:81:30:1c:ed:08:7e:0b:ce:93:
03:49:64:a6:0c:7a:31:6d:4e:06:f0:97:54:e6:67:6f:06:38:
c1:b9:58:eb:4a:fe:b3:7d:1a:c7:14:b7:f4:22:f1:a6:e8:26:
d5:aa:d0:4c:79:ae:53:fc:49:ee:16:fe:b1:fc:3b:51:90:7d:
8d:34:f7:60:3d:c0:c2:5e:f9:d3:d4:e1:ac:17:0f:c8:91:94:
51:97:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org