Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c75011-e2ba-4bf9-b4bd-ba350fddfb7b/1/OXaIE5XNMtIaVWLY3oYNQaAHYzc.roa
File: OXaIE5XNMtIaVWLY3oYNQaAHYzc.roa (raw, json)
Hash identifier: KJWAvuoZGqy6TKPFcM617kYyuLqG5PNntVbVE2jW89M=
Subject key identifier: 39:76:88:13:95:CD:32:D2:1A:55:62:D8:DE:86:0D:41:A0:07:63:37
Certificate issuer: /CN=f399049ef929fa36f8d6d1b0d9a9dd0710657cdb
Certificate serial: A3516F
Authority key identifier: F3:99:04:9E:F9:29:FA:36:F8:D6:D1:B0:D9:A9:DD:07:10:65:7C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85kEnvkp-jb41tGw2andBxBlfNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c75011-e2ba-4bf9-b4bd-ba350fddfb7b/1/OXaIE5XNMtIaVWLY3oYNQaAHYzc.roa
Signing time: Sat 01 Jan 2022 02:01:39 +0000
ROA not before: Sat 01 Jan 2022 02:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 176.97.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10703215 (0xa3516f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f399049ef929fa36f8d6d1b0d9a9dd0710657cdb
Validity
Not Before: Jan 1 02:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3976881395cd32d21a5562d8de860d41a0076337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:01:b4:ee:e3:db:4d:73:ab:5c:90:24:23:
30:1a:b2:4e:f9:12:e7:a6:1a:9b:cc:f2:9a:84:21:
3b:d2:42:3d:36:5d:3a:3a:0f:b8:4b:a7:0b:3e:37:
c9:df:bf:60:00:a0:00:fd:c7:5b:ae:2c:98:47:6d:
4f:b4:ad:d1:fc:46:34:df:10:0b:95:7f:bd:a2:13:
9c:0d:e7:2a:92:13:99:1e:d9:c5:ee:68:ab:1c:ce:
68:89:5b:8c:1c:f1:63:91:47:ca:60:d7:d2:60:9b:
28:e0:2b:07:b3:65:9f:57:17:46:a0:32:ca:dc:6e:
7b:ce:21:7c:b9:86:52:6b:be:be:5d:ba:3f:d1:51:
37:b3:03:f8:de:f6:2d:b3:9f:2d:31:87:ef:bd:3d:
47:50:f3:ee:aa:0f:5e:9e:83:1f:d9:22:ab:02:7f:
13:0b:e9:79:65:c3:96:99:d5:6c:5a:c2:bf:d4:bd:
1a:90:2c:bd:2a:ae:9e:1e:de:81:94:86:31:02:cf:
88:29:ca:64:7f:a8:34:a2:d6:7b:b2:49:fd:8c:1a:
1c:c5:7d:4b:5f:f7:10:9f:8b:6d:c4:36:04:f9:28:
47:14:13:18:a9:a3:83:4d:51:1a:e2:eb:da:09:2c:
5e:b5:f5:8b:75:24:2c:3c:f8:8a:cf:c5:53:6c:86:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:76:88:13:95:CD:32:D2:1A:55:62:D8:DE:86:0D:41:A0:07:63:37
X509v3 Authority Key Identifier:
keyid:F3:99:04:9E:F9:29:FA:36:F8:D6:D1:B0:D9:A9:DD:07:10:65:7C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85kEnvkp-jb41tGw2andBxBlfNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c75011-e2ba-4bf9-b4bd-ba350fddfb7b/1/OXaIE5XNMtIaVWLY3oYNQaAHYzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c75011-e2ba-4bf9-b4bd-ba350fddfb7b/1/85kEnvkp-jb41tGw2andBxBlfNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b9:bb:d6:46:92:82:b6:4f:a3:1b:22:8f:0d:db:60:55:e0:
f9:09:42:de:aa:5f:fe:71:f8:e8:b3:c5:b5:05:7e:7d:e6:97:
74:77:0f:d5:01:41:28:06:37:6a:1c:93:fd:7b:94:7f:eb:d0:
68:21:1c:9f:d6:b8:32:5d:c7:ea:22:d7:e9:5a:f3:28:cb:86:
06:c9:06:34:a4:8a:04:e9:b2:1c:6a:41:9d:b7:63:3d:68:7d:
73:53:41:ec:a1:e8:71:8f:b5:cd:5b:46:92:2f:3e:bd:c3:4d:
f5:eb:b0:cd:23:25:b6:77:70:a0:4f:77:ee:a5:bb:c7:34:3b:
59:42:0a:0c:c6:c5:1b:10:5f:6a:bf:c7:9f:54:df:f1:91:86:
15:e8:27:44:3d:27:10:20:2a:ac:73:9d:8f:3a:d4:0b:5c:0d:
3c:dc:a2:de:a4:9e:e4:47:5b:75:23:c1:e0:4a:bd:64:a7:77:
69:e5:0c:ac:c8:0e:e1:a7:df:68:11:1a:ac:6a:68:18:3c:44:
a8:5c:61:41:42:76:6c:eb:c8:dd:58:78:4b:36:21:1b:f4:27:
dc:44:90:67:7c:b8:16:e8:62:2d:a1:26:13:8f:85:a4:82:16:
10:49:87:41:d6:76:7d:04:b1:0c:5a:a3:c7:82:6a:d9:fe:63:
e5:50:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:14 2023 by rpki-client on console-ams.rpki-client.org