Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/rmrre2sY4EP0IYEakydRWhl3lTY.roa
File: rmrre2sY4EP0IYEakydRWhl3lTY.roa (raw, json)
Hash identifier: lRWBir3E5T0tYr/pce1cUMXck+ZRV2hFLXFoCieE6l0=
Subject key identifier: AE:6A:EB:7B:6B:18:E0:43:F4:21:81:1A:93:27:51:5A:19:77:95:36
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 06AFCAEB
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/rmrre2sY4EP0IYEakydRWhl3lTY.roa
Signing time: Sat 01 Jan 2022 14:05:57 +0000
ROA not before: Sat 01 Jan 2022 14:05:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24971
IP address blocks: 176.227.168.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112184043 (0x6afcaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jan 1 14:05:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae6aeb7b6b18e043f421811a9327515a19779536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:c8:6a:c1:69:d1:da:7e:1d:7b:af:e0:f8:
41:ca:30:ff:c2:e6:6c:ca:79:56:1b:15:f8:5d:2e:
7e:11:7f:ab:cb:31:e0:47:22:a3:2c:4f:60:ba:eb:
5a:81:4f:e6:f0:84:62:00:62:ba:7b:83:99:b2:48:
d8:64:7e:45:d2:ab:60:40:61:aa:e9:e8:e5:d7:b3:
32:9d:8d:94:ea:87:c0:3b:91:4e:86:44:be:65:2b:
5a:b2:4c:89:a8:11:77:2f:d5:da:6f:60:d2:b7:e1:
58:1f:63:50:8e:b5:38:cd:50:40:49:8f:65:65:24:
89:eb:5f:59:8a:eb:c9:7c:c7:f3:c9:2a:3b:71:9e:
46:e6:af:7e:28:56:63:4b:af:c2:d0:eb:05:18:bd:
f9:d9:0b:01:13:8b:57:f8:be:fd:9a:3f:16:8a:9c:
b9:53:cc:3e:5a:0e:8e:60:73:5e:dd:83:21:43:b4:
29:33:e8:bb:e5:26:31:cb:6a:50:1d:3c:59:4e:b4:
af:76:50:94:21:fd:fe:72:ba:1e:2d:b0:6e:75:db:
dc:24:02:e8:78:e7:09:a3:93:5e:52:ea:09:18:fd:
42:91:09:d5:12:ff:ae:85:be:71:3f:1c:5f:42:75:
46:34:79:1d:e0:83:72:03:98:85:47:69:41:27:6e:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:EB:7B:6B:18:E0:43:F4:21:81:1A:93:27:51:5A:19:77:95:36
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/rmrre2sY4EP0IYEakydRWhl3lTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.227.168.0/23
Signature Algorithm: sha256WithRSAEncryption
26:70:91:27:f2:5d:b9:e8:95:61:8a:1e:d6:97:c2:b5:c7:d1:
b7:f5:ee:ad:36:e6:2c:61:5a:9e:1f:00:a7:28:41:67:9d:56:
24:66:0f:4d:24:95:14:8d:00:d3:ee:75:51:0b:d1:ba:13:ed:
c9:bf:c3:35:dd:62:73:c7:37:fd:bc:af:51:8a:cd:82:92:b2:
e8:72:28:f7:aa:02:6e:a2:b5:b3:50:1f:29:cc:96:e0:d8:be:
eb:0d:dd:0a:34:0d:2c:c6:21:0d:bf:26:27:9a:e8:1f:b5:27:
4f:09:55:68:4a:bc:04:9b:32:c6:62:4c:a5:c8:26:c1:5b:3a:
7e:68:b2:80:92:8c:b7:f0:ea:b6:29:ee:43:0a:b7:32:72:51:
33:2c:95:b3:65:ce:67:0a:d2:33:54:91:4a:a9:26:0b:58:4f:
28:cc:7f:9d:93:f1:18:02:87:ad:79:9d:fc:8e:6e:fa:5c:2e:
2a:89:a2:63:7b:8d:54:d4:96:35:a5:ab:4b:d5:c7:e9:96:15:
aa:de:7d:63:a3:e6:df:e9:fc:99:67:cd:94:4d:a4:8a:85:0b:
92:38:01:b0:8a:ba:75:f6:c4:a9:8a:dc:8c:69:92:db:59:9a:
f4:fb:6d:1b:28:8e:60:13:5f:b5:64:af:c6:9c:c3:0e:c3:03:
b7:c4:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:58 2024 by rpki-client on console-ams.rpki-client.org