Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/h3wNaOCLvjxJsYoAEWZUFSaTROc.roa
File: h3wNaOCLvjxJsYoAEWZUFSaTROc.roa (raw, json)
Hash identifier: ogvvQ/Zqkfftz8DWf4l4OFetFX+B5BBXOoAGaJzCq3I=
Subject key identifier: 87:7C:0D:68:E0:8B:BE:3C:49:B1:8A:00:11:66:54:15:26:93:44:E7
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0762745E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/h3wNaOCLvjxJsYoAEWZUFSaTROc.roa
Signing time: Sat 01 Jan 2022 03:51:32 +0000
ROA not before: Sat 01 Jan 2022 03:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211094
IP address blocks: 176.105.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123892830 (0x762745e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 03:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=877c0d68e08bbe3c49b18a0011665415269344e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:0c:10:41:ee:92:c1:8b:ec:a7:82:ae:ed:
30:f8:08:35:bc:cf:b1:93:e1:a7:bd:6b:2c:2f:63:
1d:e1:6e:04:a3:fa:06:2b:5e:ba:7a:88:d6:0c:15:
19:7a:32:32:f8:a4:9a:2e:23:b7:04:2d:24:5a:f1:
66:d4:55:48:72:30:6d:1f:8d:93:de:9c:b7:2a:87:
35:26:8a:c0:36:d1:76:90:e5:76:ff:61:81:38:45:
ad:b9:50:27:4f:74:95:5b:18:a9:cd:c3:f7:00:40:
d2:4e:cc:e6:f3:51:8d:35:e6:4c:aa:00:4e:e8:82:
b3:fc:5b:51:e2:c3:71:e5:26:fb:0e:3a:25:d0:29:
2b:24:a9:3d:68:75:ef:2a:ed:e3:94:d9:2b:46:a5:
24:be:2b:9a:7c:e2:f2:95:a3:2e:14:d1:d3:96:d3:
4a:43:9b:17:08:aa:fa:38:59:41:23:0b:44:5f:42:
9c:8f:c0:cd:d2:3d:b3:6e:a7:d9:66:db:cd:73:c8:
24:89:c1:4c:98:74:b6:fe:1c:47:d1:b1:d3:ff:8c:
58:a7:00:0a:f4:96:30:26:7b:93:e7:3e:8c:e5:17:
0f:05:ff:59:03:3b:70:ae:e8:e7:0a:c2:cb:23:63:
1d:4d:60:35:d7:e5:66:a8:90:0c:f7:ed:5e:96:cb:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:0D:68:E0:8B:BE:3C:49:B1:8A:00:11:66:54:15:26:93:44:E7
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/h3wNaOCLvjxJsYoAEWZUFSaTROc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
80:74:88:55:bc:10:77:f5:97:19:5e:b4:25:20:49:02:0b:fc:
a7:7b:dd:c2:f9:a5:d1:d1:77:af:83:8e:08:b6:83:20:66:b6:
5b:34:ca:cb:01:bc:a5:7e:cb:2f:4c:57:28:c4:19:5b:86:68:
60:c4:0a:d2:24:d1:9c:b6:dd:1f:f8:75:e6:a6:a8:77:eb:1e:
67:77:b0:6c:69:06:90:e1:c3:2c:6e:ff:fb:7a:90:e5:e8:e9:
45:fd:e3:23:31:8b:35:20:14:7a:90:9b:a4:cc:5e:42:30:a3:
e1:58:d4:c3:ea:d3:a4:d8:d3:33:a7:24:27:be:bf:b9:4b:eb:
4c:ca:e4:05:1e:1b:fd:28:07:de:ac:33:00:0f:96:39:1a:2b:
6b:b7:c8:3c:6e:bd:b7:db:66:fd:e0:70:b4:07:7a:63:40:6b:
fc:0a:f0:40:0f:7a:a4:a0:e5:8a:cf:31:9a:11:d6:38:94:91:
1d:8c:dd:91:ca:ad:b8:95:c9:c3:af:f5:c8:25:a2:45:39:fd:
5e:22:f1:32:0f:b9:d2:94:dc:c9:51:2d:9c:e3:b3:66:69:ac:
ab:1b:db:6e:49:b9:af:6a:f6:89:a6:4c:71:be:cb:a2:e4:0d:
66:d6:0e:8a:1a:ea:24:ae:0c:c3:20:58:b1:e5:12:c2:c8:fe:
28:c2:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org