Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xF1ZKxeQXu8mwQctd-kFb5D0yKU.roa
File: xF1ZKxeQXu8mwQctd-kFb5D0yKU.roa (raw, json)
Hash identifier: oPonVPiBHRlxBA9cT+kB3Hcuw0VGILvC1gMRKTqsjDE=
Subject key identifier: C4:5D:59:2B:17:90:5E:EF:26:C1:07:2D:77:E9:05:6F:90:F4:C8:A5
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0184CF3005F2E60992B99B3E0B1CACEF923A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xF1ZKxeQXu8mwQctd-kFb5D0yKU.roa
Signing time: Thu 01 Dec 2022 19:35:41 +0000
ROA not before: Thu 01 Dec 2022 19:35:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 176.105.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:30:05:f2:e6:09:92:b9:9b:3e:0b:1c:ac:ef:92:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 1 19:35:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c45d592b17905eef26c1072d77e9056f90f4c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:e2:e7:47:89:43:40:60:5d:5f:55:cf:6f:
f9:f6:58:16:7d:79:b3:04:5c:94:c8:6e:24:be:2f:
c3:a4:f7:cb:4d:56:2a:c5:9b:af:52:6f:dc:b3:69:
41:36:12:05:84:c5:a2:94:95:28:97:6c:7d:ee:f5:
fe:af:dd:5c:f4:b6:b8:8e:04:a0:ed:27:da:f3:5a:
e3:82:56:2b:88:b4:fc:22:c3:27:b4:0f:b3:14:50:
f6:da:c9:64:11:86:70:bd:cf:38:f4:2b:ea:5f:0d:
c0:a8:fc:f9:d6:1f:22:a6:4b:d8:ea:ff:ba:18:2a:
fb:e8:4f:32:62:a5:b7:9b:64:65:4a:d9:50:43:f9:
01:fd:4e:95:86:c5:23:eb:a2:d1:5d:96:9d:b8:22:
16:73:ea:30:94:cf:08:51:f3:7a:b2:54:d6:ec:02:
87:0b:fb:c5:2c:11:9d:bf:bd:36:61:b2:14:88:1f:
35:2f:06:35:5e:4f:ce:9a:d3:d9:88:13:d2:d2:aa:
7a:5c:18:fd:be:39:ec:4f:ae:f7:83:1b:4d:c8:72:
ea:df:a4:27:c7:a7:5d:65:be:84:a0:be:51:4c:90:
3d:34:a2:91:a3:32:6e:45:d0:18:50:9d:fb:d7:63:
2c:e4:09:9e:f8:47:b7:8d:95:b2:e1:8b:d3:dd:08:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5D:59:2B:17:90:5E:EF:26:C1:07:2D:77:E9:05:6F:90:F4:C8:A5
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xF1ZKxeQXu8mwQctd-kFb5D0yKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c8:4a:09:c0:4a:85:07:e9:b9:93:84:81:48:4d:a6:62:a1:
7a:ec:fd:37:76:5e:90:d2:e9:16:cb:2d:8c:87:32:da:62:38:
8d:07:a4:52:c1:c0:9a:e1:b4:d0:75:ae:90:2c:5b:ad:89:fe:
2a:da:12:5b:d6:03:d1:f2:0c:b3:f8:3f:68:e8:26:e7:51:34:
e7:52:c4:c1:62:67:7b:f9:43:5b:93:1c:f6:1b:cb:59:44:31:
1f:13:cb:f7:cf:14:b4:c7:67:a7:22:b5:25:b4:43:50:f6:31:
a6:25:ea:20:9e:ee:61:02:69:b3:58:24:9b:fe:24:c3:f8:b0:
e8:0f:a3:a1:8e:8e:70:38:64:34:64:94:84:59:14:b7:de:fc:
c7:4e:15:ac:1f:83:b7:e0:89:f3:67:5c:3b:87:ef:31:27:b8:
80:28:7f:3c:17:b2:11:87:bc:48:dc:d5:3c:07:c9:1b:75:23:
bd:ec:61:8a:74:05:4e:8a:c1:53:5e:69:3f:c2:7b:78:5d:7b:
c8:ce:9a:a5:20:77:b0:bf:67:73:ec:8d:7d:42:85:6e:61:6f:
40:28:a8:f0:e3:27:97:af:8d:ad:8e:7d:c0:26:0e:7c:ee:39:
3e:fa:fa:2d:23:99:e7:e4:85:68:fa:f4:2c:10:dc:bb:cf:cc:
fa:92:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org