Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/pS9OCQAmXnq7acTLiJaz0rfswsk.roa
File: pS9OCQAmXnq7acTLiJaz0rfswsk.roa (raw, json)
Hash identifier: 0R0R9mYbtW75vT+i4jfB60T8qpAT1gDIjQ09f24UHvY=
Subject key identifier: A5:2F:4E:09:00:26:5E:7A:BB:69:C4:CB:88:96:B3:D2:B7:EC:C2:C9
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 052F0ED9
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/pS9OCQAmXnq7acTLiJaz0rfswsk.roa
Signing time: Sat 01 Jan 2022 08:57:31 +0000
ROA not before: Sat 01 Jan 2022 08:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210061
IP address blocks: 176.118.168.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86970073 (0x52f0ed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Jan 1 08:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a52f4e0900265e7abb69c4cb8896b3d2b7ecc2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:cb:3c:44:04:81:2a:ca:de:c2:34:83:7c:
18:0b:6c:e9:83:99:2b:cc:4e:92:bb:b1:0a:fe:b0:
e2:74:f7:4e:12:ce:c7:ec:dc:8f:8d:e7:28:53:61:
c9:2b:a0:03:9e:a7:9b:f5:f7:0e:aa:45:19:6e:cc:
08:57:fd:73:f0:fd:b0:ed:f8:10:f9:67:42:6e:d8:
8e:02:5f:00:d3:f4:07:65:3c:20:1b:67:2c:ba:22:
23:a0:55:5b:d5:f2:3c:ff:0c:fc:fa:f3:b8:0a:10:
1f:8e:6b:53:94:8a:00:1d:61:6e:b1:c5:cb:0c:6a:
86:4b:bb:8d:f8:35:82:99:7e:68:2a:cb:35:3c:0b:
6d:3a:20:d7:10:48:0b:45:48:be:75:26:67:38:5a:
09:3b:73:27:ad:e9:e1:0b:d6:47:93:c4:6b:0e:e2:
4c:db:0f:3a:77:ae:cc:f0:d3:41:e6:54:b4:26:3e:
d4:81:f7:4b:a1:78:c3:6b:a9:35:ba:05:44:d5:c8:
a3:13:fc:94:bc:bc:89:25:f4:ba:d8:b3:13:71:09:
2e:db:4a:31:99:a5:01:19:f9:f6:4e:20:c0:bb:51:
66:c7:78:28:a4:1b:12:f1:d2:c1:4b:ed:06:2f:cc:
98:f6:fb:15:7d:0c:c2:54:ff:fd:a0:d3:db:1c:a1:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2F:4E:09:00:26:5E:7A:BB:69:C4:CB:88:96:B3:D2:B7:EC:C2:C9
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/pS9OCQAmXnq7acTLiJaz0rfswsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.168.0/23
Signature Algorithm: sha256WithRSAEncryption
12:17:fd:a1:71:d2:43:6e:1a:4b:ab:ba:20:26:20:bc:54:fe:
66:c8:55:1a:68:8a:57:2a:79:dd:51:e8:eb:2d:06:72:d8:4f:
6e:cc:ec:48:7a:06:58:6d:cd:7d:fa:80:f2:c7:0a:d0:e4:d9:
c5:ea:7f:81:69:91:96:a5:b9:1d:e0:5e:78:68:68:1d:e9:cb:
c3:81:00:7e:27:86:59:31:78:b9:55:b6:56:f8:6b:c6:a0:80:
8f:44:56:b8:4a:32:56:4c:31:57:2c:3b:2f:e6:ca:0a:ca:c1:
af:66:fa:9b:ef:5a:a7:63:44:75:6d:7c:86:53:ea:46:84:52:
8a:d8:70:56:d7:d3:f0:3c:b1:c7:61:79:00:cd:61:a9:bd:7a:
7f:fd:a9:f0:85:1c:17:52:ca:61:cf:c6:64:5e:09:ea:3c:15:
8f:e5:40:25:dc:e2:36:ac:21:0c:89:3a:86:20:5f:9f:2b:41:
a0:59:73:6e:c7:9a:a2:3e:43:f5:85:d1:8e:2e:cf:06:f7:59:
5a:d9:3a:f1:b8:82:60:48:49:d8:3e:4e:a7:d9:d2:f1:1b:97:
c4:61:95:92:e4:94:e9:51:01:0c:7b:7b:66:8a:36:e2:c6:79:
e8:48:29:2d:1c:14:ad:44:d1:86:5d:e4:d7:0e:d5:e0:6f:c7:
0c:8b:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:49 2024 by rpki-client on console-ams.rpki-client.org