Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/zT6t6VptXZe8cOe_PM7k40exs-4.roa
File: zT6t6VptXZe8cOe_PM7k40exs-4.roa (raw, json)
Hash identifier: 2y9ySLUaBEAW/x/jmQGNP4h+vtzuGAlJCEPz0lmDpdM=
Subject key identifier: CD:3E:AD:E9:5A:6D:5D:97:BC:70:E7:BF:3C:CE:E4:E3:47:B1:B3:EE
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 13697BA6
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/zT6t6VptXZe8cOe_PM7k40exs-4.roa
Signing time: Sat 01 Jan 2022 15:02:10 +0000
ROA not before: Sat 01 Jan 2022 15:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21005
IP address blocks: 176.122.210.0/23 maxlen: 23
176.122.211.0/24 maxlen: 24
176.122.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325680038 (0x13697ba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Jan 1 15:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd3eade95a6d5d97bc70e7bf3ccee4e347b1b3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:74:fe:83:b9:54:9c:53:e9:f9:89:e2:e4:
50:99:64:7c:f9:45:60:2d:b6:01:4b:08:32:4a:03:
40:5d:2a:8d:a6:7e:c7:c9:e2:1a:18:89:49:4d:b3:
f6:97:65:f5:b5:9e:f4:47:8f:b8:a2:4a:b2:2f:4e:
ec:34:07:35:e2:1b:ea:3e:62:ea:0b:b4:69:6b:bd:
27:41:2c:be:6d:d9:4f:d3:ee:a2:43:31:6a:1f:07:
64:59:18:49:24:fe:73:0d:c8:9d:25:62:9c:9a:97:
71:09:97:d6:65:a8:51:c1:48:3d:d6:a2:90:3a:78:
69:67:3b:1a:f3:ac:99:28:2b:49:b7:36:4a:e9:05:
16:24:ec:70:11:78:e5:0b:d6:5d:7f:e3:33:27:e9:
c0:71:95:be:a7:8c:67:27:9e:b2:4f:fc:b9:ed:51:
e9:d6:46:fb:de:12:5a:ee:2e:00:5a:16:60:68:3d:
73:f2:e2:7f:79:ed:e1:b2:b4:8a:b4:c5:d1:02:84:
aa:67:3e:61:42:62:60:ba:23:30:37:4f:38:7f:53:
bd:5e:03:82:13:c7:b7:93:39:22:f8:05:e3:67:b3:
f7:0a:ad:4c:b6:59:4a:58:06:92:01:24:82:55:e6:
a7:ad:0e:94:37:69:a2:9d:e0:b5:bf:5e:da:3f:1a:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3E:AD:E9:5A:6D:5D:97:BC:70:E7:BF:3C:CE:E4:E3:47:B1:B3:EE
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/zT6t6VptXZe8cOe_PM7k40exs-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.210.0/23
Signature Algorithm: sha256WithRSAEncryption
57:0a:b8:87:3a:39:42:c9:f9:3f:4b:a9:9b:6f:09:89:65:72:
3e:23:f4:8d:f5:d9:02:f0:03:7c:91:8c:a7:fd:6c:f2:ab:33:
d4:82:ab:cc:d4:56:53:42:c8:15:cd:6a:a7:f2:fa:55:9d:77:
c7:6d:23:ac:75:5c:08:e3:3f:7a:63:7e:62:bc:95:6a:e7:8d:
11:e2:b2:66:2a:dc:d0:9b:88:7e:43:d9:ef:c4:b2:63:54:f9:
93:18:a7:79:17:e5:86:94:80:7b:06:5a:c0:4d:cd:0c:a7:1e:
57:f3:55:d4:be:ff:63:91:fa:00:47:c0:eb:bf:34:d4:ef:9a:
bf:ab:f1:bc:a4:c5:75:67:7b:2b:95:08:7d:20:fd:c6:71:8e:
2b:78:6a:69:9d:67:be:02:d1:eb:cb:d0:6b:43:cc:9b:0f:57:
77:54:d8:cf:72:0d:f4:98:38:bf:4c:fb:4b:1c:4d:bf:d2:e4:
ac:f5:a1:3d:ee:68:1f:97:45:95:60:99:10:9a:0f:fa:0f:2c:
e9:fb:87:7b:a7:02:41:93:d6:d1:83:b4:55:c5:4a:f7:eb:b1:
8a:ca:1f:b5:13:f7:a3:17:87:f1:ba:54:95:41:4a:9b:45:a7:
2d:c8:6f:92:d8:32:a0:a3:f1:6c:9a:16:e7:ba:17:22:6c:11:
5e:c3:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:13 2024 by rpki-client on console-fra.rpki-client.org