Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hzj22I429bXCMF691nzOhHsIajQ.roa
File: hzj22I429bXCMF691nzOhHsIajQ.roa (raw, json)
Hash identifier: rultT2LTdbR/p2Hvy7AIl8uPZXXXS70CwUr4bYTzgg4=
Subject key identifier: 87:38:F6:D8:8E:36:F5:B5:C2:30:5E:BD:D6:7C:CE:84:7B:08:6A:34
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0344D20E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hzj22I429bXCMF691nzOhHsIajQ.roa
Signing time: Sat 01 Jan 2022 16:04:38 +0000
ROA not before: Sat 01 Jan 2022 16:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209657
IP address blocks: 176.118.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54841870 (0x344d20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8738f6d88e36f5b5c2305ebdd67cce847b086a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:93:aa:d1:7c:3b:33:b4:23:7c:d7:00:2a:03:
f7:f2:a1:cc:3c:ea:63:f4:79:6b:09:51:fa:b8:fe:
d5:d2:a3:01:4e:f6:2e:bb:a7:56:d1:1e:d7:59:71:
36:72:2c:e6:54:68:34:c0:b4:87:36:07:10:09:bc:
b7:d3:91:68:06:19:47:9d:1e:35:52:ee:2c:cc:31:
7b:11:b9:be:3a:0f:18:56:31:3b:b1:71:85:1e:18:
df:46:15:22:32:72:ed:41:e2:d1:10:43:03:c7:9b:
55:44:77:2b:c1:6e:75:6b:a8:30:15:01:32:e7:06:
b9:1d:19:9a:18:97:5c:e9:9c:8d:18:3b:ea:7e:fe:
4d:27:0c:30:6d:5b:0f:26:95:2a:6d:16:0a:d1:10:
87:c2:72:c2:91:31:18:42:ab:28:27:4f:4e:5b:79:
95:0f:34:df:87:29:bf:e8:15:d1:ac:43:ba:3a:cb:
96:21:21:4d:5b:80:3a:af:13:be:52:63:3e:4b:c1:
5a:41:a8:cf:48:82:be:9f:49:b6:86:99:46:55:80:
5f:0b:8b:a5:20:a4:e3:70:28:84:f1:be:f4:e6:07:
ef:d1:48:06:ec:a0:03:fc:79:81:2d:6d:74:0d:ff:
bb:86:e5:dc:2f:0e:ee:89:7e:e3:d9:a2:f7:76:82:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:38:F6:D8:8E:36:F5:B5:C2:30:5E:BD:D6:7C:CE:84:7B:08:6A:34
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hzj22I429bXCMF691nzOhHsIajQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.196.0/24
Signature Algorithm: sha256WithRSAEncryption
88:61:51:96:53:b4:25:74:58:df:70:7e:3a:bb:1c:46:e3:3b:
c5:05:a8:d3:f6:28:bf:bc:71:79:af:2d:de:0d:b6:cc:41:d5:
88:07:9d:f2:a7:50:f2:04:d4:1e:8e:e6:a5:a7:97:db:94:a4:
50:69:ce:61:29:35:e4:23:d9:a0:07:b9:bf:5a:5d:b0:d7:66:
bb:ff:18:a2:40:88:47:23:ee:31:37:15:cf:a5:5c:3f:82:77:
ba:e0:ba:0b:15:dd:43:1f:33:42:26:df:c5:d4:10:63:06:fd:
b6:a3:07:e5:04:67:f2:0f:73:0d:bf:44:34:19:da:d4:37:79:
f6:e3:d7:ee:25:ff:10:2f:7a:33:ad:00:e1:ed:a5:2b:a2:36:
d0:de:85:8e:5e:43:af:4f:6d:00:aa:d7:61:c0:3e:6e:78:30:
79:c7:a5:6c:69:20:64:5b:8e:db:1d:41:e9:dd:a2:e1:29:e0:
d5:9b:1f:b8:32:f1:3d:12:2d:f2:39:ed:8d:32:6e:05:7a:7c:
c3:01:fe:13:b6:20:5f:36:6e:38:fb:ac:66:b9:02:58:39:79:
d7:8c:15:a8:68:2e:54:20:66:09:01:e8:9c:96:77:f3:cb:9f:
0b:c0:28:b1:04:e3:41:6d:75:b7:7e:75:cd:de:03:0c:4f:14:
92:d8:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org