Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/DoPLLKuOzUcdHF8TdPAveJtMpH4.roa
File: DoPLLKuOzUcdHF8TdPAveJtMpH4.roa (raw, json)
Hash identifier: m5ynJ4leixDuBJgOg46tHoJPqa5wdnpmmB5OBWNvSvc=
Subject key identifier: 0E:83:CB:2C:AB:8E:CD:47:1D:1C:5F:13:74:F0:2F:78:9B:4C:A4:7E
Certificate issuer: /CN=b9f1d5b06f5701555ff5888154dd141b48896117
Certificate serial: 07987ACE
Authority key identifier: B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/DoPLLKuOzUcdHF8TdPAveJtMpH4.roa
Signing time: Sat 01 Jan 2022 06:56:55 +0000
ROA not before: Sat 01 Jan 2022 06:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 176.114.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127433422 (0x7987ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f1d5b06f5701555ff5888154dd141b48896117
Validity
Not Before: Jan 1 06:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e83cb2cab8ecd471d1c5f1374f02f789b4ca47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:78:d7:bd:6a:fa:25:fe:a1:1d:6d:4a:ad:
f3:01:33:97:86:3b:9b:39:b8:d2:03:b6:e4:e5:2a:
7d:d4:e2:2e:bc:8d:a2:97:32:a0:aa:8f:4a:ff:c9:
63:e0:e9:a7:1b:8c:66:4c:a1:ac:d0:58:cf:65:b2:
ff:45:4d:15:04:24:83:92:8c:73:8b:61:0c:43:9e:
e3:05:6a:09:95:70:7d:16:a5:08:65:da:95:91:4c:
7e:a8:9a:51:67:a3:d2:11:95:10:1c:2a:a8:93:a6:
5d:3d:ca:92:63:47:0e:04:8f:e2:41:1b:4b:a8:a6:
b6:e5:26:cf:06:15:bf:61:7f:ff:21:65:bf:51:9b:
07:dc:73:b5:f4:0a:bd:c2:5f:ba:f2:9c:bb:3e:ae:
d9:2e:36:60:5e:fc:33:65:89:e4:bb:d5:8d:c0:ad:
d2:ec:c6:d0:c3:82:80:ab:00:3e:f1:2b:1d:2f:ac:
76:37:29:05:63:1f:5a:8b:d9:69:c8:ad:60:50:48:
e5:e8:84:0c:c0:75:fa:4e:93:35:56:5f:ff:2c:bc:
7c:d6:20:64:f5:e8:1e:6c:6e:bc:8a:b1:a5:a7:01:
2a:10:da:2c:b2:e7:8d:dc:3a:e1:54:96:75:e6:1b:
d9:4b:17:af:7e:50:e9:05:5d:59:b8:c8:29:a0:de:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:83:CB:2C:AB:8E:CD:47:1D:1C:5F:13:74:F0:2F:78:9B:4C:A4:7E
X509v3 Authority Key Identifier:
keyid:B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/DoPLLKuOzUcdHF8TdPAveJtMpH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:a1:b7:26:06:f6:0d:f3:a0:45:6b:b0:c5:81:76:46:01:e8:
ea:1b:97:28:d4:f7:b8:ad:09:f9:c1:95:76:9a:44:6e:3a:1d:
79:b6:c7:41:a9:3c:d1:78:9a:4b:a4:6c:49:f0:98:bf:ce:56:
41:9f:ca:40:f8:31:7c:78:26:44:d2:9f:b5:64:75:75:d7:a0:
04:24:8b:31:ca:dc:a0:1e:8e:4b:43:63:a2:d9:17:44:53:17:
d5:1d:71:58:15:ae:0e:ec:2e:7e:c3:3d:fb:e3:f6:1d:f8:c4:
61:69:f2:e1:20:91:9a:9a:f9:fc:a1:3a:89:09:c7:2e:ff:30:
3a:db:5c:a0:75:bf:37:3c:ac:49:6d:42:fd:1a:81:f7:8e:28:
8d:81:e7:db:2f:b2:69:21:2b:0c:5b:3c:7a:a0:d5:c2:77:5e:
94:9a:26:b5:4b:22:d1:b5:96:d1:ab:87:d1:d6:2b:9d:15:02:
9e:d1:37:5e:5c:e0:56:19:2c:21:60:46:43:62:75:de:84:60:
f2:fc:9b:b1:c2:a8:0c:62:6a:55:94:55:f4:c0:06:f7:4d:26:
7d:6b:29:16:28:25:13:1a:2d:f8:62:56:3d:d3:30:03:5f:16:
2e:e8:b4:72:a8:bc:b4:db:e2:50:d2:3c:77:5f:20:2f:8f:00:
36:1e:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:22 2023 by rpki-client on console-fra.rpki-client.org