Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/1-wLyaaccCbo_8YnBivTxRQNsr9Q.roa
File: 1-wLyaaccCbo_8YnBivTxRQNsr9Q.roa (raw, json)
Hash identifier: LCTI/c31Iwj4FqCRTykbWvIN07ih9HBcJ5dtLcw5tiE=
Subject key identifier: FB:02:F2:69:A7:1C:09:BA:3F:F1:89:C1:8A:F4:F1:45:03:6C:AF:D4
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 01823FF9F98934C48C14064AB21B6566C0A4
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/1-wLyaaccCbo_8YnBivTxRQNsr9Q.roa
Signing time: Wed 27 Jul 2022 14:05:23 +0000
ROA not before: Wed 27 Jul 2022 14:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39431
IP address blocks: 176.108.112.0/24 maxlen: 24
176.108.111.0/24 maxlen: 24
176.108.112.0/22 maxlen: 24
176.108.108.0/24 maxlen: 24
176.108.108.0/22 maxlen: 24
176.108.109.0/24 maxlen: 24
176.108.106.0/24 maxlen: 24
176.108.106.0/23 maxlen: 24
176.108.116.0/24 maxlen: 24
176.108.116.0/22 maxlen: 24
176.108.112.0/21 maxlen: 24
176.108.118.0/24 maxlen: 24
176.108.117.0/24 maxlen: 24
176.108.120.0/22 maxlen: 24
176.108.119.0/24 maxlen: 24
193.93.17.0/24 maxlen: 24
193.93.16.0/22 maxlen: 24
193.93.16.0/23 maxlen: 24
193.93.16.0/24 maxlen: 24
193.93.19.0/24 maxlen: 24
193.93.18.0/23 maxlen: 24
193.93.18.0/24 maxlen: 24
176.108.96.0/21 maxlen: 24
176.108.100.0/22 maxlen: 24
176.108.103.0/24 maxlen: 24
176.108.102.0/24 maxlen: 24
176.108.104.0/24 maxlen: 24
176.108.104.0/22 maxlen: 24
176.108.104.0/21 maxlen: 24
2001:678:468::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:f9:f9:89:34:c4:8c:14:06:4a:b2:1b:65:66:c0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Jul 27 14:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb02f269a71c09ba3ff189c18af4f145036cafd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:e2:00:3c:da:59:95:c0:47:28:2f:f8:0a:
89:5c:2d:6a:0d:89:da:39:d6:3f:1c:15:43:b5:10:
2b:31:24:98:7d:0a:02:4f:e5:e5:b5:7b:0e:80:a2:
20:3b:4c:6a:95:00:2a:76:3e:e1:e8:ae:24:14:71:
9c:15:b0:ba:8a:a7:6b:91:00:1c:58:2c:ce:b5:64:
83:38:ba:31:50:64:d7:a0:1b:bb:65:5a:85:1c:ca:
45:82:cc:b9:07:18:af:8b:72:44:1b:ca:9a:b9:f9:
e7:2a:75:53:4b:f7:9b:e0:31:48:ef:0c:2d:85:cb:
c0:82:0e:4d:d5:d5:9d:0b:f8:29:e8:c6:86:78:57:
27:80:16:8a:29:ed:63:03:62:db:60:f4:46:22:e5:
9e:94:fd:9e:35:6a:9a:ef:a8:b9:90:b0:c2:f5:82:
7e:d6:87:ee:ec:f3:2b:2e:2d:ee:57:d0:5c:6d:e3:
2e:2e:1d:47:0f:dd:d3:5f:8e:99:e0:28:50:e0:02:
e7:ee:f8:4e:d0:f3:13:2e:5c:f8:7e:73:bf:ce:68:
f5:08:3e:35:3d:7c:d1:04:02:64:1c:e8:75:8d:4e:
68:b4:49:71:a7:63:d5:d9:ee:8d:60:cf:19:f7:4f:
08:a1:38:66:ca:14:ef:a9:02:3a:fd:f7:22:4b:41:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:F2:69:A7:1C:09:BA:3F:F1:89:C1:8A:F4:F1:45:03:6C:AF:D4
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/1-wLyaaccCbo_8YnBivTxRQNsr9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.96.0-176.108.123.255
193.93.16.0/22
IPv6:
2001:678:468::/48
Signature Algorithm: sha256WithRSAEncryption
42:fa:ae:a6:ac:41:fa:02:41:dc:26:c7:df:02:5c:26:98:33:
a2:4e:75:1b:4e:fc:2e:04:7d:c4:4d:2d:bd:58:5f:aa:0a:61:
f8:26:a2:fa:b4:b4:c7:51:cf:b9:74:98:1e:81:40:b6:bb:67:
1a:0c:51:89:93:b7:73:74:12:7b:fe:7d:52:8d:ee:72:f8:35:
28:c2:06:57:0c:15:af:74:45:5d:9c:e7:0a:82:3f:28:7e:d4:
5b:2e:a8:7a:fd:4d:2a:71:70:27:8a:a2:c5:c4:b2:60:27:63:
02:47:39:66:f9:57:f7:5a:d2:e5:87:a4:1d:ac:2d:30:9f:09:
c9:52:1a:58:ff:e9:2e:dc:71:9e:ac:e1:67:e7:83:f3:43:ba:
8c:a5:9a:63:bc:ec:6b:0a:e3:3e:a9:81:bf:52:49:73:bf:db:
99:8e:cd:96:15:0c:60:4b:da:5f:6e:52:a6:f9:c4:c7:b5:b5:
63:2c:02:5f:f5:b7:e1:e0:64:1d:bb:3c:5e:f3:a5:02:b2:61:
88:40:f5:df:61:ee:81:b9:5e:5e:f3:b7:47:5d:a2:23:39:5d:
6f:0b:6f:f3:89:a9:e9:dd:63:80:3b:6c:e9:f2:bc:f0:7d:26:
86:f7:e8:74:3d:0f:71:54:aa:f2:4a:7f:a9:fb:55:6b:f7:13:
cf:b6:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:54 2024 by rpki-client on console-ams.rpki-client.org