Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/cWR1cSm0moCJq4H7R0Kj-5fPjnM.roa
File: cWR1cSm0moCJq4H7R0Kj-5fPjnM.roa (raw, json)
Hash identifier: ludPGjkkyNR8kKTGbVzcQLREP+OMmNH//Jz6AfW198c=
Subject key identifier: 71:64:75:71:29:B4:9A:80:89:AB:81:FB:47:42:A3:FB:97:CF:8E:73
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 018226A1A22F18DCAA1004D25B37E0663A73
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/cWR1cSm0moCJq4H7R0Kj-5fPjnM.roa
Signing time: Fri 22 Jul 2022 15:58:23 +0000
ROA not before: Fri 22 Jul 2022 15:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39431
IP address blocks: 176.108.111.0/24 maxlen: 24
176.108.112.0/24 maxlen: 24
176.108.112.0/22 maxlen: 24
176.108.108.0/24 maxlen: 24
176.108.108.0/22 maxlen: 24
176.108.109.0/24 maxlen: 24
176.108.106.0/24 maxlen: 24
176.108.106.0/23 maxlen: 24
176.108.116.0/24 maxlen: 24
176.108.116.0/22 maxlen: 24
176.108.118.0/24 maxlen: 24
176.108.117.0/24 maxlen: 24
176.108.120.0/22 maxlen: 24
176.108.119.0/24 maxlen: 24
193.93.17.0/24 maxlen: 24
193.93.16.0/22 maxlen: 24
193.93.16.0/23 maxlen: 24
193.93.16.0/24 maxlen: 24
193.93.19.0/24 maxlen: 24
193.93.18.0/23 maxlen: 24
193.93.18.0/24 maxlen: 24
176.108.103.0/24 maxlen: 24
176.108.102.0/24 maxlen: 24
176.108.104.0/24 maxlen: 24
2001:678:468::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:a1:a2:2f:18:dc:aa:10:04:d2:5b:37:e0:66:3a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Jul 22 15:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7164757129b49a8089ab81fb4742a3fb97cf8e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:e5:97:b0:cc:a8:0f:15:a9:51:92:69:af:
be:2a:5f:79:b3:7a:af:2b:a3:a5:6e:18:81:42:50:
a4:9a:73:0f:15:1b:ac:4c:f9:68:a8:10:be:a9:ef:
75:4f:36:a9:9d:34:81:1e:9e:18:b2:f8:f8:36:3b:
65:d7:46:1d:93:1b:96:84:ed:e8:9b:34:e7:7c:7a:
75:36:a0:8a:30:0b:3b:13:86:51:d5:de:a9:79:36:
c9:e6:9c:b6:81:9c:43:6a:b2:8d:a3:02:56:32:4c:
2e:1a:98:d8:4f:d7:c6:a5:e0:9c:20:c8:2c:34:b7:
8d:66:36:0d:42:bc:e5:af:c1:83:5e:05:46:13:66:
ed:04:1d:38:a7:13:82:fa:54:26:4e:fc:85:77:a9:
ed:1c:1f:2d:6e:f6:b2:22:06:82:9c:cb:06:6e:04:
65:0a:37:53:fe:01:1d:cb:5f:4b:58:92:55:f7:28:
c0:ce:d2:c8:2b:4d:bf:42:12:31:67:d2:b1:60:40:
b6:8f:3c:06:74:96:69:23:96:c1:92:36:c8:2c:87:
64:57:22:9f:1d:38:d5:f3:b5:66:a0:ac:c2:db:2e:
5b:63:88:b0:f8:74:92:9a:b2:62:32:fb:27:4d:ee:
e2:3a:0e:f8:77:55:47:fb:ba:0c:c4:68:e9:f9:5e:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:75:71:29:B4:9A:80:89:AB:81:FB:47:42:A3:FB:97:CF:8E:73
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/cWR1cSm0moCJq4H7R0Kj-5fPjnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.102.0-176.108.104.255
176.108.106.0-176.108.123.255
193.93.16.0/22
IPv6:
2001:678:468::/48
Signature Algorithm: sha256WithRSAEncryption
15:2f:a6:fe:aa:20:f6:9a:31:f1:25:04:2d:bb:38:50:e5:c0:
02:01:db:91:6d:ef:c7:46:e3:c4:af:fd:09:53:03:cd:d7:6f:
63:81:dd:b5:29:79:a1:cc:fc:0c:02:0c:26:0b:82:85:b6:e7:
0a:ea:84:7d:2f:6d:cd:a6:99:a5:bc:14:0d:f3:d6:70:0d:a3:
a0:1c:85:87:c9:8e:17:20:5a:f2:f5:b5:da:b6:90:47:98:23:
1f:f4:10:76:8f:b9:f8:eb:05:3c:42:11:95:d6:30:29:da:dc:
c8:ce:81:01:3c:5b:28:08:05:9e:f6:03:f7:51:1c:26:b2:a2:
7e:a4:d2:d4:93:b3:13:a6:d5:e6:c0:04:fd:77:69:83:fe:d6:
a6:d3:c6:7b:a6:6d:fd:4e:58:a0:0c:f4:51:23:8a:57:e7:26:
a4:dc:88:e3:b0:44:1f:80:b2:84:fe:47:d3:a6:b8:bc:99:1c:
99:52:92:8f:18:75:43:8f:fd:4e:ab:67:a7:2e:3e:14:59:db:
35:65:81:c7:4e:68:5d:eb:d2:ed:c5:e6:39:e0:19:a8:b5:34:
3e:2c:7f:a1:cf:51:cf:1e:fe:ca:4c:6a:6c:f2:00:2b:a5:c8:
26:1e:c0:14:a9:8f:33:6b:50:87:ee:c4:3f:f3:d6:e0:7f:03:
0c:cd:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:54 2024 by rpki-client on console-ams.rpki-client.org