Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/CU3FNirtp4yb3nlGQYkwSqlXEqs.roa
File: CU3FNirtp4yb3nlGQYkwSqlXEqs.roa (raw, json)
Hash identifier: p8jUiY5X/i3f7d1B5fbqLHGm7GgyRZWDjsexBx8tICc=
Subject key identifier: 09:4D:C5:36:2A:ED:A7:8C:9B:DE:79:46:41:89:30:4A:A9:57:12:AB
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 12407C7A
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/CU3FNirtp4yb3nlGQYkwSqlXEqs.roa
Signing time: Wed 06 Apr 2022 13:38:36 +0000
ROA not before: Wed 06 Apr 2022 13:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209517
IP address blocks: 176.96.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306216058 (0x12407c7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Apr 6 13:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=094dc5362aeda78c9bde79464189304aa95712ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:9a:e4:95:d2:da:03:ee:6f:7c:51:15:63:
a9:3f:ea:4c:1d:3e:60:9a:6f:cb:f8:a4:5a:df:aa:
19:1b:1f:2f:95:d9:f9:ef:04:e5:cd:8d:79:b3:8d:
62:fa:6f:6e:60:f0:ae:7d:d4:51:23:c3:a6:d6:2d:
55:72:86:63:34:28:93:a3:59:a2:34:0f:a6:fc:e0:
8d:8f:99:22:ad:fd:02:f3:d6:8e:a7:c5:50:24:a8:
18:e5:a4:a4:ee:48:51:6c:2f:09:c4:cc:61:8b:d5:
47:70:3f:11:c3:e1:13:c1:ae:f1:16:1e:f2:7c:ba:
28:89:cd:d6:4a:28:f8:7a:43:f3:29:f1:26:60:a3:
56:b9:02:f1:de:be:ff:3c:a9:1b:b1:9a:8a:81:fc:
bd:ba:0c:76:c2:35:02:5b:46:71:64:2e:34:df:9e:
88:49:2c:cf:bb:12:4b:7a:06:c1:96:86:5e:a8:be:
a0:a3:a9:e3:18:4f:72:cb:a0:6e:9e:fb:09:c3:80:
6b:96:2c:53:ea:0f:6c:39:9f:0e:88:f0:38:6f:d5:
0d:87:d7:aa:3f:db:0d:14:60:76:81:81:c2:48:bd:
14:4b:3f:f2:ca:9c:9b:df:4f:dc:b4:8a:63:85:63:
9b:9f:27:09:8b:94:3b:93:93:e1:6c:8b:69:f7:6f:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4D:C5:36:2A:ED:A7:8C:9B:DE:79:46:41:89:30:4A:A9:57:12:AB
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/CU3FNirtp4yb3nlGQYkwSqlXEqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.224.0/24
Signature Algorithm: sha256WithRSAEncryption
14:07:31:39:92:a5:c1:11:09:75:32:21:62:03:0c:b1:a3:a9:
0c:57:b5:92:cb:da:f9:82:59:d4:85:a3:3a:65:81:31:d9:63:
29:91:e5:84:20:36:a6:e2:eb:6a:39:dd:f5:37:45:15:1a:32:
5c:04:b3:0d:79:7c:0c:b3:75:c1:d2:c9:8d:55:7b:af:10:fa:
b3:4f:f3:50:9e:44:9b:ef:31:ba:3a:f2:ac:3a:65:17:7a:54:
8c:13:51:ff:ac:42:dd:35:46:d0:9f:18:90:63:91:83:54:b1:
b7:8d:3b:26:fe:90:b7:28:f3:06:46:c3:0b:65:87:02:d7:46:
81:49:8a:91:38:22:ee:c4:f7:d7:5a:fd:f1:13:a5:a6:82:a3:
c6:b1:93:13:45:2d:d8:04:9b:fd:48:8b:34:ff:ae:7a:d8:78:
75:68:0a:6f:79:b1:7c:31:1c:2b:18:76:d8:00:07:9e:78:09:
34:e3:f4:36:f2:c7:0d:38:0e:65:19:1b:28:33:c6:c2:d0:07:
9f:f6:e8:c3:4f:63:8b:96:9d:53:e7:8e:52:a3:85:ff:9d:61:
2d:3d:09:af:31:22:2c:2d:71:cf:42:33:d2:34:a1:d7:69:41:
b3:44:67:e4:47:94:f5:66:33:ed:09:0a:0e:f7:bc:bd:8c:23:
dd:a6:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:26 2025 by rpki-client