Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/advIkkl9dFCrCx_netduHfD9cSA.roa
File: advIkkl9dFCrCx_netduHfD9cSA.roa (raw, json)
Hash identifier: CRBw/pwdtGLXaTEfEevDIwGAFE8Ip7gmWp6yZzkr6Ks=
Subject key identifier: 69:DB:C8:92:49:7D:74:50:AB:0B:1F:E7:7A:D7:6E:1D:F0:FD:71:20
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 018805D90872E0B8B29EBFD62C31B7FB4321
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/advIkkl9dFCrCx_netduHfD9cSA.roa
Signing time: Wed 10 May 2023 13:28:09 +0000
ROA not before: Wed 10 May 2023 13:28:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49181
IP address blocks: 176.96.226.0/24 maxlen: 24
176.96.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:d9:08:72:e0:b8:b2:9e:bf:d6:2c:31:b7:fb:43:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: May 10 13:28:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69dbc892497d7450ab0b1fe77ad76e1df0fd7120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:41:78:6c:b3:ad:77:e0:7e:9c:5a:65:3a:10:
81:c2:7b:2f:2c:5b:2c:87:3f:ff:c6:06:f4:aa:e5:
22:24:16:03:3f:db:b4:1e:4e:07:34:ed:16:44:8d:
44:cf:7f:c2:0f:86:cd:4a:d5:43:da:1e:8e:ab:2e:
15:f1:a0:23:36:be:b8:6e:34:28:a7:38:d4:4d:7b:
a0:06:75:c0:51:86:1b:7f:5e:b2:be:f0:14:12:4f:
1b:c6:49:e1:f8:12:c8:21:bc:63:ba:d7:75:d5:81:
9c:20:5d:83:e9:7f:02:44:04:86:76:c5:3d:6b:86:
1c:c8:1b:d7:f8:8d:6a:04:cf:f2:b8:50:88:23:a2:
d1:a1:65:dd:9b:d3:7c:f6:85:94:1b:a3:56:f4:60:
b2:5c:a2:0f:20:97:31:45:e8:a6:5c:ab:24:cf:23:
a9:74:f3:1c:e8:bf:47:bd:c7:cf:34:e4:d0:bf:e8:
f2:f6:73:e6:0a:1e:9c:19:b7:ca:da:8b:ec:1e:4a:
9b:7c:6c:29:45:27:89:20:e3:86:42:53:8d:4d:63:
b3:db:8a:48:1a:1c:54:7c:59:d7:1c:73:33:3d:b1:
3c:86:63:de:df:fb:05:ee:22:87:f2:11:a7:f7:c0:
8a:31:e6:cf:9d:4a:cd:54:9a:2a:e1:2e:3f:6e:43:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:C8:92:49:7D:74:50:AB:0B:1F:E7:7A:D7:6E:1D:F0:FD:71:20
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/advIkkl9dFCrCx_netduHfD9cSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.226.0/23
Signature Algorithm: sha256WithRSAEncryption
43:2e:9e:92:99:7f:1d:39:31:bc:d0:fa:94:dc:fc:e8:51:a7:
6c:2f:94:23:2f:e5:e0:21:d9:d7:a8:79:5f:19:ee:74:95:b8:
98:e6:44:e0:e9:f0:5c:de:28:96:45:ee:72:8b:e5:89:ab:d2:
cb:a0:84:10:6a:94:3f:d4:9f:69:20:92:70:6d:80:96:2c:cf:
e0:d9:75:ea:b2:8f:8c:67:e0:34:61:c3:7b:bd:f3:e6:b7:ff:
a0:af:7e:0c:14:79:01:6d:6e:4e:f4:ef:a4:e6:50:4a:e2:6b:
d7:20:05:3b:3e:0f:63:04:98:dc:42:86:ce:b8:78:12:4a:77:
11:0a:47:7f:ef:4f:3c:ae:e6:c6:6b:35:d8:c0:c7:29:7b:3d:
cf:c1:6f:06:ab:9a:f7:79:a8:b6:a3:2e:bb:7f:74:5a:f1:90:
27:00:7c:0a:3a:3e:24:ee:1d:1f:d7:6b:8b:93:7c:3b:a2:4a:
94:13:77:0a:e8:ae:a5:61:c4:51:08:7d:4c:1f:b1:cb:c9:38:
32:11:68:7c:2e:a5:17:81:1d:02:4c:27:db:53:5a:01:a8:54:
c4:a6:09:da:8b:12:c4:85:e5:cb:4c:c4:8d:40:ce:cb:2a:fe:
ae:85:be:89:cc:ee:59:e7:76:3b:5b:8a:18:2b:4b:fa:3b:6d:
9d:bd:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:29 2025 by rpki-client