Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/yK22r97UahE4sT0MBplCyKzAO6c.roa
File: yK22r97UahE4sT0MBplCyKzAO6c.roa (raw, json)
Hash identifier: jRUe1/EtdXRoqjVhofEcBau7BSJre5oAIGYx8F/G1Bc=
Subject key identifier: C8:AD:B6:AF:DE:D4:6A:11:38:B1:3D:0C:06:99:42:C8:AC:C0:3B:A7
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 018276C2068D5FC2E14433CDDAD12A4F962F
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/yK22r97UahE4sT0MBplCyKzAO6c.roa
Signing time: Sun 07 Aug 2022 05:23:23 +0000
ROA not before: Sun 07 Aug 2022 05:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20719
IP address blocks: 176.119.253.0/24 maxlen: 24
176.119.252.0/22 maxlen: 22
176.119.248.0/22 maxlen: 22
176.119.251.0/24 maxlen: 24
176.119.248.0/21 maxlen: 21
176.119.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:76:c2:06:8d:5f:c2:e1:44:33:cd:da:d1:2a:4f:96:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Aug 7 05:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8adb6afded46a1138b13d0c069942c8acc03ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:25:2a:85:fa:9c:23:48:93:05:9a:b0:99:
97:8c:66:9f:b7:56:2c:5d:46:ca:b0:a7:19:89:f6:
79:71:25:3c:d2:fa:24:58:e7:f4:8a:f6:83:be:60:
46:75:f8:86:92:85:9b:d3:77:5e:bb:88:73:f6:4d:
b0:e0:a9:8c:3d:d0:bc:23:bd:3c:82:70:e7:b9:4d:
da:e2:1c:bb:1c:77:04:4d:37:e9:79:2d:f5:ce:69:
e7:f1:99:2a:52:28:4f:e8:42:31:c6:0e:33:1b:67:
68:67:64:e4:1a:42:7f:b2:ec:9f:1e:83:d5:ff:51:
3b:b7:c6:57:05:d9:63:57:8a:ff:6c:33:f4:81:e1:
ce:43:b6:04:0b:ad:cb:e2:4d:9b:51:b4:8f:f4:f3:
9c:0b:e1:10:d2:0f:35:05:6b:18:f4:0e:ec:10:bc:
3c:87:64:f3:ff:34:1e:6e:31:30:20:c3:8b:bc:8e:
1d:a0:43:1b:6f:84:2b:18:2c:bc:12:9b:83:90:11:
7d:f5:eb:fd:f3:42:1c:53:3a:f7:43:56:32:ec:a9:
4f:0b:81:8d:42:6b:ab:8d:d1:0d:ae:d4:27:b5:83:
55:17:ba:93:ef:7e:31:a6:0e:78:67:2e:a5:da:2b:
3b:0f:96:52:c9:74:df:93:57:53:a4:1a:81:19:9b:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AD:B6:AF:DE:D4:6A:11:38:B1:3D:0C:06:99:42:C8:AC:C0:3B:A7
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/yK22r97UahE4sT0MBplCyKzAO6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:7e:98:f4:ec:c5:e9:9b:4a:fe:5b:ff:a7:87:5d:e3:f1:49:
c8:94:0c:40:39:c1:bd:0b:19:b0:33:bb:f6:e8:e6:be:4b:33:
dc:2e:f7:e1:31:0d:c8:cc:ac:e0:ee:35:8d:f0:c7:f5:a5:86:
c0:a5:da:61:36:e2:48:f7:09:f9:be:e5:c3:b8:82:d4:fe:19:
6f:e4:86:fc:fd:e1:55:20:25:58:52:ec:7f:85:7c:31:a6:4e:
ec:8e:98:27:ac:e1:53:8d:91:27:4e:dd:4e:e4:ad:95:cc:bb:
f4:e8:08:45:a8:1f:83:a1:13:7e:4f:aa:55:69:2e:f7:f5:9f:
7c:55:9a:f4:32:be:14:df:b1:31:e6:f6:50:25:bc:88:95:2a:
5d:ec:c5:a5:57:d1:2d:13:4f:2d:08:a1:30:72:5d:04:1d:09:
56:36:da:18:ec:48:c1:1c:45:59:3b:d3:48:cf:77:34:54:8b:
54:3d:2a:b9:a6:8c:10:43:0e:8f:2b:6a:9f:06:88:02:17:e2:
cb:9e:10:84:99:f7:a0:fa:c8:e8:5b:a7:cc:cf:01:bc:dc:6d:
38:5e:4c:f5:35:5a:57:e6:ec:cf:ae:1b:62:9f:67:8b:bb:59:
87:3d:ed:39:ec:ec:0b:d2:ee:a6:1a:88:3f:77:ff:17:ab:c6:
41:7b:c3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:21 2023 by rpki-client on console-ams.rpki-client.org