Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/04ae87-757a-4074-9236-d47b5c2c6647/1/RWRffqVJmt9eT8cyveuxux9NYNA.roa
File: RWRffqVJmt9eT8cyveuxux9NYNA.roa (raw, json)
Hash identifier: Lnvcgug9jN7bD7ZzMfqvAoNxvVCma1guYNB1bcPqf9A=
Subject key identifier: 45:64:5F:7E:A5:49:9A:DF:5E:4F:C7:32:BD:EB:B1:BB:1F:4D:60:D0
Certificate issuer: /CN=a5cc04bb8ee584f85bfc4d49739844d4b5002dda
Certificate serial: 98F2AB
Authority key identifier: A5:CC:04:BB:8E:E5:84:F8:5B:FC:4D:49:73:98:44:D4:B5:00:2D:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcwEu47lhPhb_E1Jc5hE1LUALdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/04ae87-757a-4074-9236-d47b5c2c6647/1/RWRffqVJmt9eT8cyveuxux9NYNA.roa
Signing time: Sat 01 Jan 2022 00:56:42 +0000
ROA not before: Sat 01 Jan 2022 00:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 176.126.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10023595 (0x98f2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cc04bb8ee584f85bfc4d49739844d4b5002dda
Validity
Not Before: Jan 1 00:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45645f7ea5499adf5e4fc732bdebb1bb1f4d60d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:10:65:c6:ff:a6:b1:76:2d:49:d4:20:88:
7a:ed:2c:50:1f:78:a9:06:f2:5a:d6:a7:01:59:e1:
95:45:df:15:ed:c2:f3:45:fc:ff:14:6e:10:1f:62:
90:f3:d3:33:9a:45:e7:db:c0:3e:a7:d5:7c:e1:b6:
2a:04:5e:d8:07:bb:03:8a:4f:f6:62:53:6e:38:99:
35:9a:09:44:7b:ec:c3:b8:65:c5:ca:10:f9:5c:91:
32:1a:06:d5:cb:53:a0:e9:cc:22:cf:52:6c:c8:46:
eb:6e:0b:78:d8:4e:2b:18:bd:55:08:d0:94:82:47:
8e:8a:36:83:82:dd:0a:de:03:44:c6:36:b4:90:b6:
a5:b4:a8:47:31:6a:51:30:ed:b3:52:f7:5c:9e:48:
8e:f0:aa:71:73:f3:14:e2:5e:78:66:c4:9d:ca:46:
a3:44:1b:54:98:b0:be:b2:69:f9:bd:77:2d:aa:c2:
9e:76:50:74:19:f2:5c:7d:de:55:aa:96:04:b4:38:
f3:7f:ab:92:2b:8f:fe:5c:ff:f9:2f:bb:04:64:e6:
88:60:44:30:c0:87:1b:b2:fd:83:76:e4:fb:f7:75:
c0:4c:da:06:a1:72:63:e3:51:7b:1e:c7:0e:2d:c6:
34:39:cb:82:60:e1:0a:d7:96:63:c7:91:4c:50:1d:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:5F:7E:A5:49:9A:DF:5E:4F:C7:32:BD:EB:B1:BB:1F:4D:60:D0
X509v3 Authority Key Identifier:
keyid:A5:CC:04:BB:8E:E5:84:F8:5B:FC:4D:49:73:98:44:D4:B5:00:2D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcwEu47lhPhb_E1Jc5hE1LUALdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/04ae87-757a-4074-9236-d47b5c2c6647/1/RWRffqVJmt9eT8cyveuxux9NYNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/04ae87-757a-4074-9236-d47b5c2c6647/1/pcwEu47lhPhb_E1Jc5hE1LUALdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.125.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cc:b9:5a:cf:0c:28:a8:d5:e4:de:0d:fa:b1:56:83:40:0c:
c8:69:b6:22:30:37:b2:92:73:e6:a6:df:12:56:60:7a:27:8c:
09:a7:8c:b1:e1:3a:2e:32:82:af:20:4b:cb:9b:13:e3:07:51:
17:fd:31:aa:f3:31:ce:5f:2b:51:45:24:a8:ce:86:f4:39:d3:
06:c6:0a:2e:41:03:49:2f:7d:d3:2d:d1:ad:63:a8:6e:07:33:
15:9c:83:9d:a2:35:aa:3a:ba:fb:c8:8f:90:96:42:3e:bc:ee:
ec:87:f9:14:8b:02:5f:d3:83:be:12:5e:2e:50:63:59:46:01:
b5:63:db:fd:f5:e1:73:ca:5a:93:51:e4:8c:2f:4c:36:cc:b8:
9d:f8:8d:02:da:06:dc:5e:5d:f0:ae:7c:6e:10:7e:b3:72:76:
ed:1e:68:42:09:7b:60:c4:bf:01:4b:d9:5e:44:b2:19:19:7a:
71:4b:1f:25:4a:c4:f7:e6:e4:72:f6:e7:15:8c:a0:fd:1c:e5:
47:de:1c:d7:80:f8:f0:b7:fa:08:70:d0:33:74:40:80:cf:96:
d8:c5:ec:68:6b:ce:5f:ed:39:d3:cf:8a:bd:bc:e8:89:cd:98:
2a:6e:ca:fd:b8:b8:f8:de:4b:7d:22:29:7e:17:18:c1:2e:8a:
1c:48:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:21 2023 by rpki-client on console-ams.rpki-client.org