Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/tyCk_8hKvhAMVLo94610XZZ5uRQ.roa
File: tyCk_8hKvhAMVLo94610XZZ5uRQ.roa (raw, json)
Hash identifier: DF2hIsXrqaTO1l+2m29R4fXlxPrECkZPF1rVFRjuATo=
Subject key identifier: B7:20:A4:FF:C8:4A:BE:10:0C:54:BA:3D:E3:AD:74:5D:96:79:B9:14
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 0181F3EEEA831E40075BF89081BAFE7A186A
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/tyCk_8hKvhAMVLo94610XZZ5uRQ.roa
Signing time: Tue 12 Jul 2022 19:42:09 +0000
ROA not before: Tue 12 Jul 2022 19:42:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 176.118.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f3:ee:ea:83:1e:40:07:5b:f8:90:81:ba:fe:7a:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Jul 12 19:42:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b720a4ffc84abe100c54ba3de3ad745d9679b914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:0f:80:76:1b:b3:2d:ba:64:f0:89:43:3c:
61:5c:75:e6:1f:d1:d3:e1:b2:af:84:b5:4a:4b:21:
73:4e:29:75:13:90:f9:db:04:82:b0:d1:bf:5b:b5:
eb:6e:e1:15:9b:39:73:11:bc:ab:3e:8e:a3:53:b1:
43:03:0d:fd:ff:1a:00:12:8f:48:f3:b4:50:e9:da:
c9:0a:49:97:e4:dc:4b:52:a8:73:64:09:d8:97:29:
71:f7:e2:c7:73:3d:e8:81:d8:c0:a7:bb:e0:bd:f4:
b4:48:1d:28:c9:92:1a:fe:05:8b:7d:a9:b4:91:23:
56:c8:75:7f:1c:7d:b0:40:b7:7c:a0:86:36:6b:d4:
a1:32:60:92:45:6a:58:1c:1a:6e:7c:05:84:b2:d5:
85:d2:5b:21:e2:ab:d1:c5:da:04:c3:7b:81:6e:23:
05:37:20:d2:36:a5:ff:c4:22:02:96:81:ec:8e:a9:
83:fc:dd:1e:34:e4:d6:1c:62:cf:dd:f4:ec:de:4f:
46:42:7b:5e:04:d0:d1:4b:42:b3:de:6b:c7:66:42:
69:c1:46:cb:d4:fd:24:cf:6f:2c:7f:61:55:fc:0b:
c3:a5:0b:92:b5:02:f4:90:91:a8:1f:90:4a:9a:7e:
a3:4c:91:db:a4:9c:d1:84:12:3b:86:fd:f3:4e:3d:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:A4:FF:C8:4A:BE:10:0C:54:BA:3D:E3:AD:74:5D:96:79:B9:14
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/tyCk_8hKvhAMVLo94610XZZ5uRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.162.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b4:d0:e3:70:9b:29:86:1c:29:6b:b7:13:48:99:7b:e6:bb:
a5:5c:d4:52:e3:e9:0e:ed:8d:03:a9:08:b7:ff:d6:b2:d8:37:
c5:c5:61:c9:51:dd:bd:8e:90:f8:e3:d0:50:d9:cf:eb:43:12:
cd:bb:00:07:c1:07:db:2d:15:44:ac:43:69:4c:23:e7:bf:06:
02:5f:12:e5:16:2a:48:5f:cf:43:89:aa:f6:33:4c:e2:fb:ae:
bb:93:1e:22:02:85:50:53:86:df:8b:08:91:6a:90:e0:17:32:
25:08:da:26:55:2f:36:46:aa:03:4d:83:01:78:85:89:e9:a4:
80:b4:2c:64:ba:21:d3:c3:9b:81:63:4a:5c:ef:95:85:e7:30:
b4:9e:fc:2a:65:12:8d:bf:64:3f:cf:c8:65:76:c9:2a:c2:1d:
4b:64:cf:0b:76:9a:c9:b3:bc:46:a2:14:f7:f1:b0:6e:de:cc:
86:0e:dd:e1:af:52:d7:24:ae:46:9f:51:7f:05:7b:91:72:72:
95:c6:f6:45:c4:a3:15:d8:5d:c5:23:31:20:35:ea:43:8e:4f:
4e:6b:bf:82:82:0d:57:fb:e0:de:70:8b:ec:a5:34:04:80:d1:
4f:fa:a3:7b:ea:c1:0e:f9:8c:98:5c:6a:43:08:68:ad:b7:34:
f8:6e:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org