Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/aRg8TxnhAU--2KnbD4jZo2oF8lE.roa
File: aRg8TxnhAU--2KnbD4jZo2oF8lE.roa (raw, json)
Hash identifier: 31/eBBbWFHjdijbAdezNhjVLE5KUPfOHicI/63+dmqs=
Subject key identifier: 69:18:3C:4F:19:E1:01:4F:BE:D8:A9:DB:0F:88:D9:A3:6A:05:F2:51
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 0183214E00C0F67EBC2A1B2C92A02A8103AB
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/aRg8TxnhAU--2KnbD4jZo2oF8lE.roa
Signing time: Fri 09 Sep 2022 08:11:43 +0000
ROA not before: Fri 09 Sep 2022 08:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198248
IP address blocks: 176.102.77.0/24 maxlen: 24
176.102.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:4e:00:c0:f6:7e:bc:2a:1b:2c:92:a0:2a:81:03:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Sep 9 08:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69183c4f19e1014fbed8a9db0f88d9a36a05f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:c3:79:96:c2:5a:0d:10:47:e3:e5:50:07:
19:de:5e:33:6f:2a:80:1b:2e:a8:fa:e8:a4:74:6d:
3d:10:76:c9:09:7e:0e:bc:01:4f:c0:44:f8:56:d4:
8f:11:56:80:35:20:35:f4:43:42:d3:ef:1d:8c:54:
f4:56:76:c1:99:1c:fc:32:3b:2f:cc:e2:b3:71:0f:
9f:55:a9:50:bf:16:ba:f4:68:e0:62:16:90:c2:20:
5c:ab:16:de:b7:52:b1:52:05:d7:98:33:ce:38:80:
8b:15:b9:96:a9:ab:fe:fd:c4:57:17:72:70:71:3b:
eb:23:8a:88:cc:4b:5b:d5:66:e5:f4:55:69:69:eb:
6b:37:8d:36:81:60:b7:7c:cf:fa:1a:9a:39:76:41:
2b:8c:86:b5:62:bf:11:86:cf:5a:a5:8a:76:9d:a6:
bd:97:b7:93:fa:3e:8f:81:fe:f7:23:e0:4b:79:9a:
41:29:f4:f2:64:3e:56:c1:21:58:18:99:d5:35:c6:
0e:16:94:87:5e:8e:2c:1c:43:d5:46:fd:c9:2d:6c:
65:b8:38:bb:dd:e9:10:f4:27:25:d4:bd:71:1b:7e:
5a:99:f1:c0:90:fb:48:77:9e:04:5e:3d:1c:6b:d2:
b3:68:65:f9:ea:20:38:2f:69:1f:54:2d:36:96:1d:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:3C:4F:19:E1:01:4F:BE:D8:A9:DB:0F:88:D9:A3:6A:05:F2:51
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/aRg8TxnhAU--2KnbD4jZo2oF8lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.72.0/21
Signature Algorithm: sha256WithRSAEncryption
24:36:81:f6:77:b0:e4:3b:1b:63:82:af:58:a4:23:59:b6:d1:
85:db:7a:ba:73:f4:4f:ed:7f:70:b3:78:e8:a6:f0:5a:e6:c7:
e3:d3:d4:8d:12:13:d6:2e:51:0e:ec:e6:5c:7f:01:55:12:c8:
24:d6:e5:06:5a:bf:3a:8b:86:ed:99:4a:37:7e:0e:63:d3:f8:
b9:34:66:64:ac:6d:06:1d:5b:9d:1b:04:cd:a5:0d:2b:01:ab:
c0:33:b2:fa:b7:b7:a5:83:88:63:2f:67:d7:50:a2:ef:f2:89:
87:39:f6:8b:80:65:3e:fe:57:9f:82:19:f5:cf:ef:7c:00:ac:
71:a6:89:cf:ed:74:bb:83:73:ea:de:4b:d2:9c:04:a4:66:5c:
b7:ff:4c:67:ad:21:76:fb:cc:4f:04:85:68:0b:11:cd:e6:04:
d7:ec:fd:f0:fc:95:29:7d:28:a4:09:55:57:0a:d9:b5:92:9b:
3d:9b:15:2f:4c:ab:70:3f:cb:92:a7:2d:53:ea:a1:bd:41:5a:
f1:95:fb:24:66:fb:3a:5d:c8:61:54:76:2c:b8:01:d0:94:c1:
33:29:16:35:7d:21:7c:53:bc:aa:e2:b6:77:6b:a6:c3:9e:eb:
f9:88:7e:0a:1f:ab:43:61:5f:ce:86:1f:d9:06:c1:3c:99:58:
42:b8:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org