Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/VJghn7awvvWGCzWIn0VP2-t65lA.roa
File: VJghn7awvvWGCzWIn0VP2-t65lA.roa (raw, json)
Hash identifier: Hc5/r3tdJBj1UBw8YpF5QGzQWKvAX/7LSQ9as9PdILU=
Subject key identifier: 54:98:21:9F:B6:B0:BE:F5:86:0B:35:88:9F:45:4F:DB:EB:7A:E6:50
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 03FAC774
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/VJghn7awvvWGCzWIn0VP2-t65lA.roa
Signing time: Sat 01 Jan 2022 14:57:01 +0000
ROA not before: Sat 01 Jan 2022 14:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48347
IP address blocks: 176.58.60.0/24 maxlen: 24
176.58.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66766708 (0x3fac774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Jan 1 14:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5498219fb6b0bef5860b35889f454fdbeb7ae650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:fc:ce:59:57:21:76:73:ee:6d:2a:8c:0f:
15:fb:b7:15:71:ed:05:b0:7f:b3:c5:b3:77:d1:e1:
fa:0b:99:03:81:47:ae:52:7f:45:f4:cd:5a:80:13:
62:1f:b0:d7:ab:c3:d7:e7:11:e3:21:91:b6:29:1d:
a3:4a:20:07:8a:f6:f1:14:9a:0a:4d:ef:41:1a:f9:
a6:e1:ed:b2:63:e3:9a:6b:71:fc:8b:80:17:c6:f4:
54:01:57:77:7b:11:ee:d7:b8:d6:b6:a8:f8:a2:ae:
51:2a:b0:fc:ff:e1:da:cf:a3:76:8c:78:bb:a6:f8:
d0:45:0a:aa:e4:f0:89:35:00:1a:d8:7f:4d:6f:8e:
75:bf:a9:df:6d:d8:43:ef:f1:64:65:15:11:43:fd:
d0:64:f0:3f:64:15:d7:a6:0b:78:d7:ac:d1:a9:63:
c5:18:ca:bc:ef:3c:cc:a2:12:8e:ca:60:db:e0:84:
d8:0c:15:c9:eb:54:70:9c:57:90:c4:b7:51:56:46:
9c:f9:15:69:dc:69:45:40:97:95:10:2f:ff:81:80:
7a:33:38:0c:53:55:f8:ac:d1:c9:31:fb:13:ff:02:
e5:b8:e8:8a:fc:22:63:64:ba:97:b4:7c:32:c4:ee:
20:45:3d:7b:34:69:af:41:8a:d3:eb:d2:df:58:76:
59:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:98:21:9F:B6:B0:BE:F5:86:0B:35:88:9F:45:4F:DB:EB:7A:E6:50
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/VJghn7awvvWGCzWIn0VP2-t65lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.60.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:90:e6:98:20:6d:70:d6:88:76:87:77:72:a6:9b:ae:c0:b6:
34:15:8a:f1:50:78:48:b9:17:82:dc:39:0c:cf:88:11:3e:34:
59:b1:a0:7a:a4:cc:e6:76:d6:9a:76:84:55:b9:08:2f:88:f9:
1e:d1:95:25:ec:0e:8f:77:19:bc:6b:da:5e:71:3d:90:ec:3a:
d4:3f:a0:0a:09:91:fa:10:b1:9b:74:44:37:25:2e:de:7a:bb:
8e:54:bc:47:55:88:4c:1e:ee:66:45:dc:9d:e4:f8:8e:0a:d1:
75:62:b4:e0:28:17:d9:92:55:49:04:3d:4f:16:22:00:c7:f6:
55:80:36:35:2f:62:09:f3:dd:80:67:a5:79:99:95:1e:9a:10:
95:ad:d1:a3:f6:a9:32:d1:b7:42:95:f8:07:44:fe:ef:4f:cd:
31:84:50:52:e2:79:91:59:72:dc:29:eb:f7:cd:27:53:73:af:
3a:d8:eb:f0:1c:e8:62:55:16:d1:35:02:92:14:95:7f:e9:17:
3c:b7:77:11:60:53:77:22:0a:bc:13:2c:4e:3f:d7:35:fe:db:
f1:62:14:e9:fb:96:50:15:7a:ea:3c:42:05:ac:75:f6:a1:75:
05:e5:ac:7e:0e:9f:36:8f:51:da:49:69:cb:45:f5:97:94:40:
bc:26:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:27 2024 by rpki-client on console-ams.rpki-client.org