Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/USk0HD9MSpCRQ9za-Owz5hoMjME.roa
File: USk0HD9MSpCRQ9za-Owz5hoMjME.roa (raw, json)
Hash identifier: ETtL7SKDrMiMsVgPO7nLi70p7J2Oxbg7AqL+d8mb1qY=
Subject key identifier: 51:29:34:1C:3F:4C:4A:90:91:43:DC:DA:F8:EC:33:E6:1A:0C:8C:C1
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 0A007928
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/USk0HD9MSpCRQ9za-Owz5hoMjME.roa
Signing time: Sat 01 Jan 2022 05:54:41 +0000
ROA not before: Sat 01 Jan 2022 05:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 176.124.254.0/23 maxlen: 32
2001:678:dc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167803176 (0xa007928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Jan 1 05:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5129341c3f4c4a909143dcdaf8ec33e61a0c8cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:b5:bb:1d:d7:20:8a:0a:68:9e:e0:da:16:
68:ba:d3:df:8d:78:32:c4:24:70:f0:cc:97:6c:6e:
c2:9f:60:3f:7c:92:60:45:a4:d4:42:be:b1:2a:e3:
e7:5a:a6:f3:20:c8:74:87:98:db:21:b4:a0:a1:91:
a4:09:51:d9:9f:e4:b2:53:27:4d:e0:cb:5a:dd:19:
d1:d3:50:71:c3:14:03:8f:22:79:40:ea:5d:a5:87:
fd:6b:1d:b8:b0:53:0e:3e:6e:6d:d5:85:7d:82:09:
bd:14:8c:64:b1:fb:e2:8c:3f:31:ca:ff:e6:00:9e:
7f:7b:ce:d1:a0:93:60:f7:0f:f2:52:cc:c9:e1:92:
62:82:13:db:cf:77:c9:bc:82:72:f7:29:30:02:72:
3a:48:c3:01:2c:25:3c:d6:1c:cf:0b:46:7c:ad:d2:
d8:60:f4:0e:75:59:13:1c:fd:26:54:af:ca:13:f5:
09:e7:48:3a:9f:67:7f:ec:10:01:71:0d:cb:ac:f5:
4e:20:30:ee:49:b8:ae:71:9b:6e:d5:b7:4c:70:6b:
99:68:18:b5:8e:ff:5b:fb:47:da:77:da:97:37:e7:
ae:44:84:31:39:97:73:8f:fe:79:ed:b7:2f:4a:09:
2d:7f:1e:33:5c:3b:f6:5c:87:42:0b:48:ba:d8:33:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:29:34:1C:3F:4C:4A:90:91:43:DC:DA:F8:EC:33:E6:1A:0C:8C:C1
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/USk0HD9MSpCRQ9za-Owz5hoMjME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.254.0/23
IPv6:
2001:678:dc::/48
Signature Algorithm: sha256WithRSAEncryption
6d:09:15:b9:f5:0a:10:12:d8:77:db:cf:c7:43:06:b6:73:06:
3b:4b:70:00:d6:25:a5:00:8b:16:c0:1f:77:02:f7:24:57:f7:
ba:47:31:32:77:3e:88:1a:7a:46:d3:67:d5:83:41:11:53:7d:
e9:95:06:d4:df:fb:f9:0c:e9:99:be:d2:66:47:29:0c:88:8b:
78:7b:d3:62:61:f1:5c:9a:6b:0d:61:09:6d:a1:1c:88:da:1d:
98:30:4c:55:68:9f:d6:f1:65:85:0f:af:50:eb:ae:9d:79:2f:
e3:74:64:a7:b3:1b:db:1e:56:d1:47:74:e1:28:f3:62:f6:14:
a8:97:cb:a9:38:49:4a:4f:45:6c:ec:ff:7f:c8:9f:d9:5b:98:
f5:6c:e9:93:d5:5a:00:31:04:f8:87:9f:34:57:21:37:59:0c:
15:6f:75:09:e8:87:df:2b:51:67:f4:e7:57:10:21:eb:5b:df:
09:5e:0c:c5:62:74:c7:1f:3f:43:70:ff:94:b9:15:c7:1d:b7:
a5:12:f9:94:97:f4:4f:9b:eb:28:75:ea:82:53:24:73:2d:57:
a6:87:94:70:4d:8c:79:81:e6:84:e2:08:0a:8e:05:0f:1c:4a:
f4:34:75:26:1b:25:40:d2:d9:2c:eb:54:82:ce:f7:6b:54:91:
9a:84:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org