Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/G9c_O1xTc3jDMIokPY23YrQzCm4.roa
File: G9c_O1xTc3jDMIokPY23YrQzCm4.roa (raw, json)
Hash identifier: DMNuOkfVy73LX5MijTiWf5hxVmUKUR+V7z94PDrgiUE=
Subject key identifier: 1B:D7:3F:3B:5C:53:73:78:C3:30:8A:24:3D:8D:B7:62:B4:33:0A:6E
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 061CBAC5
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/G9c_O1xTc3jDMIokPY23YrQzCm4.roa
Signing time: Sat 01 Jan 2022 06:56:43 +0000
ROA not before: Sat 01 Jan 2022 06:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209117
IP address blocks: 2.57.36.0/24 maxlen: 24
2.57.39.0/24 maxlen: 24
2a09:d2c1:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102546117 (0x61cbac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 1 06:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bd73f3b5c537378c3308a243d8db762b4330a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:5f:f3:a9:d9:e4:2f:6d:cd:15:79:82:3b:
ae:6e:7c:88:7f:ec:54:ec:b8:31:81:11:c6:a5:99:
a3:7c:6a:ff:ed:32:ae:6a:71:59:16:39:31:b9:8a:
5b:aa:55:60:79:78:a8:4a:68:0c:b7:6c:bd:95:7b:
1d:33:1e:57:c8:58:23:ab:f2:78:94:1d:a0:fc:28:
c8:1e:f6:97:a3:f0:07:84:19:3e:f0:5e:2c:8a:4e:
c9:ab:dc:d1:34:69:a3:e8:27:c1:20:5e:d6:bd:80:
32:bb:b1:02:ac:22:39:f8:a9:fe:fe:12:3e:69:57:
5a:46:4d:76:49:f6:6f:cb:16:53:55:0d:03:0c:1e:
be:85:81:b1:f0:50:f2:05:ff:b3:71:d2:50:a3:7b:
e3:04:19:02:9c:99:56:cc:6c:73:d9:f6:bf:60:ae:
27:9c:db:79:a3:53:80:10:52:9c:d9:e4:21:0f:3a:
f3:3d:0b:cf:ee:e9:33:53:96:c1:a9:54:5b:34:e5:
af:63:12:9e:31:b9:db:28:0c:13:8b:16:2a:da:34:
a0:ca:4c:40:bc:02:99:78:66:8f:41:76:d2:c9:a7:
c9:4b:7c:ac:36:42:e9:37:3f:8a:26:66:dd:9c:31:
5e:bd:98:e9:df:05:1a:30:8b:99:93:ba:41:a9:78:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:3F:3B:5C:53:73:78:C3:30:8A:24:3D:8D:B7:62:B4:33:0A:6E
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/G9c_O1xTc3jDMIokPY23YrQzCm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.36.0/24
2.57.39.0/24
IPv6:
2a09:d2c1:6::/48
Signature Algorithm: sha256WithRSAEncryption
56:94:71:44:58:ce:b8:c6:c4:cd:fe:8a:34:87:1b:0a:ed:2c:
a7:a6:a2:36:47:29:94:76:c9:93:9e:d2:25:16:39:c5:a3:cf:
fb:f7:64:67:1d:89:14:4f:69:a2:59:8b:4b:43:b7:82:b1:2f:
37:45:7c:d4:a1:13:e5:f3:1f:06:20:8a:99:ba:c3:9c:99:8b:
7d:71:ae:81:4f:17:a0:ee:37:76:8b:94:07:54:96:bc:91:bd:
07:fb:2c:dc:3c:f4:ff:82:80:a8:5a:e1:e2:48:bc:14:e0:39:
1c:20:44:08:f4:fe:8c:55:28:75:48:09:db:c7:b8:c0:68:b1:
7c:76:c2:64:ff:a3:76:24:ee:b9:f2:23:b4:3f:b7:68:a4:15:
6f:5a:44:83:92:02:7e:c1:d2:1f:44:5f:c7:b7:8c:c7:57:1b:
e3:8e:fc:69:68:fc:a4:a4:72:7e:7e:04:86:a6:bd:2e:cb:6d:
f0:0e:25:7e:d5:7e:90:88:38:f0:69:7a:b0:ad:5a:a1:96:e8:
06:29:e5:d3:71:13:dc:ca:1a:72:c9:5d:9f:ac:9a:79:8b:f8:
4c:02:2a:cd:d8:e0:fa:a6:9c:f2:6f:5b:37:0f:af:f5:98:25:
06:a5:43:21:af:68:80:ab:91:8f:c8:d9:a2:24:d2:ac:b1:9c:
6d:b6:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:34 2024 by rpki-client on console-ams.rpki-client.org