Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cYGSFqST9cGLw1kL4y-B7M9KRww.roa
File: cYGSFqST9cGLw1kL4y-B7M9KRww.roa (raw, json)
Hash identifier: M7AG8jwMeTibyQYRJbXpWSFnbqKKlT1iRCZH2xGEe1k=
Subject key identifier: 71:81:92:16:A4:93:F5:C1:8B:C3:59:0B:E3:2F:81:EC:CF:4A:47:0C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1EC46DC0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cYGSFqST9cGLw1kL4y-B7M9KRww.roa
Signing time: Tue 31 May 2022 06:55:15 +0000
ROA not before: Tue 31 May 2022 06:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 164.40.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516189632 (0x1ec46dc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 31 06:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71819216a493f5c18bc3590be32f81eccf4a470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:af:4d:aa:da:46:fa:e9:c1:d2:93:34:d5:
d9:5c:62:3d:a5:ea:c3:47:e1:8e:46:85:2d:ba:34:
58:29:83:bc:af:eb:96:82:8a:04:5d:9e:b0:9e:4d:
58:d3:da:8b:af:36:4a:aa:75:58:02:16:a7:a8:69:
d2:c2:18:76:88:e0:53:bb:8e:97:8b:6d:cf:fe:3a:
7a:2b:2e:ba:80:61:e3:2d:49:cc:4b:7c:f9:13:28:
97:cb:f2:b0:ef:a4:f1:f8:95:45:04:f2:ad:b3:67:
22:13:55:cb:2e:ec:9c:02:1f:fc:95:7f:b3:ae:74:
94:f5:dc:57:82:aa:11:dc:a4:b7:95:28:1f:57:47:
20:85:92:75:78:48:d1:cb:94:10:0c:4b:7e:49:25:
73:48:05:3d:de:5b:87:75:d1:cb:38:d3:48:91:42:
d0:a0:10:5c:4f:89:71:66:fb:f4:68:6f:ff:eb:53:
a2:16:49:7f:aa:4d:eb:3a:97:5c:e0:5c:35:7c:46:
d2:a7:e9:51:be:23:68:42:69:32:0f:62:52:6f:20:
0a:50:2d:ed:95:1a:3e:d3:f8:4a:ed:3d:2c:04:33:
a1:e6:3e:17:31:01:53:6f:bf:f4:96:d1:09:01:69:
ed:a2:28:b0:7a:93:43:39:20:65:1a:48:3d:16:c9:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:92:16:A4:93:F5:C1:8B:C3:59:0B:E3:2F:81:EC:CF:4A:47:0C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cYGSFqST9cGLw1kL4y-B7M9KRww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.188.0/22
Signature Algorithm: sha256WithRSAEncryption
78:9f:1c:18:7a:66:05:4e:29:70:50:e1:96:11:f5:7e:8f:af:
b5:eb:aa:6e:25:12:87:7b:cd:ab:d5:b7:c0:54:64:ee:b8:1d:
52:f2:5b:36:40:a1:56:dc:d0:21:1d:40:a4:f4:14:35:91:d8:
36:87:56:16:55:a7:c2:48:a6:af:84:55:3a:61:ea:43:8e:7c:
7e:4e:de:f4:0c:ae:ec:5d:58:b3:1e:8b:c6:9f:5b:ba:c7:b2:
ab:c8:36:29:9c:0d:c8:88:78:d4:92:de:f2:98:71:a5:af:8e:
f2:03:84:8a:6c:eb:c3:7f:c4:c7:49:ec:df:66:60:0e:3f:8f:
b5:2a:bd:b3:4c:1e:5f:0c:96:fa:2f:33:69:24:ad:ef:00:8c:
69:d1:0d:01:a7:95:df:9a:48:48:fc:90:54:d0:6d:a8:24:47:
55:85:e9:12:b6:44:7d:1d:43:25:4c:24:18:ed:ff:9d:17:0c:
fa:f7:b7:d6:78:18:d5:ce:f2:a0:e3:6f:0d:6f:a9:67:c9:49:
67:75:b5:fb:58:b4:42:ee:93:c1:70:bc:ca:f2:14:fc:2d:97:
0e:71:25:0d:cb:d4:7e:50:ea:41:b9:f2:a2:b7:5e:26:5e:fb:
1a:b2:5b:07:69:c2:cc:d7:e2:24:b2:83:2b:5e:0b:24:8b:cf:
22:d1:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org