Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/ccoS_MT0PrKcJ8DfVTxdF8qhplk.roa
File: ccoS_MT0PrKcJ8DfVTxdF8qhplk.roa (raw, json)
Hash identifier: ujHkfApdvKfgegLdeVeYRwCzH29cip0max9nT6G2o18=
Subject key identifier: 71:CA:12:FC:C4:F4:3E:B2:9C:27:C0:DF:55:3C:5D:17:CA:A1:A6:59
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 090387F7
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/ccoS_MT0PrKcJ8DfVTxdF8qhplk.roa
Signing time: Sat 01 Jan 2022 13:06:43 +0000
ROA not before: Sat 01 Jan 2022 13:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203462
IP address blocks: 2.57.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151226359 (0x90387f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Jan 1 13:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71ca12fcc4f43eb29c27c0df553c5d17caa1a659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:10:bb:b6:59:d3:c2:dd:e9:1a:65:d5:3d:
74:d2:56:07:b9:0a:53:ca:dd:92:37:8a:a4:6c:8b:
44:f8:fe:ed:76:9d:1d:2e:4b:5a:47:f0:12:87:68:
55:7a:56:00:47:f5:24:f1:8a:43:2b:77:73:67:9e:
db:7f:a8:a5:ae:8d:da:a9:65:9b:82:3b:ea:49:f2:
ee:f3:05:c0:1c:e5:79:66:53:2e:31:e1:34:fe:a6:
91:a3:5f:64:e0:38:15:91:e9:ad:fe:70:5a:75:b0:
2b:fc:cd:5d:a6:5f:87:fd:f7:4b:c0:6f:33:17:ad:
c0:26:1a:4d:ef:02:ce:87:da:ea:81:ab:41:e6:1f:
21:19:65:d2:5c:9f:ca:75:d2:5a:fc:26:a0:2a:db:
62:ad:cd:b1:cb:54:f2:11:77:6b:2a:a8:6e:90:d0:
e6:5d:14:59:92:d1:94:36:d3:5c:23:35:e3:56:b5:
d5:c8:2f:61:03:38:8a:fa:91:a4:ed:89:78:cd:a0:
b3:3f:b6:f5:68:01:ff:dc:35:0e:35:b7:e5:c4:b2:
13:cd:ce:79:86:26:e6:3a:f5:e7:ef:58:2f:27:11:
55:1d:4b:8e:cc:97:8b:53:b1:39:81:14:41:43:15:
f3:c0:9b:39:4f:43:ff:4f:bc:12:ca:f3:0e:4d:8b:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:12:FC:C4:F4:3E:B2:9C:27:C0:DF:55:3C:5D:17:CA:A1:A6:59
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/ccoS_MT0PrKcJ8DfVTxdF8qhplk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:4e:42:08:5f:ca:25:f4:c1:0d:c5:c7:6a:c4:66:ea:10:ac:
be:c8:2a:d4:6a:26:d0:2a:29:12:b1:99:8d:a4:07:ee:cb:f0:
4f:c5:b5:dc:c5:80:8e:90:15:49:4d:6d:f6:38:d3:fa:10:e8:
11:bd:a8:7c:d1:ff:0c:44:95:6c:01:eb:a3:d6:fb:26:bd:1e:
11:78:51:5b:37:08:57:02:96:29:c3:b1:bc:87:2e:37:8d:fd:
ca:38:02:85:ab:c9:0e:66:68:5a:7a:eb:87:0c:bb:bc:07:99:
cf:ea:8d:83:5b:9d:8e:2a:09:24:9d:24:e5:d3:20:6c:93:a4:
05:d1:aa:78:2a:a6:58:78:ac:da:8d:c9:6c:45:6e:5e:5b:22:
5c:0d:b8:de:a8:80:88:92:35:13:9c:25:ce:72:67:d0:c2:75:
c8:13:8c:38:a5:02:98:8c:b8:ef:74:cb:80:5a:2b:f1:a5:7e:
63:3f:d7:03:e8:9b:3d:f0:3b:37:e9:28:67:e1:e4:27:bb:f8:
39:53:d1:77:69:23:67:47:89:20:b5:0c:de:d5:b7:2e:8b:49:
92:48:58:cb:fe:9d:85:53:1c:04:57:11:d8:a7:57:e0:37:ff:
91:0c:f9:5b:b6:e6:45:b2:9e:6a:c5:ef:7f:b1:cc:8a:72:c4:
42:5f:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:17:36 2025 by rpki-client