Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/rCMV2Y3mk36ypzcuFFLIzwgTuz8.roa
File: rCMV2Y3mk36ypzcuFFLIzwgTuz8.roa (raw, json)
Hash identifier: q0uHhYIJEJHiIa8O15j1LmOD10mWrrHOnUUepgP949Q=
Subject key identifier: AC:23:15:D9:8D:E6:93:7E:B2:A7:37:2E:14:52:C8:CF:08:13:BB:3F
Certificate issuer: /CN=f4f7760940800b86f8086e209edd1a85bac0f5dc
Certificate serial: 0414ACA6
Authority key identifier: F4:F7:76:09:40:80:0B:86:F8:08:6E:20:9E:DD:1A:85:BA:C0:F5:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/rCMV2Y3mk36ypzcuFFLIzwgTuz8.roa
Signing time: Sat 01 Jan 2022 15:02:56 +0000
ROA not before: Sat 01 Jan 2022 15:02:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9678
IP address blocks: 2.58.240.0/24 maxlen: 24
2.58.243.0/24 maxlen: 24
2.58.242.0/24 maxlen: 24
2.58.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68463782 (0x414aca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7760940800b86f8086e209edd1a85bac0f5dc
Validity
Not Before: Jan 1 15:02:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac2315d98de6937eb2a7372e1452c8cf0813bb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:47:65:fe:ef:61:ed:da:90:1a:88:d2:5f:
5b:61:5d:7a:8d:d8:2e:5d:0e:c9:4c:96:09:a3:85:
94:73:7f:07:fd:8b:b2:b3:dd:e1:db:55:7a:36:46:
ab:33:61:0b:6d:44:e2:37:c4:2a:e9:0d:d3:db:75:
cb:1f:04:8f:6f:99:f7:38:f7:a2:9b:e0:7c:21:7f:
44:59:83:62:94:b8:2e:79:d1:42:45:d7:bb:96:fa:
84:4f:6b:46:8f:9c:88:4b:c8:1c:8e:46:6b:37:be:
b0:74:63:4f:b1:48:b7:16:25:c0:e8:45:d7:d2:be:
d7:53:cb:70:58:95:d6:28:04:2d:a0:e6:25:04:37:
85:8e:86:61:0f:77:b4:10:8a:3e:9f:54:b3:d6:60:
3a:0f:85:4e:70:69:be:06:9a:ad:27:9b:e2:a5:c8:
d3:73:a7:ad:7c:62:54:18:2b:98:32:42:34:e5:62:
95:23:db:f2:8a:a9:65:36:93:1d:3d:cd:64:22:78:
cf:47:36:fb:0a:fd:9a:4c:4b:ba:29:e6:af:ac:29:
11:8a:7d:8e:de:37:dd:77:d2:b0:a3:fe:58:b0:7b:
b7:d4:84:69:e1:cc:78:c2:d2:7b:4c:1c:9f:10:07:
88:07:9d:41:0d:64:d4:7f:2b:ce:a2:3b:2d:db:f1:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:23:15:D9:8D:E6:93:7E:B2:A7:37:2E:14:52:C8:CF:08:13:BB:3F
X509v3 Authority Key Identifier:
keyid:F4:F7:76:09:40:80:0B:86:F8:08:6E:20:9E:DD:1A:85:BA:C0:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/rCMV2Y3mk36ypzcuFFLIzwgTuz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5c5e22-e4f9-4986-a055-0475d13f463c/1/9Pd2CUCAC4b4CG4gnt0ahbrA9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.240.0/22
Signature Algorithm: sha256WithRSAEncryption
f0:ea:9f:8f:1a:b0:de:fa:21:fe:d8:49:d4:c5:cd:b0:d9:66:
46:8d:cc:36:b8:c9:10:e9:52:d5:0e:11:43:f3:0d:b8:62:bc:
2a:b7:3b:fa:db:1b:11:60:f8:8e:79:c1:ad:63:d0:79:ce:ee:
5a:88:5a:30:eb:98:a0:44:e4:22:2c:94:2f:2e:0c:e8:e3:52:
09:18:e1:db:fc:c7:1b:1b:87:47:2b:f2:53:d7:62:62:63:51:
be:d3:e4:6f:00:19:08:f1:b3:27:58:f1:7f:70:5e:b8:c0:6f:
df:24:1b:e1:29:5c:bf:5f:10:00:ed:6b:d9:6e:10:e2:68:07:
64:ec:08:70:18:f5:c0:68:cc:20:96:a9:34:20:12:2a:1a:29:
28:ad:fd:1a:cc:ac:d8:17:07:c4:5c:90:d6:b5:52:a1:9b:b7:
e3:ce:e5:7c:d0:69:79:9c:c6:c3:86:b0:34:a2:eb:cf:f0:bf:
bd:ec:4b:0d:68:a9:ad:be:cf:e2:c8:94:a9:ce:5e:f1:d8:84:
ed:6d:cb:81:71:5a:0f:0c:ae:80:7a:33:6b:12:ea:fe:f6:44:
c5:44:00:bd:d2:06:e0:c5:b6:e7:1b:1c:5f:4d:5a:ac:44:89:
f5:9d:83:e3:c8:7a:f0:ca:ae:46:ac:be:e6:68:bc:72:30:19:
26:06:c9:3c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBBSspjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NGY3NzYwOTQwODAwYjg2ZjgwODZlMjA5ZWRkMWE4NWJhYzBmNWRjMB4XDTIyMDEw
MTE1MDI1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWMyMzE1ZDk4ZGU2
OTM3ZWIyYTczNzJlMTQ1MmM4Y2YwODEzYmIzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMxVR2X+72Ht2pAaiNJfW2Fdeo3YLl0OyUyWCaOFlHN/B/2L
srPd4dtVejZGqzNhC21E4jfEKukN09t1yx8Ej2+Z9zj3opvgfCF/RFmDYpS4LnnR
QkXXu5b6hE9rRo+ciEvIHI5Gaze+sHRjT7FItxYlwOhF19K+11PLcFiV1igELaDm
JQQ3hY6GYQ93tBCKPp9Us9ZgOg+FTnBpvgaarSeb4qXI03OnrXxiVBgrmDJCNOVi
lSPb8oqpZTaTHT3NZCJ4z0c2+wr9mkxLuinmr6wpEYp9jt433XfSsKP+WLB7t9SE
aeHMeMLSe0wcnxAHiAedQQ1k1H8rzqI7LdvxaKUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSsIxXZjeaTfrKnNy4UUsjPCBO7PzAfBgNVHSMEGDAWgBT093YJQIALhvgI
biCe3RqFusD13DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlQZDJDVUNBQzRiNENHNGdudDBhaGJyQTlkdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvNWM1ZTIyLWU0ZjktNDk4Ni1hMDU1LTA0NzVkMTNmNDYzYy8x
L3JDTVYyWTNtazM2eXB6Y3VGRkxJendnVHV6OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
NWM1ZTIyLWU0ZjktNDk4Ni1hMDU1LTA0NzVkMTNmNDYzYy8xLzlQZDJDVUNBQzRi
NENHNGdudDBhaGJyQTlkdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgI68DANBgkqhkiG9w0BAQsFAAOC
AQEA8Oqfjxqw3voh/thJ1MXNsNlmRo3MNrjJEOlS1Q4RQ/MNuGK8Krc7+tsbEWD4
jnnBrWPQec7uWohaMOuYoETkIiyULy4M6ONSCRjh2/zHGxuHRyvyU9diYmNRvtPk
bwAZCPGzJ1jxf3BeuMBv3yQb4Slcv18QAO1r2W4Q4mgHZOwIcBj1wGjMIJapNCAS
KhopKK39Gsys2BcHxFyQ1rVSoZu3487lfNBpeZzGw4awNKLrz/C/vexLDWiprb7P
4siUqc5e8diE7W3LgXFaDwyugHozaxLq/vZExUQAvdIG4MW25xscX01arESJ9Z2D
48h68MquRqy+5mi8cjAZJgbJPA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:36 2023 by rpki-client on console-fra.rpki-client.org