Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/00tvyFf6BII1Ibl6B5Lkmut6rUA.roa
File: 00tvyFf6BII1Ibl6B5Lkmut6rUA.roa (raw, json)
Hash identifier: KOnsiKAz7OIgL/vQVjcu4j4dt9NUWf5EEWOX2O8lZyA=
Subject key identifier: D3:4B:6F:C8:57:FA:04:82:35:21:B9:7A:07:92:E4:9A:EB:7A:AD:40
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1CC429CD
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/00tvyFf6BII1Ibl6B5Lkmut6rUA.roa
Signing time: Wed 06 Apr 2022 12:58:00 +0000
ROA not before: Wed 06 Apr 2022 12:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 714
IP address blocks: 64.43.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482617805 (0x1cc429cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 6 12:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d34b6fc857fa04823521b97a0792e49aeb7aad40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:2a:38:00:f9:ff:f8:51:db:ba:2d:50:b9:
df:09:38:f4:38:d6:6f:da:10:ba:85:ab:a7:44:62:
0a:09:2f:a4:c5:2d:72:b3:66:2c:4e:77:11:a3:b9:
9a:94:41:bd:98:34:cf:a2:67:35:b5:2c:dc:5e:58:
91:16:39:44:f7:5b:d9:85:97:84:8b:2e:99:56:ab:
b1:5d:b2:32:7d:14:56:3e:b6:6c:b2:1d:0c:dc:7e:
b1:06:f9:1a:a8:01:2f:a1:9c:98:1c:73:1f:1d:41:
df:12:38:f4:c7:c4:14:31:aa:7a:63:37:75:43:46:
c9:61:f2:9e:09:b0:fa:44:61:52:92:00:29:66:7e:
28:f2:0c:09:9c:99:61:ed:a9:d6:d9:c7:9a:5b:73:
a0:d6:5a:b7:15:28:f7:79:b3:11:7b:9c:0b:fe:aa:
21:69:44:f2:73:67:46:2b:19:83:5a:4a:01:d8:66:
62:b0:1d:cf:db:9c:d4:c2:cc:29:d1:db:4d:04:48:
ba:e8:7c:b1:8c:c3:f0:07:a1:9b:bf:46:78:d6:4f:
62:0e:fc:0c:01:79:f5:87:74:d7:ab:59:b6:b8:0f:
68:71:56:24:77:a1:fc:54:75:67:1a:3f:57:1f:9c:
21:a1:0d:78:80:ed:7d:4c:0c:2c:e2:0e:a6:43:34:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:6F:C8:57:FA:04:82:35:21:B9:7A:07:92:E4:9A:EB:7A:AD:40
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/00tvyFf6BII1Ibl6B5Lkmut6rUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.73.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:8d:23:76:87:ff:d0:9b:57:4f:f0:db:ba:f7:b5:7f:f2:69:
92:86:e4:58:2e:a4:71:a0:da:73:11:91:99:aa:68:a3:ea:31:
d1:6d:dc:3f:f4:6b:90:a7:aa:1d:d3:a4:4e:55:88:32:8c:fc:
2f:90:2a:4d:3b:31:bc:ff:c3:57:ff:b5:32:d6:69:d0:fc:ab:
89:85:ac:59:24:e6:38:1b:74:fa:69:03:d7:4f:14:76:95:bc:
14:39:a8:e8:26:50:36:6c:ab:6c:c3:d1:ce:fd:0f:8b:c2:77:
d6:02:51:f0:f6:0b:cf:83:53:19:66:b5:3a:14:ea:7d:bc:d4:
c3:e7:ec:55:b2:8a:a2:ff:d7:fb:3a:30:f1:0f:69:4f:c8:21:
83:a6:41:4a:8c:31:cb:e5:5a:94:92:f5:8a:d3:5d:9c:c4:f8:
33:71:83:e4:90:19:b3:3c:fb:de:a5:99:e8:92:c4:50:2d:7b:
49:c6:3f:dc:e4:f4:96:33:64:5e:32:f6:75:6e:8d:af:01:fe:
8a:ac:87:62:24:38:bd:f5:7b:51:0b:1e:41:d0:c1:88:24:d0:
fc:24:2b:aa:12:bd:03:55:6e:ac:3c:b5:08:91:45:a7:1a:b3:
86:81:18:7b:cf:80:28:7f:e6:fd:6e:f2:a2:76:4c:66:c4:e6:
00:73:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org