Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x1yMvPUhmN3tu3F_De6R0qyzfMw.roa
File: x1yMvPUhmN3tu3F_De6R0qyzfMw.roa (raw, json)
Hash identifier: DHxTdCkbjE6egrD0nqgxunwHRQ1AG0eZoYyyOscPsQ0=
Subject key identifier: C7:5C:8C:BC:F5:21:98:DD:ED:BB:71:7F:0D:EE:91:D2:AC:B3:7C:CC
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1CF6883C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x1yMvPUhmN3tu3F_De6R0qyzfMw.roa
Signing time: Tue 19 Apr 2022 09:42:33 +0000
ROA not before: Tue 19 Apr 2022 09:42:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6282
IP address blocks: 64.43.112.0/22 maxlen: 22
193.36.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485918780 (0x1cf6883c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Apr 19 09:42:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c75c8cbcf52198ddedbb717f0dee91d2acb37ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:33:32:1d:d8:a9:79:da:9a:77:70:3b:d8:
29:06:fb:7d:50:70:66:d3:8f:c5:fa:86:7d:b1:19:
76:2b:87:15:2d:98:81:2b:39:87:36:93:b0:67:c8:
b5:81:0d:71:c0:f0:ba:1b:7a:91:d5:c0:3b:76:f5:
ce:75:e0:72:16:44:5b:7d:2a:40:97:13:f9:3f:35:
5b:be:ad:41:55:7f:b4:9e:a2:70:bf:37:3f:23:cb:
13:69:75:6b:be:46:0c:47:cc:ed:4c:60:d6:d1:2f:
48:9b:57:aa:78:87:a1:55:b6:3a:d6:f9:e4:a3:8c:
ea:58:27:22:5b:1f:b2:fe:fe:6e:e3:c8:e0:ac:cf:
6a:9e:54:ac:6e:e4:53:af:4e:26:87:94:3c:94:19:
64:d2:52:7d:e9:79:e3:f1:75:1a:c2:d9:fd:78:ef:
41:27:55:c1:41:dd:1e:b2:6e:39:da:75:25:78:6b:
f2:85:dc:86:93:88:2d:01:fe:42:cd:50:73:2d:a1:
40:69:d1:01:15:83:c5:27:de:c0:c8:fb:2c:22:8f:
b1:e6:8c:a7:93:92:2c:d4:53:34:3a:75:94:fb:ca:
e8:38:36:08:d9:4c:60:ec:72:37:1c:cc:49:d7:2d:
b5:1b:4d:c8:4b:80:67:68:68:c7:64:b2:7f:48:58:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5C:8C:BC:F5:21:98:DD:ED:BB:71:7F:0D:EE:91:D2:AC:B3:7C:CC
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/x1yMvPUhmN3tu3F_De6R0qyzfMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.112.0/22
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
21:90:72:37:ca:1d:d5:f6:c1:82:dc:9d:75:2c:2e:9b:4d:5b:
a5:38:ee:2b:11:13:7a:68:2b:52:f4:39:7b:ba:39:e9:d5:2f:
42:d8:c3:00:01:4f:50:24:5a:f9:9c:76:91:d8:f9:42:1e:b6:
0f:7a:d9:0c:8e:9f:51:31:73:72:14:88:36:9a:a3:c7:e4:b5:
01:60:3e:a1:05:20:6a:2c:c8:ce:b7:21:48:88:e6:f7:7d:e9:
6e:a2:7d:44:fd:41:47:66:e7:14:c8:b0:e5:be:c2:c4:85:ec:
11:61:a1:54:c6:ec:a1:76:52:cd:58:fb:b0:eb:32:50:2e:c1:
16:36:09:12:c9:db:d0:4a:26:d3:e0:f9:95:98:3b:65:a5:43:
a0:04:38:d1:f9:5b:5e:2a:3e:95:25:a5:3f:c5:1e:d9:b4:85:
6d:07:a9:34:f2:2a:f5:bd:70:83:9c:91:77:bc:b9:95:83:86:
1d:9a:57:2b:34:cd:7e:5d:b2:63:fc:cb:da:55:87:0e:f8:ea:
bd:ac:a1:b2:46:86:bf:05:5a:a1:f1:37:4c:5e:13:3b:93:0b:
54:ec:18:b0:63:a9:22:42:50:69:2d:ee:69:a5:51:71:1f:0f:
d6:6a:53:98:f0:0a:8d:c6:1b:d3:45:d7:2e:5f:c9:97:28:8c:
f6:c6:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org