Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/ERLmSdDFJ6IGJt_SkYP6vR5AmOw.roa
File: ERLmSdDFJ6IGJt_SkYP6vR5AmOw.roa (raw, json)
Hash identifier: jvbvDISnfYYC2Yx/kqS6iCaiI2oCDS5bROZeoN3iv8o=
Subject key identifier: 11:12:E6:49:D0:C5:27:A2:06:26:DF:D2:91:83:FA:BD:1E:40:98:EC
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 01828C1DD73205AE4214CE9E0F7FE05D0E02
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/ERLmSdDFJ6IGJt_SkYP6vR5AmOw.roa
Signing time: Thu 11 Aug 2022 08:55:41 +0000
ROA not before: Thu 11 Aug 2022 08:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24875
IP address blocks: 2.58.21.0/24 maxlen: 24
2.58.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:1d:d7:32:05:ae:42:14:ce:9e:0f:7f:e0:5d:0e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: Aug 11 08:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1112e649d0c527a20626dfd29183fabd1e4098ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:97:92:5c:bd:a3:7a:6a:ef:86:03:dd:99:
93:82:52:c4:f9:3b:26:34:d3:42:2d:0e:06:2a:75:
86:fd:7c:16:7f:8e:f9:6e:82:00:6d:d6:5e:23:46:
82:01:95:2e:1c:0b:2f:f5:5c:1f:49:43:c4:89:dd:
da:e2:d8:5c:25:50:42:d8:eb:1b:bc:2d:ad:a0:0e:
4e:c7:ae:d2:e2:18:f1:aa:26:cf:1a:28:98:78:68:
cd:c3:95:9d:ec:49:22:e8:a4:f1:d4:f2:59:fd:4c:
3a:bb:28:ad:90:8b:aa:52:f7:42:73:11:07:80:a2:
e7:dc:70:53:05:9d:95:21:92:6c:79:3c:60:84:9d:
48:bc:4c:c9:87:c9:46:b2:d2:e7:32:75:03:ee:84:
b4:1e:b6:22:64:ed:d9:a8:2c:32:78:b4:07:36:4f:
6a:6d:34:89:7b:c3:5b:5a:11:96:21:90:53:e1:80:
6e:17:8d:1c:4c:69:ff:5c:89:c8:dc:ac:e7:79:cf:
c2:20:d7:fa:6c:da:4c:00:b2:af:68:19:22:3f:c9:
5b:83:63:d6:dc:89:ea:2a:ae:cb:1a:cc:fb:28:c5:
30:42:7a:67:b9:55:e4:cf:48:46:84:67:db:52:f6:
72:fa:8c:48:97:66:90:bb:5a:0f:2a:21:23:85:e1:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:12:E6:49:D0:C5:27:A2:06:26:DF:D2:91:83:FA:BD:1E:40:98:EC
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/ERLmSdDFJ6IGJt_SkYP6vR5AmOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.21.0-2.58.22.255
Signature Algorithm: sha256WithRSAEncryption
65:42:47:88:db:c6:f4:fc:af:de:54:23:3f:33:6f:9e:d9:07:
3a:6e:c8:e3:17:38:10:a7:f5:01:76:2c:a3:e4:c4:ff:6a:33:
74:eb:a0:27:88:99:c6:c5:2c:b1:0f:d1:ea:be:45:ec:a7:65:
8d:49:03:e0:03:b2:b3:98:4b:dc:60:7e:9b:b9:e4:57:f6:57:
78:ae:01:d6:e4:56:2c:f3:c9:20:c7:a3:bd:ce:7c:6f:00:7f:
7d:9d:23:28:c5:e0:38:b8:24:98:42:88:fb:d5:c0:5d:38:b0:
db:4e:7b:81:e0:44:6c:f7:a3:2b:74:35:9e:3a:f0:29:f5:a8:
c2:c5:42:51:5e:b1:45:0b:12:30:c2:d9:dd:27:38:0d:b4:c9:
39:95:39:36:99:40:ef:9e:53:b1:9a:58:d0:c3:2e:4d:0c:48:
72:be:77:4e:b3:d4:66:c5:b9:96:8e:21:46:5f:f3:4e:a3:81:
b6:0a:bc:93:18:d1:4c:45:95:79:1f:07:c2:e6:dd:bb:2f:7a:
89:f4:d0:e4:7d:8c:03:5b:80:e0:8a:bf:aa:98:e8:af:73:80:
21:34:91:df:6b:9a:c6:3e:1d:c5:69:39:9e:c0:b9:f1:33:24:
dd:a3:20:c5:95:0c:60:60:56:f0:80:4e:aa:94:63:62:b4:89:
bf:67:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org