Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/Mc3MrXi25dBnW7Td0le6AdUYERU.roa
File: Mc3MrXi25dBnW7Td0le6AdUYERU.roa (raw, json)
Hash identifier: peS+MYow21SpGkm0Uyw+5A9Y/jER+3kcvLYBlZQd+X4=
Subject key identifier: 31:CD:CC:AD:78:B6:E5:D0:67:5B:B4:DD:D2:57:BA:01:D5:18:11:15
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 044DF0A6
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/Mc3MrXi25dBnW7Td0le6AdUYERU.roa
Signing time: Mon 04 Apr 2022 14:38:09 +0000
ROA not before: Mon 04 Apr 2022 14:38:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24875
IP address blocks: 2.58.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72216742 (0x44df0a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: Apr 4 14:38:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31cdccad78b6e5d0675bb4ddd257ba01d5181115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:40:7e:72:c5:52:f9:62:e1:0d:a6:de:b4:
c1:65:bb:8d:8e:c6:07:17:60:97:03:d9:16:34:6a:
f3:74:96:99:23:1f:f4:3d:b2:ce:75:93:69:c4:95:
75:c6:fa:2d:4f:72:d6:7e:3e:a3:06:17:2d:02:3c:
0d:1a:c3:71:9b:47:cf:09:59:04:d2:ba:d1:4e:fe:
41:c4:d0:c7:92:c0:e4:5a:43:ad:62:f1:42:78:8a:
b0:33:04:4c:be:ce:02:27:8e:68:6f:d8:d6:10:05:
a6:27:84:f2:66:2d:24:be:d7:a2:38:c4:ba:7c:bd:
6d:bc:2d:73:a4:ce:f6:fd:7d:67:17:98:80:a5:af:
83:63:ed:99:90:cb:32:d4:cf:b9:e1:6b:9a:7e:54:
a9:72:62:3a:cf:eb:75:e2:a8:d3:5a:74:74:3f:e0:
8a:97:de:8c:c0:10:c6:1e:75:11:c2:a3:b6:ef:ad:
42:59:ff:a4:61:96:f4:24:18:61:43:ef:61:f2:b5:
93:90:9e:be:e1:00:b0:88:2b:94:4e:80:54:48:02:
cf:9d:53:2e:2f:89:4b:dc:67:d0:85:0c:da:b5:81:
7a:94:4d:e2:9a:88:da:d5:d5:61:71:a5:e6:6c:2c:
52:80:ad:5d:07:9e:25:08:c7:d4:14:32:f8:94:cf:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:CC:AD:78:B6:E5:D0:67:5B:B4:DD:D2:57:BA:01:D5:18:11:15
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/Mc3MrXi25dBnW7Td0le6AdUYERU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a7:47:e5:37:84:d4:85:e7:a0:72:d5:cc:36:60:df:d2:1e:
a0:c5:f8:f3:5d:41:d5:a4:a7:da:86:55:2d:06:64:7d:e0:a0:
5e:8a:a8:0c:5b:03:83:ab:7e:21:e8:83:05:4d:15:f7:0e:1e:
83:0c:ae:19:0b:48:24:f9:b2:50:73:5e:4f:a7:5c:53:74:19:
5d:16:9d:5e:af:2c:b7:55:80:0a:90:e7:c9:17:c5:34:2f:89:
a1:a0:4f:c5:b3:e6:11:c7:3c:ae:9a:21:09:ce:15:43:b4:19:
29:bb:4e:40:40:91:81:d8:4d:d1:c3:74:0c:c9:d1:52:6a:96:
15:df:0d:79:df:3f:0a:75:14:53:a0:bf:d5:2a:2c:1a:38:53:
28:7d:b8:9f:c5:e3:0f:cf:1b:45:a3:0e:8a:d4:74:57:ab:d5:
e7:59:4e:14:11:34:3b:f8:2b:e1:1e:30:12:a8:f6:9a:27:89:
24:05:84:d7:72:79:58:f5:22:62:bb:2d:10:9d:b9:6e:c6:2a:
9c:08:a1:d7:fb:84:84:ce:8e:f4:72:48:56:68:3b:aa:dc:4f:
fd:cc:fa:45:6e:58:8c:7d:06:3d:17:e8:89:7c:75:74:fe:28:
2f:a9:80:44:c2:b7:47:20:30:4f:50:71:45:c9:98:25:14:26:
87:a1:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org