Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ZkNrUr1RDgzXBSp0TDCrtV-s23o.roa
File: ZkNrUr1RDgzXBSp0TDCrtV-s23o.roa (raw, json)
Hash identifier: fJGPp9LXADrVhzLs7uEs9F/BD40xdoDPNnJs9vVBltw=
Subject key identifier: 66:43:6B:52:BD:51:0E:0C:D7:05:2A:74:4C:30:AB:B5:5F:AC:DB:7A
Certificate issuer: /CN=ca9a2be7a2b9b9a473dabc8578b444a7b2e8952e
Certificate serial: 01174939
Authority key identifier: CA:9A:2B:E7:A2:B9:B9:A4:73:DA:BC:85:78:B4:44:A7:B2:E8:95:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypor56K5uaRz2ryFeLREp7LolS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ZkNrUr1RDgzXBSp0TDCrtV-s23o.roa
Signing time: Sat 01 Jan 2022 07:03:47 +0000
ROA not before: Sat 01 Jan 2022 07:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60631
IP address blocks: 158.255.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18303289 (0x1174939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9a2be7a2b9b9a473dabc8578b444a7b2e8952e
Validity
Not Before: Jan 1 07:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66436b52bd510e0cd7052a744c30abb55facdb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:a4:b2:4f:c7:4c:d4:e5:21:7e:39:e2:3b:
70:0a:4b:fd:37:06:51:b5:c3:78:b2:cb:39:9f:e5:
44:b7:54:e1:33:21:5c:fe:db:69:8d:7a:36:f7:d5:
7b:22:b3:a0:96:ca:37:58:40:b2:2d:cf:1d:bc:c6:
45:5d:4f:a8:f3:37:f1:78:93:c7:f0:56:5f:00:60:
46:02:4c:48:32:87:fb:e1:68:7c:5e:9b:0c:d9:e8:
d5:6f:14:ee:27:86:44:0a:ab:72:21:27:70:f9:d9:
43:2d:4d:21:7a:c5:5d:1b:49:ea:d2:02:c3:a5:c1:
47:34:53:24:e1:d7:3e:c3:b5:db:df:86:c8:97:e4:
f7:1c:0e:5d:78:0a:18:b5:f8:c6:4e:1a:3d:79:08:
a3:f1:1d:93:6f:7a:c8:20:2e:22:18:44:b1:b6:59:
57:00:25:6f:11:cf:ef:c6:7c:29:e5:17:14:a1:dd:
21:8a:da:eb:40:6f:ec:e1:b9:ef:98:34:bc:d3:12:
43:58:84:1c:6d:54:8f:26:d9:a6:d4:4a:5b:67:99:
51:15:58:dc:cd:c5:36:43:e9:90:11:39:38:1f:b6:
b6:12:40:98:6b:90:7c:8c:16:e1:b4:6d:7d:0c:55:
52:f3:48:eb:31:90:98:75:dd:fe:86:62:49:85:54:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:6B:52:BD:51:0E:0C:D7:05:2A:74:4C:30:AB:B5:5F:AC:DB:7A
X509v3 Authority Key Identifier:
keyid:CA:9A:2B:E7:A2:B9:B9:A4:73:DA:BC:85:78:B4:44:A7:B2:E8:95:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypor56K5uaRz2ryFeLREp7LolS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ZkNrUr1RDgzXBSp0TDCrtV-s23o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/100ea7-3afa-40c5-a2c3-37c652f0f348/1/ypor56K5uaRz2ryFeLREp7LolS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.74.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7b:9a:2f:0a:8e:e5:a0:8b:a5:59:5c:ab:4b:c2:66:e5:0a:
8e:2a:88:11:19:e1:3a:87:a6:6a:f5:6e:2c:cb:39:92:bc:27:
4e:15:6e:ea:ab:31:59:1c:c5:94:7b:fb:a1:54:c9:96:b9:d1:
ec:da:ee:b6:20:4b:fb:a6:07:22:77:2c:d6:bc:4e:59:d5:21:
75:22:85:7c:d6:57:a3:e3:25:4e:0f:75:bf:d8:82:2f:21:1c:
f9:7d:b4:75:1c:0a:48:c5:56:c2:31:fa:56:72:05:d3:ed:ee:
76:63:02:64:0f:44:27:19:46:5d:77:4f:3b:4b:ca:38:a7:5c:
65:b9:0f:85:eb:e8:1c:9a:cb:6a:a8:73:c1:48:af:4e:d9:16:
11:67:e2:d9:02:a7:33:b3:d3:67:b5:24:ad:d5:ca:91:7f:42:
d0:ad:3d:1d:47:e4:80:da:e9:75:9a:24:52:85:b4:19:82:bb:
d3:ed:b6:1c:23:6a:18:82:9b:7e:b7:2c:ce:51:84:da:d1:ff:
88:77:24:31:0e:87:78:4d:cc:0a:0b:f3:b2:cc:ee:97:58:59:
db:27:77:a7:fb:ae:a2:b9:3f:4d:97:f6:d1:5c:b6:67:24:0d:
fd:08:cd:a7:d1:1b:26:d0:46:78:49:ba:1d:b5:af:f1:dd:01:
75:41:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:14 2024 by rpki-client on console-fra.rpki-client.org