Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/d2CrVn_UIjA8AosCgEmk-X3qRIs.roa
File: d2CrVn_UIjA8AosCgEmk-X3qRIs.roa (raw, json)
Hash identifier: VHEIR/dx5Md8gG8A4jyH3jAZsAUfHsY8z1q2E53tggU=
Subject key identifier: 77:60:AB:56:7F:D4:22:30:3C:02:8B:02:80:49:A4:F9:7D:EA:44:8B
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 1063AECE
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/d2CrVn_UIjA8AosCgEmk-X3qRIs.roa
Signing time: Sat 01 Jan 2022 09:58:29 +0000
ROA not before: Sat 01 Jan 2022 09:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 139.18.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274968270 (0x1063aece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Jan 1 09:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7760ab567fd422303c028b028049a4f97dea448b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:7c:cd:d5:1f:d0:3c:18:27:a1:60:2e:cf:
ff:cd:a8:79:95:fd:b8:16:8b:c5:a5:c4:4a:e5:26:
19:f6:8d:d7:5e:71:ea:b1:fa:e6:ec:aa:33:76:e1:
7b:5c:52:6e:5d:ae:83:70:77:10:65:fd:a0:c9:55:
22:fa:08:97:4b:ec:bb:68:25:e7:72:f3:c4:99:d7:
e5:9a:78:21:c1:8c:f0:bf:34:00:85:c0:62:7b:6e:
00:f0:62:6d:e8:f4:ba:ac:17:3e:51:1a:05:2b:29:
d8:52:dc:f1:ce:10:54:a5:d5:04:16:75:73:8a:44:
06:17:41:12:91:a7:0c:94:dc:0d:66:52:f9:8a:b8:
11:35:e6:f6:4b:27:04:3c:11:a4:45:7c:47:96:7c:
bd:c4:0c:43:2b:fb:ee:6a:b9:f8:c3:f0:ba:92:de:
71:50:e4:c7:ce:ae:6b:74:84:a3:21:92:1d:5d:a8:
a4:31:2e:2d:46:9a:98:92:b4:50:f1:6d:74:dc:cf:
c3:5f:ec:4b:5c:45:b3:17:ba:60:db:ed:5e:69:a8:
4c:96:48:f5:7a:45:fb:1d:e4:51:17:51:d2:37:26:
02:a0:9e:02:ba:17:bb:d8:96:b1:b8:c8:84:16:70:
7d:66:35:9a:7a:65:0c:d8:83:a4:fd:3e:0b:4a:24:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:60:AB:56:7F:D4:22:30:3C:02:8B:02:80:49:A4:F9:7D:EA:44:8B
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/d2CrVn_UIjA8AosCgEmk-X3qRIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:ba:a7:d4:63:20:55:c6:c6:09:bf:2b:12:21:1b:66:37:23:
48:20:fa:dc:81:9f:89:87:79:7f:9c:5a:96:76:23:83:09:09:
44:55:b4:97:d0:fe:68:60:1f:3a:05:f0:a9:be:17:93:a0:61:
d2:c2:96:0b:b0:6b:c7:9a:a9:b3:8e:e7:00:7f:ea:1b:ea:ca:
7b:3d:40:24:67:8e:5d:6a:fa:b8:94:f3:d2:04:6a:b3:8e:38:
00:30:51:00:16:81:21:98:b9:ac:95:a7:33:3e:2f:27:f7:3c:
33:49:34:65:e2:73:44:b1:99:50:d0:c8:b6:20:a4:55:31:7b:
11:06:a7:11:9a:7d:f2:7f:95:cc:78:e2:7b:44:e8:bc:3a:fc:
9b:f6:77:eb:57:0b:01:49:f6:3a:8c:12:70:0e:9d:02:ee:a7:
af:e1:4f:94:61:73:1e:a6:3a:61:12:e1:c1:10:9d:49:22:ec:
04:38:a5:e9:27:c1:67:83:d5:56:15:36:4c:e2:c4:df:63:27:
8d:11:25:54:f9:96:fa:d1:65:d5:1b:f5:26:7a:99:98:6f:c9:
8e:cf:22:19:c1:31:93:97:21:3b:5d:9f:0e:40:40:7e:81:25:
b7:6e:02:91:b6:01:f9:ef:f2:f9:52:2b:1a:ea:c3:de:b3:71:
67:0a:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:41 2024 by rpki-client on console-ams.rpki-client.org