Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DaeIQgS0fEOS3PVmcUpZsASsQEk.roa
File: DaeIQgS0fEOS3PVmcUpZsASsQEk.roa (raw, json)
Hash identifier: iGJgOMvxbZeZ2YQYsZ2T3kp6zon8YrjHtmVEHhCk+Pg=
Subject key identifier: 0D:A7:88:42:04:B4:7C:43:92:DC:F5:66:71:4A:59:B0:04:AC:40:49
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 02ED6992
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DaeIQgS0fEOS3PVmcUpZsASsQEk.roa
Signing time: Wed 11 May 2022 12:57:01 +0000
ROA not before: Wed 11 May 2022 12:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 176.57.52.0/22 maxlen: 24
176.57.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49113490 (0x2ed6992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 11 12:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0da7884204b47c4392dcf566714a59b004ac4049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:4e:c3:d3:8f:20:a7:e7:9f:b2:36:4e:e1:
57:11:3f:17:01:94:1e:26:61:fd:f7:b7:8f:2d:f2:
7f:d6:dd:f4:5f:d7:db:f3:01:ec:4b:04:f8:72:3d:
04:da:a6:33:a2:da:ac:c6:1e:f1:c0:aa:e2:26:24:
c0:74:ec:9c:bd:6d:41:10:7f:c6:39:e6:02:f3:ce:
bf:01:de:2b:73:df:44:e6:ac:03:2b:b2:c1:05:38:
ec:63:b3:6f:3e:d3:d4:0b:e2:4b:08:03:81:3d:1e:
b1:84:cc:c6:a1:45:13:4c:e8:5c:70:95:04:91:36:
cf:63:4c:99:80:cb:11:84:f5:35:8c:e7:a8:de:e5:
1e:72:36:74:39:66:b6:bb:4a:32:79:09:1b:d7:58:
a3:79:e8:04:d7:60:4b:90:af:95:c2:fb:00:68:92:
54:d3:41:59:8e:df:4e:5d:ca:0f:5c:13:cc:56:fc:
be:51:78:63:13:39:72:34:96:0f:28:de:43:63:3f:
7c:6a:a3:3a:40:64:8a:4c:2f:b7:b9:37:2d:da:41:
1e:7a:88:68:d5:a3:64:5f:d9:fd:dc:fe:75:b8:fb:
4d:2e:a7:1f:cd:3f:c5:0a:04:7b:91:4d:b1:8b:40:
52:2b:f3:84:81:5a:25:4f:c1:f2:46:06:fe:92:a8:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:88:42:04:B4:7C:43:92:DC:F5:66:71:4A:59:B0:04:AC:40:49
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/DaeIQgS0fEOS3PVmcUpZsASsQEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.52.0/22
176.57.58.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:c7:17:37:20:8f:68:32:4d:4b:a8:58:d4:a1:e5:a5:6b:3a:
e2:88:46:f5:75:ac:fb:ba:c3:23:6f:1f:d5:25:54:d9:cd:39:
80:6d:70:48:6f:c0:e7:f7:07:d5:97:7d:c1:b9:3c:a6:59:cc:
42:44:ec:ae:80:2c:23:cc:90:a4:6d:08:c2:35:c6:e3:ac:22:
60:1c:6d:ee:31:fd:39:64:e8:90:03:e1:00:84:11:b7:9b:7e:
75:9e:dd:f9:4c:b8:55:d8:85:9d:45:6e:2c:48:8c:fc:58:df:
86:c3:35:c0:7c:86:b6:d1:84:88:fb:f1:9a:46:ec:ef:c7:b1:
f4:08:26:39:71:60:2e:71:06:77:b5:65:a1:3c:bc:43:c1:28:
d4:45:f4:fb:c4:0a:d9:a5:89:9d:47:93:59:39:46:6d:b1:ea:
02:08:fc:42:76:f2:44:a9:38:85:f7:83:cc:cc:75:6a:5f:7a:
97:bf:1a:cc:f8:58:35:d6:b6:7b:8e:b2:a2:69:a5:69:3d:f4:
b2:1e:5a:6a:90:be:5f:87:08:5c:65:bf:ee:7d:46:8d:d2:0e:
5b:0b:7b:c3:41:e1:94:9b:97:73:c4:26:8b:71:3a:68:6b:68:
bf:39:9b:76:03:19:39:28:69:af:06:ab:7d:34:bb:46:f2:6d:
c0:df:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org