Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_DISRmMgloJcVXl6i--ZE1eaBSg.roa
File: _DISRmMgloJcVXl6i--ZE1eaBSg.roa (raw, json)
Hash identifier: GqO3ZHJGUrdf5SSWW3FP4gQoGYvApgAAsJJKR0u743s=
Subject key identifier: FC:32:12:46:63:20:96:82:5C:55:79:7A:8B:EF:99:13:57:9A:05:28
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 021C7780
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_DISRmMgloJcVXl6i--ZE1eaBSg.roa
Signing time: Wed 09 Feb 2022 21:27:42 +0000
ROA not before: Wed 09 Feb 2022 21:27:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 176.57.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35420032 (0x21c7780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Feb 9 21:27:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc321246632096825c55797a8bef9913579a0528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:13:5e:62:e0:64:3e:73:99:88:b6:ae:5d:
fe:9f:d1:b1:b0:ec:41:d1:92:44:3e:4a:31:60:c3:
b1:5e:95:2b:1c:7c:52:77:be:11:41:db:e5:55:89:
9f:f3:26:33:a0:73:c4:2f:1e:5e:63:d3:d4:44:05:
92:50:53:51:28:a8:ae:0b:af:bf:43:15:d7:ab:8f:
3d:03:de:6d:51:9f:7f:33:fe:cc:e0:c8:62:d9:38:
1e:bf:99:03:b0:cf:19:c5:e6:8b:eb:e4:d5:37:fd:
17:88:b6:3c:5e:b8:dc:29:f0:a8:dc:e7:e2:42:62:
12:5f:a1:d9:3a:19:bf:19:af:7d:65:42:a0:7f:32:
9d:65:2c:23:b9:7a:c5:43:ee:fd:c3:e9:91:10:64:
87:b1:2d:77:89:2c:34:2a:4d:e8:cd:85:cc:a7:1f:
17:59:19:a9:19:19:ae:0d:af:21:b3:c7:44:9c:3f:
8b:12:f8:06:16:22:75:95:90:e5:70:a6:d6:1a:06:
6f:0a:c6:1a:57:79:bf:c7:1d:46:a6:77:84:2a:b2:
b7:16:9a:33:f7:9b:ef:94:8b:4d:11:fd:4c:09:e7:
2b:0b:3e:a7:5e:8e:86:ea:ea:d0:41:a5:e5:96:b4:
43:49:42:93:df:47:40:bc:99:2a:c1:da:f2:3b:7a:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:32:12:46:63:20:96:82:5C:55:79:7A:8B:EF:99:13:57:9A:05:28
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_DISRmMgloJcVXl6i--ZE1eaBSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/22
Signature Algorithm: sha256WithRSAEncryption
27:9b:73:71:f0:71:e1:1e:4c:c4:3f:6f:0a:75:93:4f:5c:dc:
bc:6b:12:91:c9:b3:5f:b2:28:68:19:fd:5b:3c:87:85:80:53:
1a:19:65:9f:70:30:47:fb:94:b5:30:09:ae:e1:d3:07:78:fd:
5b:7c:a2:66:d9:3a:cb:59:a3:67:fa:50:74:5c:42:66:1b:29:
26:07:90:e8:bf:ac:f6:bc:93:1f:b4:d9:dd:25:0f:59:14:a1:
94:d4:58:36:ca:e6:cd:f1:05:85:2f:d3:24:a6:b4:45:53:1f:
d4:e2:55:01:fc:89:cd:12:fc:83:83:bb:7e:3b:79:03:16:6f:
d2:63:5a:f5:dd:68:41:52:20:33:89:28:85:5f:7a:57:fc:a4:
20:00:60:b8:20:af:44:63:e8:45:8b:7c:3c:46:08:96:9a:a8:
9d:48:b1:59:7a:14:8a:23:b7:3d:45:28:a5:8f:d2:11:35:ec:
63:bb:0f:6f:91:6e:43:bc:15:e7:5e:cd:8f:f6:91:fd:f0:af:
6f:c8:67:db:52:37:86:9b:58:e8:56:27:ff:95:7f:b7:04:2a:
8d:ee:8c:1a:6c:c3:b7:59:a3:e3:73:89:73:3b:36:51:3c:03:
8a:2e:fa:9e:45:12:71:34:ce:a6:84:d5:30:1f:56:3f:a0:33:
f7:fc:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org