Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/t0zCRMaBDAXeDToTkt2SdJE_TMs.roa
File: t0zCRMaBDAXeDToTkt2SdJE_TMs.roa (raw, json)
Hash identifier: E7qnnvulr7roJ5hizMaae8lbB2anonHDL7k6gdNQYsI=
Subject key identifier: B7:4C:C2:44:C6:81:0C:05:DE:0D:3A:13:92:DD:92:74:91:3F:4C:CB
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01825FE9A286B7FAD642CE074380A24EC3FE
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/t0zCRMaBDAXeDToTkt2SdJE_TMs.roa
Signing time: Tue 02 Aug 2022 18:55:23 +0000
ROA not before: Tue 02 Aug 2022 18:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 176.57.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:e9:a2:86:b7:fa:d6:42:ce:07:43:80:a2:4e:c3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 2 18:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b74cc244c6810c05de0d3a1392dd9274913f4ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:4a:df:d5:71:1b:f4:1b:b6:e5:25:07:52:
fd:7c:07:5d:91:79:f3:30:0e:d7:2c:8f:ab:b7:d7:
9c:5e:fe:fd:19:3c:d5:f0:5f:dd:36:68:af:fe:8c:
29:f7:12:b0:36:dc:f0:e3:6b:63:67:52:9b:7b:cf:
f0:ab:40:c6:3e:7c:bf:53:06:47:39:f5:10:e4:31:
7a:ae:4f:0b:71:37:ca:ab:5e:0f:05:0f:23:5a:28:
52:49:cd:77:e8:26:6c:53:0f:1e:d6:c8:35:3e:e8:
64:ae:9b:9d:0d:01:00:5a:e3:3a:d3:8d:93:3c:d1:
d7:40:85:13:52:b0:ae:ec:3e:07:de:e7:8b:f2:72:
6d:55:84:c3:d5:3f:4e:68:5f:50:cf:83:08:54:c8:
7c:a7:3a:2b:15:5e:ac:11:24:d2:49:ba:3a:8d:d3:
d1:d7:45:22:71:fa:f6:7d:e4:c3:63:f0:73:1d:e6:
8b:8b:21:61:36:5e:43:67:bb:d6:bf:22:57:3d:75:
ab:d0:c0:cc:bb:21:6a:7b:dd:6c:d2:88:07:c5:8f:
66:75:95:b3:f8:d6:9a:c7:dd:85:9f:7b:60:fd:4b:
88:01:2a:a5:7f:fb:3d:2d:1b:25:e8:c9:da:48:6d:
2a:02:b7:3d:1b:00:1f:44:47:59:d4:ba:a5:26:1c:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4C:C2:44:C6:81:0C:05:DE:0D:3A:13:92:DD:92:74:91:3F:4C:CB
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/t0zCRMaBDAXeDToTkt2SdJE_TMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.51.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b7:b2:59:96:32:34:80:4b:5a:f8:77:5f:cb:ea:18:03:57:
83:4e:6a:1a:7f:b4:30:7b:be:14:80:a4:5d:c9:cf:cd:bb:1f:
2e:69:90:51:74:45:34:30:0f:f1:52:20:a2:c1:01:90:76:1d:
60:2a:1c:65:4c:6a:70:64:81:ea:ff:c7:53:39:e5:2b:59:b4:
ce:4f:40:4d:fa:4d:f3:23:cf:2c:d0:e4:38:e9:a4:9e:1e:cb:
9a:e3:36:c5:ac:04:fd:cd:19:ea:d1:cc:a3:53:29:26:28:a3:
c3:29:57:b2:46:e0:cc:d8:65:9a:4c:8e:53:47:0b:db:1b:61:
a2:cf:c7:92:15:54:15:e6:0e:dc:38:64:95:83:ac:44:31:4d:
28:4b:26:6b:86:aa:9b:2d:96:ea:14:1b:c8:16:32:aa:ed:0b:
6c:77:ac:3e:af:94:80:bf:ad:86:2a:2a:93:0f:bd:8a:92:fd:
74:31:ca:a5:3e:28:03:03:6c:45:9b:5c:a8:69:13:ba:e6:65:
1b:5e:ee:72:f9:54:e1:91:d4:d4:f1:cd:ec:9c:a5:59:7e:d2:
d8:36:5f:6f:f6:5e:01:ad:69:9e:7c:cf:9d:2f:a9:dc:e0:3a:
a6:fc:da:45:c0:5f:6a:d3:5e:f7:e7:2c:5d:42:17:14:bc:19:
8e:c8:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org