Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/DvlIoqI7YRDt-6MNjashg0W7KRc.roa
File: DvlIoqI7YRDt-6MNjashg0W7KRc.roa (raw, json)
Hash identifier: Iuvdvk3jdC+0iLQexukpmrSEtr7K92QEBGwh4hZ++B8=
Subject key identifier: 0E:F9:48:A2:A2:3B:61:10:ED:FB:A3:0D:8D:AB:21:83:45:BB:29:17
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 06474362
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/DvlIoqI7YRDt-6MNjashg0W7KRc.roa
Signing time: Sat 01 Jan 2022 11:01:07 +0000
ROA not before: Sat 01 Jan 2022 11:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6505
IP address blocks: 57.74.0.0/16 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105333602 (0x6474362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 11:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef948a2a23b6110edfba30d8dab218345bb2917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:4c:85:4d:14:9a:cd:16:ac:01:2c:ff:9b:
44:e6:94:00:bb:81:74:33:c1:81:eb:39:b8:14:d9:
1f:dd:18:3b:87:3c:03:3b:17:6e:3d:69:0d:bc:f9:
64:7c:82:08:c7:0d:2a:29:52:aa:36:7b:40:47:63:
75:dc:f7:ba:36:1e:9b:c5:ad:a2:9c:be:32:5e:cc:
f7:4e:7f:38:61:fd:6c:20:20:98:a8:9d:3b:9a:a9:
85:41:ea:66:72:78:00:5d:c7:f0:56:f2:44:2d:6e:
7a:7f:ae:d3:19:f6:81:48:c2:1f:f1:ec:1d:33:ec:
5a:bc:90:d0:8b:ba:d4:b6:cb:ec:af:f4:53:ba:fe:
01:40:d0:5c:cf:22:4c:7f:8e:38:3b:e2:af:ef:d3:
f9:db:9b:9d:4d:da:cb:f1:67:70:48:1c:38:96:72:
d9:e6:13:1b:a3:af:97:1d:8f:92:9e:e0:2d:99:78:
0a:17:29:1f:ae:32:05:93:31:3d:5c:4e:bf:f8:ad:
22:a1:00:34:8b:45:7e:e3:c5:b2:44:1f:11:03:06:
40:a4:9a:e7:d7:71:39:de:dc:7e:1a:82:85:5f:47:
c0:4c:ca:d9:63:02:7a:6e:bc:01:00:77:10:20:68:
e1:9e:ea:06:16:f4:95:84:d5:7f:e3:77:45:4e:63:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F9:48:A2:A2:3B:61:10:ED:FB:A3:0D:8D:AB:21:83:45:BB:29:17
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/DvlIoqI7YRDt-6MNjashg0W7KRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:23:9e:6f:28:c5:80:fb:90:32:81:ac:9a:c8:1c:4c:d0:fd:
7c:01:d9:67:9a:94:b7:1a:1d:a5:f4:61:2c:98:6f:07:b0:e5:
5f:f3:5e:81:ef:06:f3:24:74:fa:ae:59:46:51:3a:6a:cd:e0:
8f:38:df:a5:59:c3:8b:81:a3:a4:75:b3:f9:00:2e:f5:77:72:
55:7e:f0:8d:03:ed:c8:ab:51:13:ba:d9:e9:88:f4:4c:62:a7:
13:0d:75:01:60:21:4a:f5:fe:c5:86:ee:dc:3b:58:f0:f1:f1:
4d:e5:a6:0f:f5:f1:f2:40:50:38:e2:f5:00:fa:da:39:78:b5:
88:22:72:4b:f2:ec:95:0a:99:99:53:71:a8:cb:8b:ca:f9:2d:
20:21:27:34:cc:ad:4e:f9:df:d9:4f:6a:a0:86:dd:14:74:b7:
ba:a3:b5:6b:03:83:ce:c7:fd:1a:6b:e1:6b:3f:4e:60:1a:36:
8b:3f:e1:27:7f:23:2a:b7:d9:ff:18:40:aa:e3:ba:0c:09:11:
d8:9b:a8:ff:62:8b:eb:7a:42:f8:c2:c6:87:ba:3c:23:ba:4a:
01:2a:33:38:0b:c7:09:28:07:39:b1:99:87:d1:e3:c6:39:12:
3d:99:03:9a:0c:a1:b4:eb:f8:93:4c:89:74:b2:2f:e4:af:1c:
0d:c5:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:35 2024 by rpki-client on console-ams.rpki-client.org