Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/VMDvP1kX0G92KmlToNTPpxgXNv4.roa
File: VMDvP1kX0G92KmlToNTPpxgXNv4.roa (raw, json)
Hash identifier: Inkka7HpWS38UaIe/IeDSzOjCUcOq59KftF24Atgc9s=
Subject key identifier: 54:C0:EF:3F:59:17:D0:6F:76:2A:69:53:A0:D4:CF:A7:18:17:36:FE
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0649693A
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/VMDvP1kX0G92KmlToNTPpxgXNv4.roa
Signing time: Sat 01 Jan 2022 11:01:08 +0000
ROA not before: Sat 01 Jan 2022 11:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13879
IP address blocks: 57.197.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105474362 (0x649693a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 11:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54c0ef3f5917d06f762a6953a0d4cfa7181736fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8d:19:4b:b9:9d:57:af:e0:dd:47:28:0b:09:
ab:eb:da:82:b6:bf:23:80:51:e5:ca:e9:52:37:9a:
4f:81:34:6b:db:3a:aa:db:7f:68:65:88:b6:98:16:
98:c4:72:c0:0e:b8:ac:03:38:fd:62:37:64:ef:6d:
b8:87:a5:0e:ba:98:9b:84:e5:a3:09:2f:3b:7e:5f:
3b:18:2f:2c:ad:62:3a:70:0d:7f:2f:cf:56:cf:31:
a1:9d:65:3b:6e:4c:dc:52:66:5f:d7:8d:85:ce:bf:
ba:0a:50:9a:50:f7:36:c8:99:cd:2a:07:14:da:c5:
33:ac:4e:53:c7:7a:b2:dc:ff:c0:a5:54:e3:7d:aa:
4d:5e:0b:99:20:e2:c6:18:12:a2:aa:d5:f5:36:f1:
32:d1:9b:af:8c:c4:23:75:76:c7:47:32:75:cf:58:
2c:61:35:a3:3c:86:79:1f:b9:f5:f5:44:01:42:7b:
99:bb:c4:04:ab:6e:be:c3:07:25:b3:af:6a:33:19:
c8:9b:95:cb:4a:29:dc:5e:8b:f8:e0:a7:bb:3a:7c:
ae:76:8f:15:35:26:5e:02:e3:76:64:ce:a5:d2:a4:
a4:b5:07:e9:f4:96:8a:73:b4:8c:79:ce:60:2e:69:
49:58:b7:26:f9:ed:a5:95:b6:bc:f3:2c:a2:fd:0f:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C0:EF:3F:59:17:D0:6F:76:2A:69:53:A0:D4:CF:A7:18:17:36:FE
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/VMDvP1kX0G92KmlToNTPpxgXNv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:a6:36:49:8b:e1:ab:c7:e1:4f:a6:b0:65:45:d4:16:e5:0c:
7b:57:09:12:34:e5:51:bb:9f:13:cf:c2:68:45:17:aa:1e:ed:
b0:1b:50:db:0d:eb:46:90:7f:35:49:f2:5a:40:68:da:95:ec:
6a:49:63:69:7f:0e:3e:e4:68:7d:48:a2:c5:8a:22:cc:cc:fb:
10:48:c7:2a:91:69:ae:84:1d:68:24:d8:0a:b5:6e:52:5d:d2:
0a:99:80:50:eb:f2:9c:fa:e5:60:34:49:e4:dc:eb:ff:44:ac:
6d:d0:28:50:ca:84:7e:82:5c:ca:69:31:2c:1a:f4:bd:3e:9b:
34:3e:61:24:f9:0a:73:5f:6f:d5:44:83:c1:a0:ed:56:bf:85:
98:17:fc:32:fc:d8:70:b7:ee:de:bd:e3:4f:ea:bd:8d:ee:ed:
8a:03:15:ce:e5:3e:30:ee:f8:82:aa:b9:6c:6a:29:dc:7e:8f:
4f:ca:48:d9:04:fa:8c:ed:a1:31:05:28:b8:ae:dd:5e:eb:2c:
16:0e:b7:63:44:54:98:59:7c:21:ab:52:b3:25:1a:c9:cd:ef:
83:5f:b4:2a:3a:ae:98:1b:85:64:1c:98:4c:72:b1:8c:ee:07:
cc:16:8a:57:d5:af:48:0f:09:06:7c:6b:85:55:33:db:11:6c:
6e:48:ce:9d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIEBklpOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZGI4M2NmZTU0ODk4MzVmMjk0ZDBhZjRkZDRkYjZlM2RjMjVmMWYzMB4XDTIyMDEw
MTExMDEwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTRjMGVmM2Y1OTE3
ZDA2Zjc2MmE2OTUzYTBkNGNmYTcxODE3MzZmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPaNGUu5nVev4N1HKAsJq+vagra/I4BR5crpUjeaT4E0a9s6
qtt/aGWItpgWmMRywA64rAM4/WI3ZO9tuIelDrqYm4TlowkvO35fOxgvLK1iOnAN
fy/PVs8xoZ1lO25M3FJmX9eNhc6/ugpQmlD3NsiZzSoHFNrFM6xOU8d6stz/wKVU
432qTV4LmSDixhgSoqrV9TbxMtGbr4zEI3V2x0cydc9YLGE1ozyGeR+59fVEAUJ7
mbvEBKtuvsMHJbOvajMZyJuVy0op3F6L+OCnuzp8rnaPFTUmXgLjdmTOpdKkpLUH
6fSWinO0jHnOYC5pSVi3JvntpZW2vPMsov0P5CECAwEAAaOCAggwggIEMB0GA1Ud
DgQWBBRUwO8/WRfQb3YqaVOg1M+nGBc2/jAfBgNVHSMEGDAWgBTNuDz+VImDXylN
CvTdTbbj3CXx8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3piZzhfbFNKZzE4cFRRcjAzVTIyNDl3bDhmTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvNzM5NzE2LTlhZjItNDdmNS1hNmYxLWEzYjc0Zjk2NDFhYy8x
L1ZNRHZQMWtYMEc5MkttbFRvTlRQcHhnWE52NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
NzM5NzE2LTlhZjItNDdmNS1hNmYxLWEzYjc0Zjk2NDFhYy8xL3piZzhfbFNKZzE4
cFRRcjAzVTIyNDl3bDhmTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADnFMA0GCSqGSIb3DQEBCwUAA4IB
AQBepjZJi+Grx+FPprBlRdQW5Qx7VwkSNOVRu58Tz8JoRReqHu2wG1DbDetGkH81
SfJaQGjalexqSWNpfw4+5Gh9SKLFiiLMzPsQSMcqkWmuhB1oJNgKtW5SXdIKmYBQ
6/Kc+uVgNEnk3Ov/RKxt0ChQyoR+glzKaTEsGvS9Pps0PmEk+QpzX2/VRIPBoO1W
v4WYF/wy/Nhwt+7eveNP6r2N7u2KAxXO5T4w7viCqrlsaincfo9PykjZBPqM7aEx
BSi4rt1e6ywWDrdjRFSYWXwhq1KzJRrJze+DX7QqOq6YG4VkHJhMcrGM7gfMFopX
1a9IDwkGfGuFVTPbEWxuSM6d
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:35 2024 by rpki-client on console-ams.rpki-client.org