Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/cMi-Y95d4428W0b0pPaoMHnH2Ys.roa
File: cMi-Y95d4428W0b0pPaoMHnH2Ys.roa (raw, json)
Hash identifier: PIOQBdQdLJMuDoe9PJ/tjwUbzG7kOwiK1pwLZK48h5w=
Subject key identifier: 70:C8:BE:63:DE:5D:E3:8D:BC:5B:46:F4:A4:F6:A8:30:79:C7:D9:8B
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 064AE1C2
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/cMi-Y95d4428W0b0pPaoMHnH2Ys.roa
Signing time: Sat 01 Jan 2022 11:01:09 +0000
ROA not before: Sat 01 Jan 2022 11:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17650
IP address blocks: 57.100.0.0/21 maxlen: 24
57.68.248.0/21 maxlen: 24
57.100.64.0/21 maxlen: 24
57.100.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105570754 (0x64ae1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 11:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70c8be63de5de38dbc5b46f4a4f6a83079c7d98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:79:2c:8d:d6:56:c1:3a:2e:46:8f:69:dd:
01:27:a7:c4:1c:42:25:0a:04:ca:2f:7c:27:b0:3d:
6e:55:e3:37:0d:c9:ec:a0:6f:91:2f:d4:6e:b1:33:
cc:6b:ef:ee:b4:21:52:d5:8c:3a:c4:da:d8:11:5f:
5f:f7:e7:7e:14:67:95:68:7b:65:3e:11:2a:12:bf:
a0:3f:88:7a:14:cc:e9:9f:5d:9d:6a:55:00:39:eb:
79:5c:61:8c:63:c7:9a:35:f5:7e:4b:ea:50:77:75:
5f:0c:7f:3a:0a:ed:07:ea:c3:91:b6:c0:2e:9e:31:
f8:b0:a0:71:f8:26:e8:61:a5:61:5b:7d:4f:65:c8:
38:bf:b8:d7:89:d7:33:6f:56:63:71:9f:4f:55:c1:
53:d4:b6:93:eb:a1:e8:35:b3:01:d0:62:d7:d8:ef:
5c:f5:15:2b:79:d0:b0:7f:6d:d8:63:16:de:d0:d5:
7d:01:ca:e3:37:8d:22:68:e5:2c:a8:1a:46:9b:a5:
e0:2d:71:bb:3f:e0:68:ab:2a:df:1d:d1:fe:b5:e3:
6d:ea:4c:82:26:63:c2:84:47:04:d6:62:4f:13:29:
02:76:14:b7:62:22:86:a0:bf:a4:df:a0:e6:b5:ce:
e0:b2:88:3f:83:68:fd:33:04:2a:fe:d0:84:38:cd:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C8:BE:63:DE:5D:E3:8D:BC:5B:46:F4:A4:F6:A8:30:79:C7:D9:8B
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/cMi-Y95d4428W0b0pPaoMHnH2Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.68.248.0/21
57.100.0.0/21
57.100.64.0/21
57.100.96.0/21
Signature Algorithm: sha256WithRSAEncryption
58:05:f5:63:ef:14:01:7f:de:d7:73:94:48:56:d8:d8:1b:f0:
16:dd:aa:11:69:c9:b8:86:c3:11:c4:e1:01:4f:c9:87:65:42:
31:0b:a5:4f:40:99:5f:61:26:5b:e9:d0:bd:6a:30:f9:2e:6b:
80:b5:1d:a1:92:a3:b0:e9:13:05:c8:a5:25:21:34:2d:a2:7c:
f0:14:15:4b:6b:e4:04:3b:7d:08:4f:56:6e:3e:64:31:48:f3:
df:53:3d:98:ff:55:10:26:35:13:03:de:d7:e6:e1:8d:d0:70:
4a:6d:ef:c5:46:de:7c:52:35:e8:a7:65:fe:35:ad:78:3b:5b:
32:bd:4b:50:e0:87:f0:24:df:56:fe:6b:1e:65:56:cb:17:10:
86:b4:3b:e6:8c:37:22:39:ee:80:39:50:ba:a3:89:50:cf:b5:
ed:4c:d3:5b:68:e2:cb:00:ed:2a:f9:ca:4b:5d:27:54:5f:3a:
7f:97:c7:24:5a:ea:eb:18:a7:b2:26:f2:2d:8e:41:5a:3d:3b:
1c:b4:a4:f2:4c:8b:2c:16:75:04:e7:47:37:78:cc:af:b2:17:
8c:0a:46:d7:83:03:58:52:b0:d1:6c:e0:cf:b0:2a:9a:c8:af:
1f:1d:76:e5:52:af:c8:4b:f5:a5:f6:cc:15:dd:45:80:15:c8:
c1:c5:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:44 2024 by rpki-client on console-fra.rpki-client.org