Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/nrecYgB2ug0UXCE0WlJ0A-QVNGE.roa
File: nrecYgB2ug0UXCE0WlJ0A-QVNGE.roa (raw, json)
Hash identifier: Gph5SE9A7rb55MjlwI5qo4Glbh40d8v54xkFfRhkqgI=
Subject key identifier: 9E:B7:9C:62:00:76:BA:0D:14:5C:21:34:5A:52:74:03:E4:15:34:61
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0648F779
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/nrecYgB2ug0UXCE0WlJ0A-QVNGE.roa
Signing time: Sat 01 Jan 2022 11:01:08 +0000
ROA not before: Sat 01 Jan 2022 11:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10282
IP address blocks: 57.90.0.0/16 maxlen: 32
57.66.0.0/15 maxlen: 32
57.87.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105445241 (0x648f779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 11:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eb79c620076ba0d145c21345a527403e4153461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:f2:8d:96:da:b7:1a:82:82:62:02:f9:e9:
49:c3:be:e5:9a:ff:40:8c:f3:be:90:e5:47:16:2f:
1b:8c:c5:38:c9:d1:5e:bf:1f:3b:98:70:0d:b5:15:
80:78:9e:34:84:e7:90:b6:70:9f:ce:84:54:1e:8d:
e1:00:db:42:8b:b7:2e:8d:62:38:d2:60:cd:29:6f:
30:d8:b9:b0:92:51:bc:3e:f4:da:d0:4a:ee:05:b7:
8d:f7:18:f9:c5:49:06:8d:cf:8f:8c:3e:d1:28:dc:
6c:83:39:43:90:bc:dd:e8:c8:8e:ab:d0:e5:44:19:
0a:ed:71:bb:02:f4:f3:f3:a8:45:6b:5d:5a:89:95:
59:ae:4c:15:e1:97:40:85:19:90:8c:90:53:4f:06:
2c:8e:bf:c9:bd:b1:cb:32:a6:b8:fe:8e:79:7c:b6:
6e:b7:82:0b:dd:16:d7:9d:26:64:2c:91:73:8e:47:
fa:f7:55:bb:77:fe:7b:51:8c:d8:e6:27:42:71:fc:
4f:9e:86:be:19:c9:63:ce:eb:e3:62:fd:48:66:4b:
2a:92:61:5b:69:d2:2f:ca:c2:aa:24:02:06:fb:55:
f0:e1:f3:a7:56:ee:94:55:53:0a:3b:61:f1:43:0d:
85:a3:cc:4e:9b:25:42:1e:e5:ea:8d:6c:82:99:53:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B7:9C:62:00:76:BA:0D:14:5C:21:34:5A:52:74:03:E4:15:34:61
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/nrecYgB2ug0UXCE0WlJ0A-QVNGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.66.0.0/15
57.87.82.0/24
57.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:0a:23:27:6b:43:95:c2:af:23:0c:4b:a8:a1:fd:2a:ab:33:
3c:59:ab:e2:da:7b:d1:11:67:57:76:38:55:2e:09:25:26:78:
9a:3d:00:01:3b:84:37:e9:fd:7e:d4:6c:55:e9:49:53:89:df:
f2:16:de:db:fb:e9:92:09:97:37:4a:41:a9:9e:6e:65:2e:06:
35:5e:7e:e3:c3:d8:90:83:76:00:ec:20:cd:f5:09:ec:bd:9b:
9f:9f:ed:84:4d:a1:7c:8f:18:ca:3a:cd:a4:6c:22:96:09:a6:
c4:9a:9a:76:e2:5a:0a:db:0e:58:46:71:24:ef:36:be:99:8f:
e4:c1:56:03:04:cd:de:08:60:27:34:fc:c0:d9:5b:8e:92:c1:
a2:6b:cc:37:b5:4d:60:92:fd:bc:ac:8b:ee:a8:60:15:0e:15:
35:ec:c6:9e:9d:0d:ff:5c:34:9d:ea:ed:34:25:b8:f3:5c:1b:
72:fa:01:ff:44:80:48:8d:5f:9b:e9:8a:15:c5:13:2f:51:64:
43:e0:c7:cf:f1:bf:40:8d:ac:5c:7e:0c:9e:be:90:8d:94:73:
19:d5:13:41:91:a1:9a:5c:33:6d:3a:9d:6a:d3:e9:89:82:78:
1a:1e:ba:7e:f5:37:aa:3b:ea:a4:0b:32:db:3d:78:66:dc:23:
68:24:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:44 2024 by rpki-client on console-fra.rpki-client.org