Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/pqCTDtr9DdgPKkS8J2JBO9VmUPc.roa
File: pqCTDtr9DdgPKkS8J2JBO9VmUPc.roa (raw, json)
Hash identifier: axhntQpmrgeYMBTK2xCCo7R/T20cIfX721OIddKCslU=
Subject key identifier: A6:A0:93:0E:DA:FD:0D:D8:0F:2A:44:BC:27:62:41:3B:D5:66:50:F7
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0646AFF0
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/pqCTDtr9DdgPKkS8J2JBO9VmUPc.roa
Signing time: Sat 01 Jan 2022 11:01:07 +0000
ROA not before: Sat 01 Jan 2022 11:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5583
IP address blocks: 57.79.0.0/16 maxlen: 32
57.82.0.0/15 maxlen: 32
57.66.0.0/15 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105295856 (0x646aff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 11:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6a0930edafd0dd80f2a44bc2762413bd56650f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:37:13:b4:d2:24:b9:99:c7:2c:1a:78:42:
dc:83:98:51:fe:82:e3:0d:7e:ce:43:9a:5f:5d:a2:
c2:69:53:83:58:e4:87:3b:8e:0f:77:55:5e:fe:d8:
36:d3:e1:d3:a9:a9:c0:43:4b:5f:a4:e5:8b:11:41:
1c:6f:ea:5a:09:63:23:f4:38:33:bc:2b:d9:20:55:
c4:b5:1a:01:da:25:b9:bc:74:ed:64:a8:5a:51:18:
e8:8d:1d:c6:15:c5:10:cf:6d:59:32:37:63:d7:51:
1a:bb:81:25:98:f2:59:aa:f4:7f:13:fd:d5:55:32:
96:51:66:8a:30:7b:cb:57:dd:34:f6:ef:8d:53:40:
be:b4:71:96:ff:21:7c:06:6c:c9:70:cd:36:07:2b:
a4:fd:e6:10:d5:c6:58:0a:e9:10:fd:17:13:5a:2a:
df:af:19:36:ab:ff:33:ac:6a:34:1d:b6:53:b9:1c:
7c:dc:7f:2e:fd:dc:a4:02:97:c6:81:46:f9:89:63:
67:21:52:07:48:f6:b4:6f:7d:31:ac:37:ba:d2:7e:
9c:40:64:33:7a:24:c3:98:4c:3b:d0:be:63:d2:45:
21:2b:f1:c3:aa:cd:34:e9:19:f5:1a:ad:99:b9:0c:
0c:a2:97:5d:0a:09:e1:35:fc:d7:be:bd:10:44:b5:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:93:0E:DA:FD:0D:D8:0F:2A:44:BC:27:62:41:3B:D5:66:50:F7
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/pqCTDtr9DdgPKkS8J2JBO9VmUPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.66.0.0/15
57.79.0.0/16
57.82.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2c:0b:9d:71:0f:c7:76:88:29:4a:ee:57:ac:d1:3c:ae:6d:d9:
3f:d3:04:34:da:de:d7:ba:62:8b:e2:c2:ae:71:9d:25:31:3e:
0a:a3:3d:3a:14:f9:e1:fa:d3:76:d2:1b:93:89:12:99:30:40:
2f:aa:a9:c1:63:35:01:23:87:19:93:a3:8c:87:3f:95:36:1c:
ed:86:ca:ab:d0:9e:e0:f8:6a:db:ec:28:ec:f8:48:39:62:44:
89:85:3d:4d:27:ed:e6:2f:92:06:5e:2e:d8:c0:f1:eb:03:08:
62:64:2f:57:54:b3:94:4a:ae:5e:ff:42:ae:16:fd:59:c0:de:
93:01:f5:d0:6d:32:9c:59:f4:0e:6c:cf:b5:f9:28:01:c5:c9:
68:c2:3f:b8:b5:fa:35:bb:27:7a:ca:e1:82:0e:c4:c2:1f:dd:
40:2b:eb:63:45:6e:a9:7b:a5:a6:c9:f0:a5:87:5e:13:1b:fc:
75:ee:c4:cf:49:52:6b:57:2c:b9:d7:1c:79:51:9e:48:cf:32:
d2:24:65:d4:df:10:90:ab:0f:98:22:2b:6c:a6:9e:af:77:50:
6b:d2:2d:33:00:e7:f6:e1:f4:44:26:4d:8d:d4:53:c6:f5:ac:
43:b4:c3:fe:a5:38:74:44:09:28:4e:7a:65:75:21:a7:b4:e4:
8d:8a:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:35 2024 by rpki-client on console-ams.rpki-client.org