Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/t7KmB2IhxV1sloMi1lNpFNmlXyw.roa
File: t7KmB2IhxV1sloMi1lNpFNmlXyw.roa (raw, json)
Hash identifier: quP/HAquaODBG7QccEwjXxiI14u8JVCQiCnZlpz21QQ=
Subject key identifier: B7:B2:A6:07:62:21:C5:5D:6C:96:83:22:D6:53:69:14:D9:A5:5F:2C
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 08978A8E
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/t7KmB2IhxV1sloMi1lNpFNmlXyw.roa
Signing time: Sat 01 Jan 2022 09:03:27 +0000
ROA not before: Sat 01 Jan 2022 09:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20647
IP address blocks: 2.57.160.0/22 maxlen: 22
2a09:ce40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144149134 (0x8978a8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jan 1 09:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7b2a6076221c55d6c968322d6536914d9a55f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:6e:c2:bf:14:be:a2:7d:50:28:2e:6c:4f:
ef:bd:94:a2:01:4f:66:6e:48:54:ea:fb:00:31:d2:
53:66:30:b2:dc:0b:ec:42:52:80:ad:d2:a1:68:59:
23:37:a9:67:43:20:1d:da:cf:e9:bd:a1:f6:07:6e:
db:4c:b3:97:03:13:18:b2:23:98:27:34:c9:ec:ab:
89:24:8e:f6:a7:db:ca:e3:a1:40:20:c6:07:24:ee:
26:d2:eb:18:2c:ce:3f:e9:87:a4:12:fc:a3:e3:04:
57:b7:93:1e:6e:66:2a:be:e8:e5:4e:66:9a:96:db:
91:24:d0:97:4f:34:20:7f:90:c8:00:4e:17:e1:b3:
66:80:61:ab:e8:59:28:1b:67:00:39:26:34:bf:29:
7b:22:f5:c4:fe:03:b6:b5:1c:a0:cc:69:7e:ee:5c:
b8:19:8d:29:f5:ff:5f:86:ed:e2:b5:c4:45:73:5f:
a5:0d:00:9e:7d:90:e9:79:3f:54:70:ca:57:c9:ed:
0d:f6:03:85:37:17:b8:34:c5:3b:ff:13:05:26:9c:
17:a3:21:0a:17:6e:ea:fb:fa:b6:4b:30:52:71:c1:
45:21:96:ce:b4:d2:f6:08:bd:87:f6:9c:3f:ad:e1:
49:c3:b4:f1:65:e1:59:b4:fa:ed:8d:10:ee:02:45:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:A6:07:62:21:C5:5D:6C:96:83:22:D6:53:69:14:D9:A5:5F:2C
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/t7KmB2IhxV1sloMi1lNpFNmlXyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.160.0/22
IPv6:
2a09:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
8d:d6:7f:e2:7a:ee:56:a7:80:9e:e2:60:0b:d5:f5:99:5d:20:
7d:bb:6d:b3:7f:fc:93:4e:45:d8:2d:f3:02:e3:99:24:5a:a0:
72:f5:4b:5e:ae:f3:02:6f:0d:2c:31:a5:b8:ea:b0:8c:e0:b2:
5a:66:dc:13:c1:32:65:3c:e2:90:ab:18:35:7b:bb:8b:40:f4:
aa:e3:6c:4f:fc:7b:b8:79:85:1e:bd:94:b4:c4:3d:da:43:da:
63:51:44:79:c0:4b:3a:f9:ec:a9:c0:c0:6e:ca:74:f1:ab:0e:
4f:40:2e:f4:96:44:81:c8:b4:bd:55:55:5e:35:6c:05:f9:9c:
7d:e5:aa:21:63:4e:9e:4e:1b:9e:38:93:b4:6b:7f:cc:62:57:
69:80:a9:74:83:e7:8b:a9:80:17:68:92:c1:16:d6:9b:b0:1e:
1a:5e:fa:8f:3f:47:ed:68:6d:08:39:ac:e2:f0:e2:21:c1:2e:
fc:25:48:f7:e7:9b:60:8d:c9:9b:f2:49:4e:ab:d3:27:1e:08:
1b:96:84:c1:fb:31:0d:9c:df:20:7b:e6:4c:59:87:fa:d0:fa:
71:31:38:11:7d:4d:7f:fc:36:10:b8:b6:e0:0f:61:81:47:2e:
1e:63:72:dc:51:ac:56:55:96:aa:89:da:17:3e:cb:26:b0:0b:
9d:6d:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:39 2024 by rpki-client on console-ams.rpki-client.org