Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/ptFr9TSP18DcdoHgiTt7ZK96yAI.roa
File: ptFr9TSP18DcdoHgiTt7ZK96yAI.roa (raw, json)
Hash identifier: stddDN/1pptTvXFni9p/ml9eBxwsoky/t048ABV/MP4=
Subject key identifier: A6:D1:6B:F5:34:8F:D7:C0:DC:76:81:E0:89:3B:7B:64:AF:7A:C8:02
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 08DBDAE2
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/ptFr9TSP18DcdoHgiTt7ZK96yAI.roa
Signing time: Sat 01 Jan 2022 10:54:54 +0000
ROA not before: Sat 01 Jan 2022 10:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60718
IP address blocks: 2.57.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148626146 (0x8dbdae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Jan 1 10:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6d16bf5348fd7c0dc7681e0893b7b64af7ac802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:90:92:2f:72:f3:c5:f9:71:ac:58:9e:47:
58:15:cf:2b:23:2e:d9:9c:58:f3:43:a3:f9:ef:7e:
61:2e:89:ba:4b:98:7a:bb:c3:9a:55:8b:4a:e5:01:
eb:17:d0:70:30:92:af:b0:8a:d0:05:92:a6:3f:b1:
c4:cf:fe:30:90:f1:59:f7:c6:0f:3f:ee:41:8b:28:
42:bb:57:93:16:fc:b2:13:b5:68:11:55:d6:f2:a2:
5a:88:27:47:3b:e6:85:ed:95:6b:c3:e2:5a:6a:8d:
34:ee:cc:c1:d6:c6:c4:08:89:54:a9:2b:58:3a:1f:
e3:36:1d:5e:2d:04:f3:37:fb:27:1f:10:5c:01:b1:
ec:c7:a7:11:23:f4:ae:b8:7a:d0:ee:61:1e:a3:8e:
1a:2e:a3:a9:25:5c:82:58:33:89:0f:f7:5f:8f:87:
69:a5:14:c6:fd:08:be:94:2a:a6:04:70:fc:84:04:
86:b4:98:9b:eb:28:34:c5:31:b5:79:e6:d9:b6:05:
d9:5d:fe:fa:3a:6d:3e:14:9f:bd:78:85:da:0c:ab:
7f:8b:6e:bb:e7:1c:1e:d9:9e:e7:a0:b1:ed:f0:7c:
35:3d:4d:43:61:d5:df:dd:09:31:e2:40:e7:5b:9d:
ac:22:e2:d3:10:91:09:f8:e4:a0:de:76:a3:b9:2d:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D1:6B:F5:34:8F:D7:C0:DC:76:81:E0:89:3B:7B:64:AF:7A:C8:02
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/ptFr9TSP18DcdoHgiTt7ZK96yAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:c7:3b:b4:d3:58:d6:4a:e1:d6:fa:76:72:52:61:d3:29:2b:
0e:34:6a:7a:14:1e:6f:78:bd:d0:ea:04:26:83:0b:b4:55:a2:
a0:21:96:e0:ac:9c:de:30:73:cf:6d:68:31:43:ed:fe:7a:61:
e8:82:ae:d5:71:5c:b8:63:eb:bb:1f:bd:1b:eb:99:1a:5e:f7:
69:ee:1a:9d:fc:6a:1e:2a:1d:08:f3:2d:da:31:ec:fb:a6:3a:
d9:ce:e7:78:23:62:29:bf:27:7f:82:ad:7c:9c:3b:df:ef:33:
d1:c9:c9:26:38:5d:e5:2f:ee:14:c1:67:f9:80:b9:41:61:91:
46:e3:eb:83:37:ce:6a:9b:43:e8:52:11:8b:5c:60:c6:a1:94:
3c:86:fc:68:c2:cf:47:ae:f3:ce:ba:55:d5:88:a8:2f:7e:0c:
4f:96:31:07:c4:41:3c:4c:5c:b9:a3:00:2d:1a:34:69:bd:f6:
6c:08:e0:37:ae:13:1a:2b:91:93:ce:1e:b7:ff:68:90:70:65:
30:ff:a3:75:84:be:0c:a3:0a:89:e6:f8:7f:7b:b4:15:a5:74:
95:d1:5a:63:06:d2:1d:29:44:ff:bb:c8:ad:b1:b3:a4:fb:82:
04:b4:dc:3e:7f:cc:40:77:db:f8:00:13:7b:61:20:05:19:36:
65:2d:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-fra.rpki-client.org