Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/3gPSdh-tKY5neMaaydFrYYO-cIQ.roa
File: 3gPSdh-tKY5neMaaydFrYYO-cIQ.roa (raw, json)
Hash identifier: YOUeLRZwxkRRhM08HIRd0K1V2397OBM5rhpEZ4UzrJA=
Subject key identifier: DE:03:D2:76:1F:AD:29:8E:67:78:C6:9A:C9:D1:6B:61:83:BE:70:84
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 085B7E77
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/3gPSdh-tKY5neMaaydFrYYO-cIQ.roa
Signing time: Sat 01 Jan 2022 12:57:39 +0000
ROA not before: Sat 01 Jan 2022 12:57:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209185
IP address blocks: 2.58.112.0/24 maxlen: 24
2a09:e440::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140213879 (0x85b7e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Jan 1 12:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de03d2761fad298e6778c69ac9d16b6183be7084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:33:63:9b:95:9e:36:cb:2c:d1:66:23:01:
48:bf:ec:ce:37:25:f5:08:9f:d9:1b:ed:2d:eb:f9:
7a:5e:42:73:a2:59:55:20:d3:10:94:a9:d5:60:9e:
b7:81:27:69:ea:1c:65:34:e6:b0:4b:22:0c:ce:e3:
8d:ab:81:12:ff:d9:8a:16:39:30:e1:29:81:21:3c:
0c:46:05:de:5a:71:c4:1b:cc:e3:19:00:53:be:50:
a2:dc:45:ee:c9:e2:c5:71:a9:ab:36:13:45:0e:8a:
05:0f:af:24:99:4d:7d:08:6c:b7:36:44:12:c9:8b:
39:59:11:b5:46:a5:99:b0:5f:5f:75:5a:1a:07:ca:
e8:01:b4:f0:38:f4:bd:d8:2c:3d:35:29:58:e5:c1:
df:2f:48:a3:42:44:3f:d5:5a:6a:d1:91:39:bd:bb:
92:1e:f5:f3:43:7d:7c:11:cf:ae:dd:c8:50:d8:8c:
90:c9:47:75:74:d1:47:d2:b3:62:8d:75:32:bc:51:
09:b7:33:d2:18:34:12:7a:4a:1a:9e:2f:50:b8:24:
8d:12:ac:de:f9:e1:a8:11:65:c7:0e:fa:55:76:2b:
60:7d:71:88:1e:0b:12:65:ef:1e:58:8a:0e:de:19:
3e:be:1a:a8:b2:88:e4:49:c4:2c:ae:87:92:1a:51:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:03:D2:76:1F:AD:29:8E:67:78:C6:9A:C9:D1:6B:61:83:BE:70:84
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/3gPSdh-tKY5neMaaydFrYYO-cIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.112.0/24
IPv6:
2a09:e440::/40
Signature Algorithm: sha256WithRSAEncryption
01:fe:74:78:73:91:c3:da:83:f9:1c:80:36:94:bb:5c:cd:26:
55:eb:85:d1:bb:0b:d2:7e:8e:1c:66:9f:95:e1:c8:c2:5e:fe:
2d:e9:ad:a3:f3:0b:f7:bc:99:0d:95:ac:95:e7:85:ab:5d:c8:
ea:b6:da:ec:e6:3c:bc:c0:07:45:51:47:81:6e:9b:4a:e5:b4:
50:5e:89:7a:ec:79:bf:85:14:89:1a:8d:84:8c:7f:17:01:d8:
04:c5:0f:e7:27:5c:0f:1b:bf:73:fc:9c:8a:a1:bb:9b:e3:de:
2b:00:4e:91:e8:7e:94:0f:d7:91:f1:ba:76:06:88:2e:cc:85:
b9:e9:a5:67:f5:c8:4f:40:c9:27:45:87:42:e8:ce:8e:6d:bb:
20:ab:34:43:1e:ab:75:f3:9c:35:36:7a:da:45:6b:99:db:8f:
77:44:e2:d7:e6:ba:c0:57:55:3e:2b:0d:82:9f:ee:45:d8:39:
e4:7a:4b:f8:11:46:90:0b:24:96:d6:fc:f2:8b:f2:fb:65:af:
cc:56:67:8f:01:41:0d:12:bf:73:fd:2d:cc:8a:36:ce:0b:78:
82:a9:99:05:92:aa:a4:fc:ed:4b:62:22:4b:8c:1c:74:26:eb:
e4:eb:07:1d:7e:ac:ab:65:09:32:df:e8:1a:12:41:dd:05:21:
b0:3d:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org