Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/iC8kpUOzU9vwosjkeM0bIFWhmCM.roa
File: iC8kpUOzU9vwosjkeM0bIFWhmCM.roa (raw, json)
Hash identifier: i4M6dURbrvRHCjjwdViJMCsjRWtmUl107eeP3dckN4M=
Subject key identifier: 88:2F:24:A5:43:B3:53:DB:F0:A2:C8:E4:78:CD:1B:20:55:A1:98:23
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 085845FF
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/iC8kpUOzU9vwosjkeM0bIFWhmCM.roa
Signing time: Sat 01 Jan 2022 12:57:38 +0000
ROA not before: Sat 01 Jan 2022 12:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 2.58.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140002815 (0x85845ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Jan 1 12:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=882f24a543b353dbf0a2c8e478cd1b2055a19823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:30:85:9b:4f:42:cf:34:4c:f4:91:f9:83:
67:fb:8e:8e:76:e5:e7:2f:33:93:2d:72:de:f1:9a:
ba:2b:9c:18:ee:de:2b:72:1c:b3:37:f6:1b:3f:19:
fd:11:71:0b:99:39:a2:28:67:1f:c2:99:1e:1e:be:
da:7f:2b:93:90:16:04:d3:c5:ee:d9:22:27:07:89:
7f:04:9a:32:4e:fc:ec:2b:23:2e:69:04:04:df:68:
a6:7d:c9:a4:60:9a:7f:59:a7:22:6e:60:d3:ba:1d:
08:e8:9e:86:e7:85:ae:85:0a:36:bf:13:4f:f0:38:
7d:f7:17:e5:f7:8f:6f:95:42:01:f0:f9:69:a4:48:
e6:3f:5b:1b:49:f2:b4:0f:b0:92:de:86:7d:f4:a5:
df:3f:da:d5:cc:bc:c4:18:07:c0:5b:54:d9:4f:a9:
00:66:b0:2b:92:3a:d2:d7:38:38:44:8e:e4:3c:85:
35:fa:8a:9d:f1:f6:f7:56:64:a0:5d:ca:1d:d0:39:
e4:0d:8a:92:22:bd:d9:13:5b:2e:88:6a:31:03:5d:
48:29:3b:f9:b8:40:1f:59:4b:85:e4:e4:bf:94:1a:
d2:7d:fb:92:19:2a:5c:35:18:be:12:03:9c:9f:e2:
9c:69:e2:e3:fb:a6:d3:78:a7:19:0b:45:65:34:72:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2F:24:A5:43:B3:53:DB:F0:A2:C8:E4:78:CD:1B:20:55:A1:98:23
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/iC8kpUOzU9vwosjkeM0bIFWhmCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.115.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ce:c4:eb:fd:54:90:4a:88:92:d2:93:ab:85:7a:a3:72:d4:
ac:a7:c2:0e:5a:24:c7:f5:a4:08:0d:b0:a4:61:8c:e9:3f:2f:
03:a3:85:f9:5a:32:68:17:21:4b:6b:c0:6e:ab:14:fd:90:a0:
24:15:77:39:f2:db:21:1b:d7:73:d0:28:33:a3:c1:82:ab:3d:
de:2b:f3:6c:cc:d4:8a:ea:fe:52:ae:08:6d:62:4f:0c:b9:11:
64:ec:db:a2:8c:46:e4:60:1d:7e:17:57:85:d7:08:3f:87:18:
0d:30:2e:ed:dd:8f:4a:90:69:e0:73:3c:17:51:a8:6a:cf:0c:
b6:a7:40:99:5b:82:88:e8:fa:66:93:52:86:40:e1:50:39:87:
a1:14:08:32:ef:72:1d:94:d2:99:d9:8e:00:5a:f2:7f:5d:8b:
c8:82:f3:31:8a:0f:62:e6:84:f3:a0:d0:cf:da:f4:40:58:cc:
47:42:3e:99:92:ed:89:ef:67:74:0b:fd:12:23:c4:fe:30:73:
7f:7c:29:12:ac:88:b6:b8:f6:bf:0c:5b:7b:a3:94:a6:e6:bb:
48:1a:df:b9:cd:ac:14:19:35:ac:7c:f0:34:00:7f:4b:4a:95:
96:7e:f5:61:ba:39:65:84:a0:8e:ef:11:99:c7:37:77:40:3e:
95:70:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:03 2024 by rpki-client on console-ams.rpki-client.org