Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/iL4Db8t4tV3mC-Omdv7YQWN6WZA.roa
File: iL4Db8t4tV3mC-Omdv7YQWN6WZA.roa (raw, json)
Hash identifier: Ngvjzcs8kq+fAJPTaEzOpdKSbpAS61AccN131L8qrgY=
Subject key identifier: 88:BE:03:6F:CB:78:B5:5D:E6:0B:E3:A6:76:FE:D8:41:63:7A:59:90
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 08597C8E
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/iL4Db8t4tV3mC-Omdv7YQWN6WZA.roa
Signing time: Sat 01 Jan 2022 12:57:39 +0000
ROA not before: Sat 01 Jan 2022 12:57:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201011
IP address blocks: 2.58.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140082318 (0x8597c8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Jan 1 12:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88be036fcb78b55de60be3a676fed841637a5990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:b9:b8:8d:1a:98:97:8f:87:78:69:f8:5e:
1f:3a:46:2f:d9:67:4c:15:8a:b8:f8:54:1c:aa:eb:
b2:66:06:a0:c7:0f:f3:61:16:9c:e0:92:3a:48:70:
54:c6:f2:64:1a:71:04:3b:2c:d7:81:b1:64:40:54:
b7:0f:86:87:3d:e0:ec:78:b4:3e:08:36:fd:68:65:
0f:73:9e:32:1a:b8:92:a3:81:23:50:d0:46:06:5c:
14:61:92:43:1b:18:fc:47:2b:4b:fc:71:a4:33:5a:
91:dc:ae:0b:29:04:6c:76:3b:11:c0:86:ef:7d:11:
67:8f:d2:54:08:fe:e5:24:e5:c2:f5:4f:8e:1a:26:
34:76:6e:da:5d:d1:3a:8e:50:6f:b5:dd:7e:91:a4:
e2:72:b1:6e:71:3d:2b:4c:df:81:b4:c7:3c:97:36:
7e:d5:0f:4e:2c:7b:24:73:59:28:65:e8:e7:0f:1f:
1b:90:96:65:90:77:bd:b8:85:44:c9:3d:b6:a9:75:
9a:b8:d7:83:a1:d5:30:06:f7:4f:16:23:db:5e:c4:
20:73:6b:a9:c0:be:e6:e2:54:91:68:9f:4c:c2:25:
eb:ad:40:86:79:83:d1:b7:57:5e:5f:72:59:60:b6:
5b:1e:ad:33:1e:8c:e4:ff:17:04:77:3c:3a:10:6a:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BE:03:6F:CB:78:B5:5D:E6:0B:E3:A6:76:FE:D8:41:63:7A:59:90
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/iL4Db8t4tV3mC-Omdv7YQWN6WZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.115.0/24
Signature Algorithm: sha256WithRSAEncryption
59:51:9e:c7:aa:64:ce:1c:66:17:d2:5b:a7:d9:55:43:0d:62:
72:76:e7:ac:f6:82:38:98:77:96:33:55:9e:47:5d:07:c7:4b:
c2:cb:3f:a4:04:62:42:8f:ed:9d:78:e2:1a:d2:63:15:6c:d8:
b3:47:8e:82:41:67:07:62:1c:02:b5:60:75:00:f5:e2:8e:ed:
b6:90:2d:1c:d7:1e:27:dc:e9:6c:5f:79:a2:2b:ff:b5:aa:45:
b7:5b:cb:a8:fb:55:15:20:85:bb:24:0e:3c:76:b2:6e:27:b6:
65:ff:08:3e:d5:e3:97:44:f1:f8:65:c7:d4:30:c2:a0:1b:5e:
23:68:38:8f:d0:7d:ab:24:1d:f7:a9:89:7a:6d:16:fd:f9:89:
c7:c7:aa:88:28:b8:ad:f5:c7:0f:8b:4d:0e:cf:5b:ce:e1:a6:
a3:ad:92:7f:b6:59:65:30:4b:91:0b:ef:92:36:c2:1d:75:a5:
dc:19:93:88:1d:00:68:d4:f8:4d:6f:39:45:00:26:cf:f7:25:
26:2a:7e:08:7c:11:83:02:cf:72:0b:a3:f0:e7:2b:9e:30:20:
9a:ac:09:63:90:d3:ef:b7:48:01:f7:40:ca:4b:0a:01:8e:cb:
7f:96:8e:2a:b1:ee:91:0d:21:80:55:88:ee:18:b7:e7:c6:e2:
5c:77:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:03 2024 by rpki-client on console-ams.rpki-client.org