Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/cKcH3c-Vwblzznxmp0dWOuSo-MI.roa
File: cKcH3c-Vwblzznxmp0dWOuSo-MI.roa (raw, json)
Hash identifier: WZtVSG9w04jpAcZFz7+QTyywFLi4hU2JxJvW+2HhigE=
Subject key identifier: 70:A7:07:DD:CF:95:C1:B9:73:CE:7C:66:A7:47:56:3A:E4:A8:F8:C2
Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial: 04751E96
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/cKcH3c-Vwblzznxmp0dWOuSo-MI.roa
Signing time: Sat 01 Jan 2022 04:53:29 +0000
ROA not before: Sat 01 Jan 2022 04:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57702
IP address blocks: 192.58.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74784406 (0x4751e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Validity
Not Before: Jan 1 04:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70a707ddcf95c1b973ce7c66a747563ae4a8f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:68:03:21:02:c4:51:a0:d5:3b:f5:de:b9:
7e:2d:4a:79:58:45:85:01:d3:30:d8:48:ba:c1:67:
19:f8:0c:87:95:ea:0f:a7:ff:37:8c:6d:7a:2d:05:
b0:e2:dd:ff:ec:3d:8b:52:8a:1f:f4:4c:ed:ed:29:
40:fc:99:13:8c:d6:32:c6:b2:27:24:af:98:81:50:
62:34:ad:a8:fe:1f:4f:2a:99:c9:41:17:2e:ce:da:
58:69:ac:3d:6f:5b:f7:9e:51:5b:78:50:2e:01:ac:
a5:64:8b:8a:f0:bb:d7:13:f1:b7:4b:29:a9:9a:02:
bc:a4:ae:81:86:0f:a8:52:90:ba:01:aa:a3:2d:94:
0b:f6:62:7f:67:36:b2:ff:61:f0:d8:00:54:de:b1:
a5:14:98:08:61:3e:4a:fb:df:9b:2f:fd:e4:ce:ad:
b6:9f:5b:f0:01:b0:a0:1d:97:b5:ba:11:77:5f:ea:
a9:76:8f:a0:bd:0e:1c:44:8d:60:76:69:39:3e:91:
10:db:1f:81:5c:68:28:84:82:45:2c:2e:5a:43:7d:
3b:e8:96:64:c8:08:23:3c:1d:2c:b4:d6:9c:a4:25:
7f:f4:90:f2:bf:59:a4:53:b8:bb:3e:48:a2:7a:21:
78:f0:3b:8f:45:b2:1f:2a:0f:30:73:15:b7:7d:e2:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:07:DD:CF:95:C1:B9:73:CE:7C:66:A7:47:56:3A:E4:A8:F8:C2
X509v3 Authority Key Identifier:
keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/cKcH3c-Vwblzznxmp0dWOuSo-MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:24:38:8f:af:3f:59:66:9e:a4:e1:eb:f1:8a:ff:2e:2c:e8:
4b:d8:03:af:5c:88:06:97:22:39:c9:63:bb:a5:8a:a3:ba:08:
0a:1b:dc:34:2f:12:92:ab:0e:da:3a:2c:06:18:10:5b:ba:ac:
ef:df:e1:bc:b0:30:25:bf:7a:2a:3c:f1:ed:be:0f:f0:a5:0a:
44:a0:47:12:8c:29:1a:7d:75:4a:d3:63:ac:c5:ad:4d:bb:4f:
37:2e:4f:45:da:df:d9:4f:5f:90:0b:e5:ab:c8:4e:69:68:37:
2e:b1:ea:f8:4c:22:fd:e7:a3:d9:ea:ba:5e:d0:b2:c4:8c:bd:
5d:51:27:2f:be:f7:b7:1e:8a:6a:a5:57:0a:80:ed:a5:b2:13:
3c:0d:7b:34:c9:48:cd:c4:4f:4a:c5:da:8a:e9:78:76:51:d6:
ec:31:c5:97:98:41:92:b3:17:98:28:79:86:8c:66:a1:d5:4c:
04:e2:de:15:93:7f:13:9f:2c:30:33:4b:27:f0:0a:f0:25:04:
1f:77:6f:6e:9d:b8:92:b0:fd:cc:54:3e:f8:c3:48:71:22:6e:
25:5a:cc:5c:5d:1a:16:73:37:ce:36:69:93:84:1a:17:58:25:
12:45:fb:9b:e3:19:41:f0:e0:01:15:d5:a0:3c:a3:b0:f5:30:
e4:9b:f9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:55 2024 by rpki-client on console-ams.rpki-client.org