Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/4__7iZ7e0de9d5nbfyLGLhft6Lo.roa
File: 4__7iZ7e0de9d5nbfyLGLhft6Lo.roa (raw, json)
Hash identifier: 2vROtXAre50dBrhwtWvncaHSmR2TxMHgWeS+z4fS6Go=
Subject key identifier: E3:FF:FB:89:9E:DE:D1:D7:BD:77:99:DB:7F:22:C6:2E:17:ED:E8:BA
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 19230F98
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/4__7iZ7e0de9d5nbfyLGLhft6Lo.roa
Signing time: Sat 01 Jan 2022 06:53:00 +0000
ROA not before: Sat 01 Jan 2022 06:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 213.55.0.0/18 maxlen: 24
109.122.128.0/18 maxlen: 24
5.57.96.0/19 maxlen: 24
2a00:a080::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421728152 (0x19230f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Jan 1 06:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3fffb899eded1d7bd7799db7f22c62e17ede8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:27:10:99:16:f2:8a:33:d6:b3:6f:49:71:
82:e7:5c:58:da:4c:83:d4:25:51:36:5f:f5:04:57:
3a:08:2d:65:4e:f8:a6:78:94:af:05:05:fe:31:da:
f0:f7:4f:6d:9e:83:c1:cb:8c:15:e1:3a:e4:20:ac:
46:3f:ac:a8:c9:2f:87:af:19:cd:1d:a9:82:18:98:
bf:6c:11:c9:bc:d1:34:18:31:78:6b:94:c1:23:4e:
c0:37:94:5b:7b:c7:82:a2:8a:43:a5:b4:0b:54:f3:
11:9a:b4:81:d6:fe:a8:fa:b6:87:c0:2a:ec:de:a8:
6f:f8:c4:15:aa:15:ca:f1:d5:9d:cf:10:ab:6d:24:
6f:8b:78:a6:c9:3b:bf:e6:5c:0d:58:35:af:66:88:
db:07:0a:20:98:d9:d8:ae:99:67:74:a0:ce:41:23:
e8:5c:83:23:79:1e:cb:ca:ef:44:e1:02:80:46:48:
cb:6d:ff:9f:e8:d1:63:7e:86:11:62:53:b3:37:af:
c9:67:01:d4:7e:29:17:6f:53:d2:aa:9d:34:9a:bc:
58:7a:af:c6:f7:75:97:c9:93:27:ea:88:04:e6:dc:
77:25:88:1d:57:4a:fc:3d:fa:2d:2c:fb:4a:6c:4f:
7f:fe:a0:41:0a:c3:13:19:e6:46:51:c9:47:9b:48:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:FB:89:9E:DE:D1:D7:BD:77:99:DB:7F:22:C6:2E:17:ED:E8:BA
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/4__7iZ7e0de9d5nbfyLGLhft6Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.96.0/19
109.122.128.0/18
213.55.0.0/18
IPv6:
2a00:a080::/32
Signature Algorithm: sha256WithRSAEncryption
55:35:cc:e3:aa:bc:13:b4:08:39:33:aa:61:a2:d3:43:14:54:
41:18:b3:e0:6a:52:cd:0d:a6:18:19:a2:4f:5c:e7:e7:01:12:
1c:cf:c7:6a:1d:45:80:06:ce:f0:29:d1:c7:b7:25:3d:11:8f:
79:d2:60:0a:9d:63:0a:2f:d0:ed:74:23:24:11:b2:20:f2:4d:
69:53:77:8f:c3:a5:81:08:9f:96:ee:54:95:0c:50:e3:9c:68:
c5:58:38:d4:2c:65:de:69:f7:60:55:14:24:7a:ab:23:c7:d3:
6f:56:7a:07:7d:f5:70:15:e0:8c:d6:75:5c:33:52:b4:03:6c:
ea:fc:74:04:3c:0f:35:30:a1:33:2b:98:89:51:84:59:b4:92:
e9:5f:78:60:ae:ce:fa:0d:3a:69:c6:22:45:df:de:a5:bc:30:
b6:9d:c1:55:d5:bf:14:43:2d:04:32:1e:63:95:39:e9:74:ba:
72:e3:df:b5:72:5e:1a:fa:8a:1a:06:9f:a4:76:12:c0:dc:07:
8c:53:e8:32:9b:20:d9:6c:24:91:4f:6c:fc:86:6a:1e:2f:3c:
e1:c8:81:de:8f:6f:1c:6e:b1:e6:56:8f:e7:68:64:94:bf:1d:
72:65:70:f2:9f:31:50:14:91:07:98:da:96:13:b4:fe:67:70:
19:d4:f5:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:57 2024 by rpki-client on console-ams.rpki-client.org