Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1uwfnqS9w-zMlAt2PTKc0SyaKhY.roa
File: 1uwfnqS9w-zMlAt2PTKc0SyaKhY.roa (raw, json)
Hash identifier: swzk2pk55ozAaViCPWwpewLLcLHsVbEvKcs7aXUfHj4=
Subject key identifier: D6:EC:1F:9E:A4:BD:C3:EC:CC:94:0B:76:3D:32:9C:D1:2C:9A:2A:16
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 18619AF5
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1uwfnqS9w-zMlAt2PTKc0SyaKhY.roa
Signing time: Wed 23 Mar 2022 13:50:43 +0000
ROA not before: Wed 23 Mar 2022 13:50:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57183
IP address blocks: 2.58.54.0/24 maxlen: 32
45.86.127.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409049845 (0x18619af5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Mar 23 13:50:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6ec1f9ea4bdc3eccc940b763d329cd12c9a2a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:75:d0:87:ed:32:b0:2f:56:aa:bc:35:78:
df:45:4a:35:d7:bf:ea:35:96:5a:16:20:76:12:75:
5f:04:55:f4:95:fd:a4:45:1a:3f:39:ae:91:59:6e:
f3:75:8c:16:f9:e6:03:a7:8b:00:a7:ad:cc:61:91:
81:01:98:14:67:64:80:21:d4:0a:10:76:05:5f:4a:
38:5c:d1:b8:27:1b:ad:d0:5e:b2:57:ab:1a:fa:2d:
36:d5:69:f6:f2:f5:9a:92:07:6d:7b:aa:b6:4b:e7:
84:1d:c8:ee:27:f0:0e:31:c6:ab:b3:fe:36:3e:8f:
f5:3f:c5:1c:7a:1a:c2:12:79:e1:52:74:3b:fc:78:
a7:f5:99:ab:27:58:dc:79:aa:4d:3c:b4:ef:92:2e:
d0:f0:29:c8:c5:f0:4e:ad:45:d8:98:dd:40:df:14:
4b:c6:32:f6:bd:61:07:fb:ce:b9:95:15:61:ac:e0:
61:58:bc:fa:fa:6a:a5:e4:f4:97:31:da:82:39:bd:
58:6e:a5:e2:ec:21:a0:db:39:22:fd:fb:e0:04:f7:
2a:fe:36:f7:27:7e:b0:b2:8d:30:cd:cd:96:c5:0a:
08:19:d2:22:7e:7d:00:2f:50:bb:b2:27:78:37:6f:
ba:c1:48:f9:b2:05:a7:43:17:f5:14:6c:1a:31:04:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EC:1F:9E:A4:BD:C3:EC:CC:94:0B:76:3D:32:9C:D1:2C:9A:2A:16
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1uwfnqS9w-zMlAt2PTKc0SyaKhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.54.0/24
45.86.127.0/24
Signature Algorithm: sha256WithRSAEncryption
96:07:e9:09:07:23:43:49:a5:42:88:d8:4a:d7:a6:7c:9c:14:
14:95:53:05:fb:2a:22:09:4a:10:99:20:38:e0:41:19:d9:c7:
f8:c8:71:d9:cf:b5:8e:0a:10:f7:64:34:80:03:18:86:17:12:
00:12:82:1f:8c:7f:f2:1d:6b:a8:c8:65:d5:35:e4:3c:2e:f1:
d2:8e:59:dd:0f:ef:f2:69:4d:a5:2f:f1:94:7b:ec:5d:ae:14:
59:b0:b1:d4:f9:ae:c7:df:3d:f3:0a:8b:00:46:54:ce:e0:03:
14:5a:f0:5c:e9:3f:85:5b:e7:83:7c:eb:3f:2d:a5:be:55:86:
5e:bf:41:24:7f:de:23:67:0b:47:ec:47:20:a3:03:d4:b5:35:
9c:5a:83:c3:e5:48:96:16:c6:6f:01:cf:ef:a6:3d:a8:c8:7f:
17:fd:10:05:84:24:63:45:7f:c5:61:4e:c3:c4:61:e1:72:34:
a9:d1:9d:f4:79:28:a7:71:0e:93:f3:8b:bd:19:eb:33:e1:6e:
54:3e:83:52:c4:81:f2:3e:a0:2c:8b:ff:49:46:c4:a7:e6:83:
c8:66:0b:1a:01:0a:16:5f:c7:98:15:87:2f:9e:3e:cb:47:5d:
7d:48:4d:3d:ab:76:50:16:bb:c5:14:b9:93:c2:71:3e:65:e8:
85:1b:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org