Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/cWisEYSsuxRLuElP9ns1LPIlXdM.roa
File: cWisEYSsuxRLuElP9ns1LPIlXdM.roa (raw, json)
Hash identifier: qr5tYLJO6toPfZQjnTG/k6q0aR0QCmIz8ipAutm1YAc=
Subject key identifier: 71:68:AC:11:84:AC:BB:14:4B:B8:49:4F:F6:7B:35:2C:F2:25:5D:D3
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 07D8CF4F
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/cWisEYSsuxRLuElP9ns1LPIlXdM.roa
Signing time: Thu 31 Mar 2022 12:56:07 +0000
ROA not before: Thu 31 Mar 2022 12:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 192.40.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131649359 (0x7d8cf4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Mar 31 12:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7168ac1184acbb144bb8494ff67b352cf2255dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:5e:41:b3:c3:b8:6e:ad:91:91:f7:f8:04:
2a:03:92:66:4f:ca:46:78:99:be:6d:9e:dd:cd:a9:
7a:62:d4:2f:f8:2c:e4:b0:dc:74:f1:7e:d1:40:ab:
da:bc:3a:2f:a5:44:96:0b:7e:0b:19:33:69:e9:c9:
39:55:4f:0d:c8:21:6a:70:44:9b:72:fc:78:98:3d:
a4:22:16:1c:35:b6:08:98:cc:3e:20:2f:53:00:51:
ad:02:f2:96:39:91:54:ff:3e:ee:09:4c:f4:d1:04:
4f:fc:89:8c:5c:f5:b1:16:06:27:ec:5f:f7:ee:01:
b8:48:91:be:db:9a:f9:c8:f5:78:e0:4c:2c:19:a4:
cc:dc:68:1a:41:b4:24:e4:4a:db:b4:21:fa:96:bc:
92:8b:13:f2:07:49:67:a9:3e:f5:0f:a7:2a:fd:41:
28:0c:c7:ac:b3:df:e3:4e:d0:fb:38:fd:1d:d2:c6:
e0:f5:82:9b:88:ec:c0:73:fc:09:86:13:a6:57:9a:
19:b0:cb:c2:79:0b:9a:db:88:ca:10:d1:52:68:46:
1b:c9:98:b4:23:d4:72:c9:7a:ac:c6:7d:92:13:d5:
0c:74:44:20:96:d7:c1:75:8c:9a:ba:f9:84:fb:ec:
3a:8a:39:24:ae:43:33:04:24:18:ef:26:b6:e6:e5:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:AC:11:84:AC:BB:14:4B:B8:49:4F:F6:7B:35:2C:F2:25:5D:D3
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/cWisEYSsuxRLuElP9ns1LPIlXdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9b:8d:26:25:08:13:54:c6:c6:26:7b:b2:29:28:8f:a9:4d:
0a:59:6d:0c:f3:41:ea:13:fe:b7:e2:4b:d1:05:71:e3:09:4b:
3a:99:12:4f:ca:11:7a:f9:cd:4e:e0:b3:c9:b6:45:1a:b7:fb:
8b:65:86:ac:6c:47:54:c1:94:03:41:2b:e3:ce:3a:77:9c:ed:
fe:3c:c2:20:59:28:a0:97:91:8a:6f:4a:49:11:d2:80:aa:51:
dc:0d:c4:e1:42:8b:5a:ff:24:cf:12:c1:52:a0:62:fa:4f:d2:
8d:8a:f2:b9:80:b8:44:df:f4:b1:10:37:e3:f6:a4:3b:40:43:
76:04:9e:f6:bc:9b:92:d2:18:b0:de:de:b5:1e:4e:60:a7:c0:
8a:56:92:1f:0d:e8:eb:62:59:6c:ed:7f:1d:5f:33:42:8c:4b:
00:35:22:74:47:7b:ba:2e:79:89:0d:6e:9a:fa:f2:8d:24:1a:
4e:4e:b8:9e:af:2a:29:d3:e6:6f:a3:e2:93:8b:a7:f0:a8:d4:
20:46:34:17:76:b6:ee:35:44:14:a8:fc:98:b8:d4:69:b0:e1:
61:f1:e5:4c:8f:f2:58:00:90:fb:7d:c8:c3:42:49:8e:00:ba:
08:44:55:e0:82:17:d3:14:b8:17:9c:dd:17:e4:ab:b3:5d:92:
12:6e:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org