Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/cdmR-Fy1Q9CV7BeSa1Wmub4rQ5c.roa
File: cdmR-Fy1Q9CV7BeSa1Wmub4rQ5c.roa (raw, json)
Hash identifier: ZmB8CnTzywHN+zQv9YVg3ukjPQGRzfQ+3YFAUVxVoA0=
Subject key identifier: 71:D9:91:F8:5C:B5:43:D0:95:EC:17:92:6B:55:A6:B9:BE:2B:43:97
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 09458D6A
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/cdmR-Fy1Q9CV7BeSa1Wmub4rQ5c.roa
Signing time: Wed 22 Jun 2022 13:00:32 +0000
ROA not before: Wed 22 Jun 2022 13:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57664
IP address blocks: 37.16.96.0/20 maxlen: 23
178.213.232.0/21 maxlen: 21
37.16.112.0/20 maxlen: 20
2a00:4cc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155553130 (0x9458d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jun 22 13:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71d991f85cb543d095ec17926b55a6b9be2b4397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:aa:b4:26:0c:59:73:e7:d3:89:82:0f:f3:
f6:c4:6b:7f:48:f3:9e:83:d5:ff:b9:93:88:2c:11:
34:d3:47:2b:4b:6a:3e:4d:a8:23:56:ce:6d:82:cc:
93:cb:47:69:a1:99:1d:0f:97:b0:57:a3:48:8c:67:
c4:eb:0c:91:2d:e6:5c:3c:40:0b:a5:5f:9e:ef:cc:
52:28:0e:e9:0d:f8:be:33:08:ec:a7:03:57:c2:b2:
91:7d:10:39:a6:6a:ad:d3:90:4f:e2:85:e1:74:f4:
1a:c6:70:12:7b:16:8a:e7:58:05:6d:0f:42:3b:d5:
70:77:91:70:98:d6:3e:b8:e3:18:25:93:de:d7:12:
9c:2c:2a:a8:5b:5a:90:53:e0:0e:91:6c:0c:a9:58:
84:40:fe:2b:32:cd:5e:1e:36:2d:3e:46:d4:4f:91:
64:1c:ec:02:4a:8d:ac:d0:23:e4:fb:d3:73:07:fc:
89:e0:98:d9:4f:21:1e:2e:46:1a:0c:d8:19:ff:b7:
45:24:05:4b:07:ba:2b:9c:86:86:6b:91:c0:5a:a2:
01:7f:66:e9:d9:3f:e0:04:6c:53:a7:7d:f0:10:b3:
f9:16:41:c6:a5:ad:8d:27:15:c2:15:01:fe:d6:bd:
70:39:0f:4f:e7:2e:24:52:0c:22:e5:f9:00:9d:73:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:91:F8:5C:B5:43:D0:95:EC:17:92:6B:55:A6:B9:BE:2B:43:97
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/cdmR-Fy1Q9CV7BeSa1Wmub4rQ5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.96.0/19
178.213.232.0/21
IPv6:
2a00:4cc0::/32
Signature Algorithm: sha256WithRSAEncryption
11:87:5b:89:b7:44:48:f4:3d:50:2c:21:22:9f:09:f6:cd:cc:
18:14:f2:de:15:3a:c1:e5:18:7b:b7:27:3d:21:a3:0e:ba:07:
47:ac:02:f1:e1:46:ca:61:f4:47:dd:b2:ca:d0:b5:8c:e0:29:
b2:7c:01:a1:b4:89:8f:55:85:77:bc:c2:ab:b3:e0:9f:6a:df:
62:0e:dd:65:be:49:fe:a3:61:8c:84:cc:9a:31:cc:30:4f:7d:
df:f5:02:c9:82:3a:70:c8:db:a0:47:ff:06:39:d7:9b:15:02:
ea:68:b8:72:75:17:e4:13:0d:fa:99:86:94:cc:b4:4f:2e:0a:
66:ee:5f:9b:49:1d:94:00:b7:4f:8f:25:73:44:fd:db:f7:4d:
6a:b8:03:e5:b4:58:8d:69:18:89:57:7b:01:0b:7b:cb:c7:cc:
e3:3c:64:79:3f:7b:ff:38:aa:97:d3:f4:da:66:d0:79:24:19:
a9:de:98:74:34:3c:43:86:e9:03:14:f1:33:25:a5:84:97:2b:
c1:e9:05:92:36:7a:8c:5e:dd:7d:7d:97:1b:6f:09:90:8d:6b:
84:ac:49:2b:69:50:de:9a:f6:a6:73:f3:c9:19:27:e8:87:e2:
0c:b0:66:9b:91:6d:5c:de:f4:65:cd:f9:6d:85:d4:cd:17:1a:
cd:5b:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org