Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/ZEuYvVHaY1jy-Ltya6o7fYon1is.roa
File: ZEuYvVHaY1jy-Ltya6o7fYon1is.roa (raw, json)
Hash identifier: /pvrsJ4TSTtsAq+bXuEgAwdptajv1IGw75rKjQf08iU=
Subject key identifier: 64:4B:98:BD:51:DA:63:58:F2:F8:BB:72:6B:AA:3B:7D:8A:27:D6:2B
Certificate issuer: /CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Certificate serial: 096D789F
Authority key identifier: FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/ZEuYvVHaY1jy-Ltya6o7fYon1is.roa
Signing time: Sat 12 Feb 2022 10:57:08 +0000
ROA not before: Sat 12 Feb 2022 10:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35133
IP address blocks: 2.58.59.0/24 maxlen: 24
2a09:e240:2::/48 maxlen: 48
2a09:e240:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158169247 (0x96d789f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Validity
Not Before: Feb 12 10:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644b98bd51da6358f2f8bb726baa3b7d8a27d62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:27:3f:94:5b:4c:b2:20:06:11:b6:1b:e4:
ae:30:d9:23:58:2f:99:3b:9d:af:fa:32:87:1b:e4:
f8:9a:03:01:fe:6d:ec:fb:22:e1:73:2f:09:54:ef:
74:ac:04:b9:7b:82:03:84:1f:7b:f3:90:4b:36:80:
89:32:56:04:b4:2e:fa:45:fc:f8:35:ea:34:28:94:
f8:bd:fa:cd:1d:82:98:69:ba:5e:e3:64:51:d2:b8:
d4:94:c3:d9:a2:5a:72:36:4f:23:dc:cb:9f:72:bc:
30:e5:2f:b7:6a:cc:73:e5:b3:b8:98:3d:e5:84:8b:
13:cf:8c:18:1c:d1:bc:09:4b:d8:96:31:ff:06:70:
f0:d6:2b:a0:13:01:7d:45:12:48:63:2a:54:25:30:
52:87:9c:5a:ba:18:a3:19:41:28:40:ed:10:7a:34:
9c:2e:02:4f:79:7e:c4:e4:91:a7:73:30:92:b3:65:
d1:e9:35:3e:97:fd:8c:3e:21:a1:f5:94:da:6b:69:
50:c1:08:4d:c7:84:e3:ac:62:61:1d:36:23:26:73:
26:3c:82:04:62:b1:22:2e:48:45:70:13:4d:e0:c7:
65:ce:fd:f4:d7:33:c2:6b:a1:e5:67:cc:a0:d6:b5:
4e:f3:4f:58:34:50:d3:62:c1:60:73:bf:cc:8a:82:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:98:BD:51:DA:63:58:F2:F8:BB:72:6B:AA:3B:7D:8A:27:D6:2B
X509v3 Authority Key Identifier:
keyid:FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/ZEuYvVHaY1jy-Ltya6o7fYon1is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.59.0/24
IPv6:
2a09:e240:1::-2a09:e240:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:08:ce:28:c0:1f:f0:08:17:fe:76:2f:ed:7e:88:df:74:11:
62:98:35:ff:9f:16:e7:1f:44:2f:4b:32:2e:b5:55:69:80:e3:
9a:1c:4e:0e:40:2a:fc:30:fd:c4:53:a2:e8:53:0e:57:14:96:
8f:39:8d:fd:3e:20:f7:15:ab:7e:c3:85:bb:7f:91:9b:05:5d:
5d:c7:3f:04:b2:3a:13:00:03:b0:56:d4:1f:4b:ce:52:a6:d5:
69:e2:33:53:7d:dd:ad:5e:85:98:c9:6c:98:ab:81:1b:2e:42:
cd:7e:5a:40:21:b3:ae:c1:33:b6:05:3a:97:55:e0:9e:e4:c8:
0e:44:32:69:53:a2:64:db:76:46:be:da:f5:a2:b5:a1:5e:43:
6e:2c:e2:33:43:6f:83:05:36:78:d2:7b:8c:35:5e:42:6f:08:
26:57:be:ad:61:42:e6:18:a2:79:a3:fe:62:d5:51:b2:1c:57:
93:59:e8:a6:6c:85:7b:6a:e7:ae:f9:de:be:69:9d:b2:6a:b6:
36:9e:6e:2e:13:85:a2:3c:dd:f0:81:53:c5:1a:c5:de:89:49:
b1:c4:e4:5d:87:54:a6:92:fa:f5:51:a8:85:5d:8f:71:a9:5c:
3a:7e:4b:98:cf:ca:53:9e:9b:cc:ab:62:c9:ce:dd:cf:0e:cb:
e6:1a:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org