Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/5RfIRLhmzq8PltUm2etM1ciy5Cs.roa
File: 5RfIRLhmzq8PltUm2etM1ciy5Cs.roa (raw, json)
Hash identifier: 6L/G78EoDP4qnzchz5Cjfj5aRsPaOgDnO0y38mBfwQI=
Subject key identifier: E5:17:C8:44:B8:66:CE:AF:0F:96:D5:26:D9:EB:4C:D5:C8:B2:E4:2B
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 0184BFD1FC10743F0AE91650F0CF8FF41A1B
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/5RfIRLhmzq8PltUm2etM1ciy5Cs.roa
Signing time: Mon 28 Nov 2022 19:58:40 +0000
ROA not before: Mon 28 Nov 2022 19:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:d1:fc:10:74:3f:0a:e9:16:50:f0:cf:8f:f4:1a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Nov 28 19:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e517c844b866ceaf0f96d526d9eb4cd5c8b2e42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:83:98:5a:4a:92:ad:f9:be:f9:f8:02:69:
73:a0:3d:67:83:ff:d0:1b:da:89:c8:20:53:c8:4c:
0d:86:09:f8:a2:b5:51:21:18:4a:7e:b9:04:07:b7:
70:e5:83:5a:64:8c:e9:e7:11:67:ab:08:52:50:e5:
f2:59:4c:d3:41:d1:df:4a:ce:e6:6f:85:29:85:6a:
31:30:af:93:b1:e5:80:1a:05:33:db:b8:0b:bd:7c:
52:f4:78:7c:23:47:97:05:46:91:16:52:df:5e:e7:
91:e8:bc:3a:b8:14:e6:bf:6f:a6:a8:94:94:51:19:
64:a8:4f:80:85:39:bc:c0:cc:28:41:96:ae:84:78:
99:7f:cb:f3:a0:d7:ce:04:94:3e:1a:b3:f6:7f:a5:
1a:ac:c9:34:4c:20:fd:85:f2:2b:83:9e:d1:6a:19:
f1:28:cd:48:fe:91:47:9c:54:2e:ef:e9:43:b6:a7:
7d:73:50:2b:af:67:81:9f:9e:3f:2e:3a:7c:f0:d7:
1a:0d:f2:00:58:e6:75:78:09:d2:15:a0:78:47:69:
19:a4:64:2a:67:fb:a5:91:f8:3b:7b:ec:a1:9a:30:
d4:f4:15:57:60:ef:3e:41:93:0b:7f:82:d6:1d:82:
ad:93:eb:56:0c:7d:0c:fa:ed:92:bf:13:c3:bb:00:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:17:C8:44:B8:66:CE:AF:0F:96:D5:26:D9:EB:4C:D5:C8:B2:E4:2B
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/5RfIRLhmzq8PltUm2etM1ciy5Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bf:b4:1a:34:ef:4c:75:ae:f8:a4:a7:ba:39:6d:9a:cb:a4:
58:99:36:ba:99:f8:1f:0b:ea:c1:22:11:1f:bb:a8:ee:30:36:
e5:4f:17:9c:12:78:b5:bb:46:91:af:e8:b2:64:75:52:47:81:
3f:31:62:9e:28:c5:6f:1f:d8:43:42:4b:f9:44:49:06:14:c9:
ed:78:20:f1:d5:1d:cd:95:61:dd:09:26:67:7b:0b:2a:b8:c0:
26:fc:73:5f:15:45:e7:29:12:fc:43:a4:12:f4:3b:52:20:b8:
9e:26:3c:3c:61:bb:51:3e:12:c0:c2:37:e3:25:70:1b:f6:2e:
2b:b9:df:42:89:27:66:7f:7d:1c:8b:a4:fc:3c:b5:78:44:d2:
32:a4:6d:00:64:5b:a0:a3:1c:98:6d:19:4f:25:0a:69:cc:ba:
39:65:34:37:b5:b7:e0:09:24:40:6f:00:4b:88:c7:78:7b:af:
77:83:51:63:7b:d7:e1:a1:b6:7f:97:58:7a:9f:7a:13:c7:18:
ad:bf:60:c7:83:6d:12:55:3f:d5:63:91:3f:b5:91:69:ba:f6:
50:27:1d:16:16:21:8f:d8:3d:45:a8:81:83:6d:17:43:a1:1e:
a3:0c:60:c4:33:78:d9:9f:8b:af:29:e9:39:98:be:21:1c:a9:
1d:88:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:35 2024 by rpki-client on console-fra.rpki-client.org