Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/sXif4f_i2jQXs3HjmrH_sgtzeTc.roa
File: sXif4f_i2jQXs3HjmrH_sgtzeTc.roa (raw, json)
Hash identifier: DdwXLmrJhuK53eUEz1tn9gI2LDpOwwme+kcsGYq9p2Q=
Subject key identifier: B1:78:9F:E1:FF:E2:DA:34:17:B3:71:E3:9A:B1:FF:B2:0B:73:79:37
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01851168B546721CEF5613C1CC527C306B25
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/sXif4f_i2jQXs3HjmrH_sgtzeTc.roa
Signing time: Wed 14 Dec 2022 16:12:32 +0000
ROA not before: Wed 14 Dec 2022 16:12:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:68:b5:46:72:1c:ef:56:13:c1:cc:52:7c:30:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Dec 14 16:12:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1789fe1ffe2da3417b371e39ab1ffb20b737937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6c:dc:5c:80:e9:95:24:6d:14:0c:6f:e4:af:
d4:94:43:f2:53:45:d8:42:e0:e1:99:33:ad:c1:45:
ce:79:68:43:6c:88:05:15:7a:0e:9f:43:d6:f0:d9:
ea:a0:34:b2:3d:bb:b5:dd:76:9a:d9:dc:66:04:ee:
86:4e:b3:05:17:cb:7f:e8:74:fd:95:92:f9:32:7d:
4d:6a:62:89:38:26:8a:e2:c2:c4:7d:73:a0:fb:f6:
f9:23:d9:4d:ac:39:2e:72:af:b7:b6:ba:97:f2:09:
28:3e:0d:ae:8a:01:df:3a:8f:ec:3a:8b:56:3d:66:
1a:45:d7:c3:83:35:6d:0a:7e:56:9c:18:54:00:e9:
cc:1a:3a:35:84:e0:f0:3e:e2:7a:fb:94:3a:b0:02:
cc:d1:e1:9c:ec:c9:f7:ca:6f:89:2f:87:96:b5:5f:
8f:9c:85:b7:35:05:37:d1:4e:43:79:d9:61:0e:c5:
c1:cc:92:bd:85:28:09:91:50:0f:66:1a:a5:ab:91:
9c:ba:d6:01:f4:6d:11:a2:fa:c6:b6:cb:38:5d:f8:
65:98:a7:be:00:dc:7f:e0:bb:4b:e2:d1:5d:b9:a7:
fd:0f:89:59:58:da:67:57:a8:b0:19:88:24:22:76:
c0:81:6a:f8:90:f6:24:e0:76:04:66:cf:03:c0:de:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:78:9F:E1:FF:E2:DA:34:17:B3:71:E3:9A:B1:FF:B2:0B:73:79:37
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/sXif4f_i2jQXs3HjmrH_sgtzeTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7f:d9:d4:38:4a:98:ac:c7:5f:2e:ca:9a:c2:51:50:1c:96:
29:e2:bf:53:51:a1:39:e8:2a:68:1b:d0:a2:cf:47:94:2f:5b:
db:f6:2f:08:5f:fd:d2:7f:9a:4d:4d:dd:41:31:64:ca:2e:ce:
03:c3:de:57:4c:8b:0a:0e:9a:f2:69:fe:ad:c7:d1:5d:2f:b2:
fc:f1:83:b8:90:d3:6c:29:51:13:d7:95:ec:b7:47:b3:6d:06:
df:0e:cd:69:59:2c:eb:cc:d7:f5:94:f9:c0:89:5d:97:1d:67:
9f:cf:78:8f:61:9a:10:e3:e3:4a:2b:fb:06:15:62:21:c8:7b:
67:65:4b:30:f5:91:37:48:4b:ce:9f:a5:2b:57:2d:bf:29:e9:
a2:a8:a0:27:fc:e2:2d:f6:5b:d3:85:e2:13:44:64:1d:a4:bc:
5e:4b:42:6e:52:49:c1:c7:09:3e:c3:2e:d5:5e:49:a6:73:1c:
ff:a0:a4:6a:b1:57:bd:97:e8:6f:11:4c:5b:76:fd:cc:10:6d:
d9:b0:5f:de:57:4c:9d:9a:a9:f0:82:3b:a9:b8:c4:d8:36:17:
0e:ce:35:cc:1f:0b:55:f6:76:e1:57:cc:82:cc:b0:8e:4a:3a:
d1:63:8c:c0:3b:37:5d:5b:0a:3a:cb:d5:06:ca:ef:0a:a1:fb:
2e:2e:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:35 2024 by rpki-client on console-fra.rpki-client.org