Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YtX3lZiug1yZFdmmIYW_Ln8gOs8.roa
File: YtX3lZiug1yZFdmmIYW_Ln8gOs8.roa (raw, json)
Hash identifier: I0ZO8OR+4s3eEkMBEvsCetHuh+MQfM4eNu5p/8zhTiA=
Subject key identifier: 62:D5:F7:95:98:AE:83:5C:99:15:D9:A6:21:85:BF:2E:7F:20:3A:CF
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: C7A984
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YtX3lZiug1yZFdmmIYW_Ln8gOs8.roa
Signing time: Mon 07 Feb 2022 12:01:03 +0000
ROA not before: Mon 07 Feb 2022 12:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211181
IP address blocks: 62.3.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13085060 (0xc7a984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Feb 7 12:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62d5f79598ae835c9915d9a62185bf2e7f203acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:b0:91:10:8e:cc:50:85:f4:15:c9:64:8a:
9a:c1:c8:f4:57:de:d7:4c:8e:1c:c5:7a:61:82:c5:
e3:5d:de:b9:5f:88:74:23:7f:1c:a6:45:09:0b:4b:
e9:3f:5d:b3:1e:0b:ec:e3:83:01:a3:ea:cd:71:ab:
42:07:fb:87:a2:18:b7:cb:48:6f:c4:89:c8:dc:d9:
1c:af:18:4f:42:e5:e0:0e:6e:32:ae:37:54:d5:25:
87:2a:d5:f5:bc:ca:b8:ad:1b:9b:68:1a:5c:da:d3:
b1:90:7f:d0:78:bc:b9:98:3b:21:51:35:6d:78:12:
39:87:c3:26:17:ca:8c:2d:67:26:90:27:9a:8e:3a:
de:76:3e:ab:2a:bb:80:ae:13:fd:6e:ca:a3:fc:1f:
54:2e:b4:31:a3:99:3a:f8:77:5f:48:32:3c:54:37:
d8:26:ec:82:b9:65:64:84:9a:96:24:5d:7e:b8:dd:
21:88:6d:26:cd:e3:a7:bd:f1:10:44:5c:31:3a:ba:
90:6a:dd:7f:e0:98:54:21:c1:39:1d:b0:df:1e:36:
d0:59:3a:bc:8e:42:83:01:d9:51:18:96:ba:60:d5:
eb:d1:4a:90:4a:e0:f5:83:27:da:cf:fb:1a:88:18:
7c:66:59:e4:0c:0c:35:ea:8a:81:02:6c:58:2f:f1:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:F7:95:98:AE:83:5C:99:15:D9:A6:21:85:BF:2E:7F:20:3A:CF
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YtX3lZiug1yZFdmmIYW_Ln8gOs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ba:67:9c:ea:85:d0:0e:e0:96:5b:11:d2:d9:21:9c:26:c4:
ba:5c:3a:9c:96:ea:1a:77:0a:94:54:e3:99:86:06:58:31:f8:
5c:0a:88:a7:04:f0:af:a4:28:e4:59:ab:b6:2a:18:9d:00:44:
a8:8c:cb:36:0c:f3:26:4e:4c:ac:d3:9b:36:93:db:46:79:11:
a2:e9:90:cd:35:a7:b2:45:d2:0d:e3:d5:af:77:da:ef:82:dc:
23:90:83:d6:16:50:92:50:29:c8:37:27:76:45:25:ea:3f:d6:
20:a9:fb:51:f8:14:93:4a:d3:42:fb:53:e7:83:4a:db:ba:9e:
5e:fd:a6:8d:3f:80:5c:b4:56:3c:d6:8f:1d:8d:53:fe:75:da:
fd:b2:61:0b:ad:e7:26:62:9f:88:40:2a:f8:c3:06:40:30:ee:
2b:ef:39:ad:87:0c:f6:66:9a:ca:eb:61:08:d0:de:9c:de:05:
44:1a:d6:44:0d:b3:0d:d5:91:5f:23:fb:0a:66:37:ed:86:16:
4c:29:f5:6e:df:b1:02:e9:56:27:de:b7:be:fa:58:e5:4d:d1:
24:95:e6:8f:58:88:ee:26:75:1d:4d:3a:ec:99:d4:bc:4d:53:
2a:f0:7a:54:c5:82:e5:95:c9:b6:a1:7e:e1:bb:e0:cc:1e:73:
0f:50:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:50 2024 by rpki-client on console-ams.rpki-client.org