Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/fsSO7SDMgs4vDQVEhE0_gOy6aec.roa
File: fsSO7SDMgs4vDQVEhE0_gOy6aec.roa (raw, json)
Hash identifier: DWDNAnsl9eHllsZrbcMuFkisS6jg/6oCujn+SrJif98=
Subject key identifier: 7E:C4:8E:ED:20:CC:82:CE:2F:0D:05:44:84:4D:3F:80:EC:BA:69:E7
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 0184098CDBD4D268B06FA0E6BB1A1D92442D
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/fsSO7SDMgs4vDQVEhE0_gOy6aec.roa
Signing time: Mon 24 Oct 2022 10:32:17 +0000
ROA not before: Mon 24 Oct 2022 10:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210513
IP address blocks: 62.3.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:8c:db:d4:d2:68:b0:6f:a0:e6:bb:1a:1d:92:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Oct 24 10:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ec48eed20cc82ce2f0d0544844d3f80ecba69e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:28:82:21:77:f4:4a:21:35:b5:f6:21:54:
05:3a:cc:48:22:08:4f:07:c0:a0:fb:93:49:3d:64:
3a:73:67:0c:8f:e6:ee:67:d8:2b:82:e1:4b:2c:87:
23:8c:34:07:d1:91:f0:42:ea:35:f2:bb:8f:8d:e0:
c6:3a:99:69:ad:b4:3b:8e:2c:19:be:05:c8:9f:09:
8e:37:05:87:15:39:6e:83:aa:e1:6b:91:28:4d:3a:
78:28:23:17:65:f8:ff:b3:12:c5:02:2a:40:ee:13:
9f:d4:43:3e:89:81:c9:8c:21:96:e3:5d:d8:ef:16:
a2:ac:5c:20:17:06:ff:98:ac:54:33:f3:17:ec:2e:
4f:fd:da:85:d2:46:25:47:02:a8:8b:dd:72:27:fd:
cf:0c:a3:ee:c0:2e:82:a5:e5:4a:c3:d4:e4:5a:42:
55:be:1e:e4:9b:8a:44:36:8a:9c:d0:d4:f0:3b:60:
98:6f:8f:33:41:3c:b7:a7:dc:14:5d:2c:9e:13:7d:
32:85:4c:da:fc:1f:7d:2c:6e:d2:fa:ae:ae:b1:05:
cf:e3:59:f5:d9:ad:bc:b7:21:7d:8b:68:34:dc:e8:
ce:65:e2:b3:39:5b:31:67:79:22:0b:fe:87:c6:4c:
5b:e5:07:62:38:6e:51:7d:7d:15:ac:a9:6e:a5:7a:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:8E:ED:20:CC:82:CE:2F:0D:05:44:84:4D:3F:80:EC:BA:69:E7
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/fsSO7SDMgs4vDQVEhE0_gOy6aec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.56.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ca:9e:4c:3b:ba:6e:4d:18:87:e8:b9:f6:3b:41:eb:c6:2b:
94:5f:0d:80:5e:5f:c1:0c:0a:e9:8b:59:93:31:18:3c:56:47:
e8:74:0c:13:06:27:a9:90:f2:4b:8e:6d:ff:1d:b8:a8:2d:e2:
02:f6:43:08:14:e4:df:5b:69:5e:37:6e:88:31:f0:ec:84:aa:
80:fc:62:c3:a3:bb:6f:0b:4d:27:b1:49:0f:6c:d2:d5:9e:c8:
2f:1a:26:dd:39:bd:a1:d5:95:f3:66:37:31:a4:e8:78:22:59:
7c:48:91:e5:4d:ea:32:0d:41:a7:d8:08:81:1c:3a:a3:6b:69:
ca:8f:20:15:bf:3b:5f:e3:6e:51:e1:b2:e6:24:e6:0b:03:11:
ae:52:d5:1b:46:d6:fe:f5:40:6f:9e:56:a8:62:6d:46:c5:d9:
ef:94:ed:0a:f7:29:f7:e4:76:a8:70:83:41:ad:00:2a:29:d9:
2b:73:8c:3f:c9:a2:0e:0d:72:68:ba:97:dc:33:c6:f4:ce:4b:
8d:bf:9e:3e:65:66:a5:84:b8:4b:b2:b1:bb:de:79:7c:e9:4e:
e4:bb:d4:86:5a:ca:ba:b9:75:7e:ef:58:00:fd:1d:aa:89:20:
00:3c:f8:4f:7e:06:75:e3:91:2e:ff:5c:38:8c:31:6e:4f:a2:
bd:47:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:50 2024 by rpki-client on console-ams.rpki-client.org