Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/fWRz4Nim8i0HUKw-lvoNof5gRxM.roa
File: fWRz4Nim8i0HUKw-lvoNof5gRxM.roa (raw, json)
Hash identifier: 3eRdUs+oAfMlDVZS4/XVKGVChiyBDkkBrcQDXP0FTYY=
Subject key identifier: 7D:64:73:E0:D8:A6:F2:2D:07:50:AC:3E:96:FA:0D:A1:FE:60:47:13
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 153F3865
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/fWRz4Nim8i0HUKw-lvoNof5gRxM.roa
Signing time: Sat 01 Jan 2022 07:52:49 +0000
ROA not before: Sat 01 Jan 2022 07:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16158
IP address blocks: 62.219.103.0/24 maxlen: 24
62.219.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356464741 (0x153f3865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 1 07:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d6473e0d8a6f22d0750ac3e96fa0da1fe604713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:a6:1b:c3:4a:38:a8:fa:d8:86:f7:3f:e8:
40:d0:5d:e0:89:a9:c1:ef:b1:54:65:c7:1c:4b:1b:
ff:0b:fc:c3:c2:d0:9b:ae:4a:e4:e5:0d:08:54:37:
6f:04:47:eb:4c:8a:8e:b5:a7:b0:6c:3a:ec:cf:9f:
68:77:99:5d:d9:8f:19:b5:65:99:9e:d0:91:c2:d0:
b7:8d:e3:a7:9a:36:66:49:f1:0c:10:4e:91:e9:d7:
5c:70:27:cb:e8:1f:21:1f:db:9d:c5:8e:d4:06:71:
0e:3c:24:9d:d8:fa:f1:37:b8:c5:12:1b:1b:0a:f0:
e5:57:a1:5d:f5:cf:99:79:5a:a0:33:73:9e:b6:3d:
30:7d:c1:d1:8a:9d:51:bc:49:9a:72:2f:0e:65:91:
88:ea:6a:eb:7b:f0:6e:e8:ec:47:e6:24:05:f2:d5:
32:bc:7e:15:4a:66:b6:52:46:d6:5e:bc:04:b0:98:
6c:f3:4e:e1:51:66:89:f6:2c:91:31:b0:b4:f2:e3:
84:fb:61:d0:fc:6c:d8:cc:66:a9:18:39:18:4b:6b:
da:35:6a:24:be:07:f9:79:14:23:08:7d:d2:c4:46:
91:16:b7:56:e6:9b:f3:8e:c9:bf:e1:8e:82:b2:b7:
03:28:96:7f:5b:7f:38:7b:b3:8e:4b:da:de:60:ea:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:73:E0:D8:A6:F2:2D:07:50:AC:3E:96:FA:0D:A1:FE:60:47:13
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/fWRz4Nim8i0HUKw-lvoNof5gRxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.219.102.0/23
Signature Algorithm: sha256WithRSAEncryption
81:34:fc:97:fa:9e:73:67:45:bb:5b:ce:12:3b:4c:71:46:c3:
60:45:ba:d4:a1:9f:db:1b:77:cc:b0:ec:66:fb:27:e8:fc:5c:
91:e6:f1:24:2f:52:9c:db:2e:a3:b4:24:fb:21:7d:b2:14:69:
d6:68:6e:82:8a:31:48:eb:d9:b7:0b:12:d9:bc:63:89:01:e4:
b2:41:b6:66:f2:68:84:e5:f2:bf:2f:c1:f4:39:91:2f:39:70:
2a:c7:9b:63:6e:d5:30:e3:f4:c3:1d:b9:3f:f7:26:25:2f:9e:
4f:6d:f2:c8:03:8f:87:86:66:95:55:cf:5a:3e:ad:e3:13:3e:
d7:a9:2f:04:9b:44:0e:7d:17:5e:24:91:2a:44:37:8e:93:11:
6c:b3:f7:3f:ee:a1:28:1c:87:52:5e:1c:49:ad:61:ea:b2:4d:
f6:64:bc:3a:ee:c2:ee:c4:12:2d:71:ef:5d:d9:99:06:03:fa:
0b:fe:b2:70:3c:35:1b:73:74:d8:b5:a9:4c:57:07:ff:a6:7c:
f8:56:79:2d:e8:f8:8c:22:42:97:56:94:bc:ac:a2:68:85:4d:
16:bd:88:90:ad:46:cc:44:db:02:b2:db:38:24:69:5c:37:ba:
1c:49:36:40:c9:25:fa:a7:50:6d:1b:6d:2b:5b:d1:cb:18:41:
1b:f7:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:17 2024 by rpki-client on console-ams.rpki-client.org