Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/43zY1x68MX7lZg3F0khoQ35JOvc.roa
File: 43zY1x68MX7lZg3F0khoQ35JOvc.roa (raw, json)
Hash identifier: 508Z3xBngQYFxW4asZ6J2aCRKlKwEt0pFYKQmTfzNBg=
Subject key identifier: E3:7C:D8:D7:1E:BC:31:7E:E5:66:0D:C5:D2:48:68:43:7E:49:3A:F7
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AEB62E9
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/43zY1x68MX7lZg3F0khoQ35JOvc.roa
Signing time: Sat 01 Jan 2022 13:57:48 +0000
ROA not before: Sat 01 Jan 2022 13:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21010
IP address blocks: 62.87.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720069353 (0x2aeb62e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e37cd8d71ebc317ee5660dc5d24868437e493af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:3d:8b:21:0f:01:96:70:45:0c:11:9a:56:
4d:98:4f:63:3a:53:26:2d:a9:6c:d9:f1:9a:1f:9c:
60:6c:e0:ea:71:cf:03:96:d1:b1:14:ce:ee:92:c4:
8e:1a:7c:e3:8d:03:13:ff:2f:7f:63:d7:f9:56:79:
a5:d9:b2:27:89:3f:6e:31:55:28:d2:c9:02:f8:bd:
05:fd:1d:84:e9:94:71:9e:4e:1a:c6:d8:44:1d:f6:
07:82:d0:f9:30:11:f1:b2:29:5c:67:f8:52:59:92:
d7:7e:87:45:00:61:aa:f2:8a:a7:fc:fd:70:dc:45:
a4:ea:e3:77:3a:1c:d9:a1:91:9e:49:c6:9c:7b:7a:
fa:64:f7:58:17:6e:6c:dc:dc:bb:45:6c:91:53:83:
6e:a1:9c:b1:ab:bb:35:6a:f7:12:fc:6f:7f:48:43:
17:88:38:53:f9:ed:04:69:97:ca:8b:34:17:5a:81:
30:ff:f1:36:80:09:26:ac:a9:3d:a6:9b:5d:1c:f0:
b4:9c:77:c9:47:15:64:b4:3d:ee:10:e5:69:99:66:
5b:91:63:47:e3:90:07:18:74:81:92:a2:60:37:63:
39:df:be:a2:0b:87:1e:78:f8:d8:b1:f0:ee:ac:9c:
1b:3b:07:dc:c7:9d:03:55:9a:39:1b:fa:a7:a6:3b:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7C:D8:D7:1E:BC:31:7E:E5:66:0D:C5:D2:48:68:43:7E:49:3A:F7
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/43zY1x68MX7lZg3F0khoQ35JOvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.87.254.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d1:75:59:a9:06:e1:da:79:fe:ed:59:bb:c0:e2:1f:02:82:
c6:d9:97:ab:54:c5:f0:b3:f5:5a:09:97:3a:5f:50:43:ea:1b:
0c:5e:6f:39:cc:2c:40:a4:7c:c5:1a:09:e1:c1:8f:71:2b:90:
06:ff:19:48:9c:dd:79:39:07:ad:19:ef:b9:7e:28:96:65:8d:
74:6e:a5:41:d8:f4:7e:a7:4a:d9:0b:6b:fb:9d:53:fc:20:c4:
0a:a6:f3:d4:1a:72:bc:49:fb:6f:94:5d:f0:ef:60:ed:f6:74:
7a:47:9e:90:df:c1:54:25:d3:d9:6c:a3:86:be:65:70:5d:d6:
29:7c:60:0c:3b:50:a2:16:40:77:c8:eb:ca:7f:14:59:3c:53:
8c:43:59:58:dd:a1:80:db:31:73:6d:72:06:ad:61:ed:1c:1c:
c4:22:96:dd:da:92:f6:ba:49:d9:b9:21:57:31:c6:d7:ad:17:
78:ab:c1:ec:ff:b2:bb:69:0b:ab:b1:72:4f:f1:06:e2:89:52:
1e:01:49:e3:cb:7a:60:50:8f:b6:c6:3e:28:ce:5a:6e:7c:d9:
f7:16:31:e1:25:47:18:2f:43:f3:30:4f:c6:19:f1:c3:42:5b:
3e:96:f2:72:83:05:8d:a2:cd:b6:55:a3:07:6f:68:11:87:46:
b0:96:6c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org