Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/_zRuTttLPHqs6BiacYoCDiMyYIA.roa
File: _zRuTttLPHqs6BiacYoCDiMyYIA.roa (raw, json)
Hash identifier: GjmUaoYlH9e005EVdJIP8YVJaOhatxBGcj+0Yabvcxw=
Subject key identifier: FF:34:6E:4E:DB:4B:3C:7A:AC:E8:18:9A:71:8A:02:0E:23:32:60:80
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 446FD755
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/_zRuTttLPHqs6BiacYoCDiMyYIA.roa
Signing time: Sat 01 Jan 2022 03:58:18 +0000
ROA not before: Sat 01 Jan 2022 03:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8908
IP address blocks: 62.160.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148180309 (0x446fd755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff346e4edb4b3c7aace8189a718a020e23326080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:c3:56:f5:ef:8b:75:f0:8b:89:72:80:59:
82:22:cd:5c:f4:1f:44:32:94:ff:f5:d9:6f:54:f3:
c6:2d:3b:8c:16:39:97:59:ac:13:dd:b5:c8:fe:7f:
fd:a7:64:34:c9:07:c1:7a:f7:77:ac:3c:11:a2:22:
a5:9a:80:4e:8b:df:ee:0f:70:ea:df:63:42:ea:c4:
95:86:d3:19:90:49:03:19:ba:5f:81:95:39:46:00:
45:20:1b:a6:ce:33:23:36:d2:49:6d:59:df:3a:e2:
92:66:9f:f5:d7:23:98:a2:09:95:f0:65:6e:6d:ef:
2e:b6:a0:a8:c8:9a:aa:fd:fa:65:c6:3c:4a:12:cd:
3f:46:da:4a:d8:9c:c6:b3:d1:e5:99:c1:e4:c8:02:
18:ae:e9:0a:2b:1b:5d:bc:fd:69:b3:33:ad:80:8a:
52:05:ea:bc:ff:49:7d:b5:04:ca:5e:a2:35:c6:8c:
91:7a:6e:1e:1d:02:5e:49:22:6e:00:f4:f2:9c:9a:
d1:8d:52:b6:22:01:27:00:1a:05:7e:50:79:7a:78:
09:19:40:a2:a4:f0:a7:97:57:14:b1:1e:b6:cf:3d:
5f:58:0f:59:a5:f8:4c:d7:8a:b6:e0:62:59:c7:ab:
d9:7a:dc:19:91:8f:58:06:60:b8:59:13:74:3f:94:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:34:6E:4E:DB:4B:3C:7A:AC:E8:18:9A:71:8A:02:0E:23:32:60:80
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/_zRuTttLPHqs6BiacYoCDiMyYIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.160.27.0/24
Signature Algorithm: sha256WithRSAEncryption
80:73:ea:97:e9:07:22:48:bf:bc:66:64:f9:b1:a0:a2:16:35:
53:bf:33:af:d8:49:e0:2b:97:09:84:40:49:c5:5c:2d:5c:19:
17:b3:95:ee:51:e3:e8:ff:af:f3:54:f7:40:8d:42:a5:db:b5:
37:43:0e:64:5e:76:48:95:fe:3d:ca:d7:81:58:24:27:2b:31:
04:7b:91:da:6c:d8:7b:53:93:34:d7:c4:73:16:0a:02:7a:f0:
9a:41:6a:ee:70:9a:04:64:9e:18:78:7b:31:53:46:e8:a6:37:
48:0d:b1:6d:66:63:26:82:a9:52:3f:74:4b:05:5b:d4:4b:ea:
c3:b6:a5:42:5e:e4:cf:4e:9d:8e:6a:bf:7c:50:58:5f:5a:26:
0c:3c:59:17:31:69:ad:cb:48:14:dd:87:83:54:8d:c6:75:90:
35:40:c9:c8:dd:7e:9c:d1:b5:19:32:f0:b4:5f:68:4a:2a:2d:
cf:63:81:d0:89:c8:71:05:37:3d:c9:dc:3d:e2:37:a7:fd:6a:
53:86:33:89:77:a2:d4:e3:d8:7f:4c:ce:b7:a3:7b:2a:11:dc:
5e:4b:4c:2a:15:9d:3b:b8:13:d0:f3:b9:39:d4:8c:13:6b:1a:
ed:f5:6a:6d:4e:e7:3d:be:da:7a:fc:fc:51:67:5d:09:fb:84:
bb:9e:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org