Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/ZmtU-sxBxMpc9BqL_Hm-jkKL7uY.roa
File: ZmtU-sxBxMpc9BqL_Hm-jkKL7uY.roa (raw, json)
Hash identifier: pPJ47cWpA4T+wqk5MJ94UiFtOaz9kR7ESt5qgTXNQNw=
Subject key identifier: 66:6B:54:FA:CC:41:C4:CA:5C:F4:1A:8B:FC:79:BE:8E:42:8B:EE:E6
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 05198604
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/ZmtU-sxBxMpc9BqL_Hm-jkKL7uY.roa
Signing time: Sat 01 Jan 2022 05:52:59 +0000
ROA not before: Sat 01 Jan 2022 05:52:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6660
IP address blocks: 62.25.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85558788 (0x5198604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Jan 1 05:52:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=666b54facc41c4ca5cf41a8bfc79be8e428beee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:f7:83:b4:8d:53:b2:51:21:36:94:e5:11:
da:0a:c2:33:4b:55:21:c1:32:33:83:fb:6c:4d:02:
e2:b0:18:7b:a6:1a:7c:4c:23:61:35:0f:f9:c5:d2:
bf:6b:ee:7a:5d:63:c0:97:8e:1a:f1:5e:de:d2:42:
68:41:a1:c3:c1:e1:99:3b:e6:ea:95:c7:68:cc:1b:
09:92:90:6e:14:f7:24:c4:d0:eb:a9:9a:f9:2e:91:
93:2c:2b:8c:e4:08:31:06:e9:db:76:63:7f:e3:45:
4b:76:ec:35:ed:db:aa:41:9d:25:0e:17:69:d8:f3:
47:05:f2:73:ec:b6:86:98:ca:6c:7e:86:40:ff:d4:
80:a3:dc:d0:a9:29:e2:ac:64:c1:83:ff:1e:e6:5b:
ce:4a:c0:8c:50:4e:e5:75:5c:78:c7:52:70:7b:06:
d3:9c:ed:37:98:e2:a3:d6:c5:e6:64:08:df:fb:aa:
47:4f:4f:20:9b:6b:a1:ef:cf:7f:f3:2d:99:65:25:
95:ca:82:c0:74:6c:7a:02:ed:3e:0c:e0:9a:56:d6:
7b:7a:5b:a9:99:e9:be:7b:b2:c6:64:62:25:ec:28:
50:01:62:47:5e:78:ed:85:8c:5d:92:dd:93:2e:24:
7c:4b:e0:fc:4f:d8:bc:fb:c0:3b:71:3f:11:59:c3:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6B:54:FA:CC:41:C4:CA:5C:F4:1A:8B:FC:79:BE:8E:42:8B:EE:E6
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/ZmtU-sxBxMpc9BqL_Hm-jkKL7uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0d:b4:a6:e1:22:bb:c8:78:bc:ba:d5:ee:69:fa:75:db:47:03:
df:18:2b:69:53:7f:47:b5:ee:32:be:fe:ad:34:b3:ea:06:df:
3b:ae:9e:c5:f1:a2:27:2d:ba:db:ad:ba:27:8c:ef:99:c0:28:
b3:7e:8e:d1:e2:2f:1c:89:59:4e:a3:4d:a3:d7:9c:b3:e7:16:
2f:f0:ab:00:e6:df:87:88:da:53:60:96:60:de:f1:9c:e8:8c:
d7:64:28:35:02:51:17:93:1b:2d:7a:a5:33:9c:79:2c:39:7d:
b2:b8:10:48:fa:26:e5:3b:53:08:80:50:7e:9d:73:cb:e9:b4:
d4:ad:82:c6:f6:0e:6b:65:68:80:40:1e:0e:0c:f8:f6:06:d9:
a8:34:89:96:f3:02:4a:17:ce:76:c9:52:39:64:10:79:d8:b8:
4b:f0:93:0f:57:cd:32:70:54:dd:fa:8b:be:50:70:63:c7:52:
67:16:44:53:df:86:b9:b1:74:26:01:c8:76:40:22:7a:ac:50:
c2:b7:68:cf:83:29:d1:30:a4:1e:41:bd:3b:5b:52:e5:af:e3:
34:7b:8e:91:b5:be:8d:02:23:29:c0:04:d4:51:9b:01:65:5a:
3d:b6:31:f9:94:70:64:67:d0:51:33:a9:eb:2c:16:bb:1b:8f:
d3:6c:70:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:22 2024 by rpki-client on console-ams.rpki-client.org