Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbtWhJdP0sVK5N9syGoNUy-QLj0.roa
File: PbtWhJdP0sVK5N9syGoNUy-QLj0.roa (raw, json)
Hash identifier: D2xpMypel4mOMq6SQHgf46O0OQes2KEFIr251i2WkF8=
Subject key identifier: 3D:BB:56:84:97:4F:D2:C5:4A:E4:DF:6C:C8:6A:0D:53:2F:90:2E:3D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 105A8E0E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbtWhJdP0sVK5N9syGoNUy-QLj0.roa
Signing time: Mon 13 Jun 2022 07:02:08 +0000
ROA not before: Mon 13 Jun 2022 07:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274370062 (0x105a8e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 13 07:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dbb5684974fd2c54ae4df6cc86a0d532f902e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d3:df:f4:89:95:7e:02:6e:31:e4:31:d5:b1:
a3:2a:9f:e6:3b:d0:7b:ce:22:e4:76:33:79:55:f8:
6e:a9:a1:a8:d6:fe:41:23:4f:0c:15:f0:d9:fc:fa:
3e:aa:6f:bf:37:d3:2c:f7:20:e1:3f:80:11:d3:db:
9b:5b:05:fa:d9:9b:81:77:81:89:2e:eb:61:ab:e9:
13:b4:01:7d:6e:ce:be:a2:2c:5b:25:2d:20:62:09:
fb:7c:37:2b:56:0f:c8:35:5a:7f:0d:81:49:d0:c6:
aa:b7:e2:cf:cc:13:50:9f:0e:a9:d1:d5:18:dd:bd:
be:9e:b5:57:d7:8d:1f:3a:29:d9:24:f2:d1:96:13:
13:3f:77:14:8b:74:4f:29:d2:c8:67:5e:70:e3:b0:
bc:aa:3f:7c:50:23:b0:9a:b0:f0:41:b6:54:a7:e2:
41:4f:fd:14:02:c2:c4:9d:df:c6:9e:b0:72:23:95:
68:18:56:40:38:14:c0:6e:d1:4b:00:a4:de:52:7a:
12:a5:95:49:29:78:59:d9:e8:09:30:6d:2a:9c:c2:
f1:5e:56:e0:e0:b3:20:89:74:16:1b:e0:35:95:11:
1f:57:df:e3:45:4e:7c:36:ad:cd:02:09:97:c4:d8:
23:f3:e0:a6:b6:0c:66:06:3e:93:fa:ae:b9:35:0b:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:56:84:97:4F:D2:C5:4A:E4:DF:6C:C8:6A:0D:53:2F:90:2E:3D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbtWhJdP0sVK5N9syGoNUy-QLj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:04:81:8f:ee:17:f1:ea:be:be:94:f0:09:fe:f1:32:80:97:
a7:89:b7:5a:4e:38:5b:c0:28:e0:5d:64:9e:c8:1b:dc:65:8a:
cb:75:44:6d:f0:f1:23:df:63:6e:74:c6:ce:9a:e6:ae:c3:8c:
37:f9:b9:2a:3c:5a:32:fe:53:d4:b9:08:fc:89:68:90:ab:08:
86:7f:7d:22:24:e5:fb:9a:9c:b4:b9:39:d9:1c:3e:43:aa:82:
4d:11:bb:9e:5c:e8:cb:6c:5b:58:53:03:f8:72:28:08:e5:04:
06:ac:0d:af:2f:bb:84:e8:e0:29:c1:f1:2e:12:b3:9f:69:32:
cd:6a:9b:57:f5:d4:37:9f:17:68:e8:d0:eb:3a:10:6e:e0:66:
48:bc:5d:7c:79:48:8d:87:09:82:8d:65:96:fd:2b:ad:ec:81:
25:8c:2b:c5:41:ca:b6:7b:cd:f1:d0:7e:24:20:61:7f:cf:00:
ef:c9:3b:70:e6:af:88:55:9b:58:57:14:d8:89:05:3d:df:fb:
8e:35:22:5c:29:51:fd:48:0e:21:34:c2:b7:09:83:7a:2a:e0:
5a:b4:4e:5a:21:e2:db:8d:be:71:55:89:af:99:d3:c0:36:c8:
e2:25:b0:78:74:35:36:5a:10:36:e5:91:db:a6:b4:59:f9:b5:
63:e7:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org