Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/xfav3aZNoet1mgwRgnirAyqZ-2o.roa
File: xfav3aZNoet1mgwRgnirAyqZ-2o.roa (raw, json)
Hash identifier: zk9gWRDwtxaPthiL8ZL1fs7T5jtzA+pZphdcN/oMiNo=
Subject key identifier: C5:F6:AF:DD:A6:4D:A1:EB:75:9A:0C:11:82:78:AB:03:2A:99:FB:6A
Certificate issuer: /CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
Certificate serial: BCD59C
Authority key identifier: D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/xfav3aZNoet1mgwRgnirAyqZ-2o.roa
Signing time: Sat 01 Jan 2022 11:56:38 +0000
ROA not before: Sat 01 Jan 2022 11:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.204.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12375452 (0xbcd59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
Validity
Not Before: Jan 1 11:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5f6afdda64da1eb759a0c118278ab032a99fb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:6f:2a:ea:f2:a8:ca:15:f0:d5:73:2f:57:
b3:c9:66:05:dd:a8:e9:29:0e:4f:8c:db:57:6b:8b:
5d:66:14:f1:10:6e:d4:90:bd:02:7a:85:03:69:59:
24:27:7e:f1:99:e3:d8:20:e9:ca:0c:37:3a:c5:98:
d5:0e:44:0b:89:c8:dd:a2:74:3d:df:78:a6:5f:ec:
a8:35:a0:27:f0:f5:85:e7:e0:24:57:f4:1e:b6:74:
53:bd:74:d0:0c:8f:58:66:00:54:2a:c6:4b:5f:4f:
5e:f4:55:cc:07:90:bf:19:e5:be:65:c7:31:89:ec:
c6:56:df:da:bb:25:be:71:90:bb:36:b1:94:11:34:
67:6f:ee:04:85:f6:30:4b:9b:b6:74:5f:9f:03:be:
d7:1b:48:cb:b8:54:08:05:09:a9:92:44:5f:ec:d2:
05:ef:76:d4:a0:a1:a0:eb:70:08:1a:a3:e4:e8:73:
fd:bf:88:c4:ad:84:63:ff:96:00:c2:7e:fd:be:fe:
86:ea:8c:d8:d4:85:a9:ee:b5:34:c2:fd:66:d6:4d:
6c:6b:e2:b3:63:a7:3e:8f:13:39:fb:d2:1a:6d:45:
0c:d9:f8:2c:8c:51:05:aa:72:f3:85:87:2a:00:58:
41:97:ef:50:19:fb:aa:17:4f:13:aa:e2:2e:08:c1:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F6:AF:DD:A6:4D:A1:EB:75:9A:0C:11:82:78:AB:03:2A:99:FB:6A
X509v3 Authority Key Identifier:
keyid:D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/xfav3aZNoet1mgwRgnirAyqZ-2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/0mrk6biw_ZlNLMS-bG85zIua3Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7d:cc:63:7e:25:b6:74:b4:c2:f7:0a:64:7e:e2:f9:89:65:
6c:18:76:a5:49:fe:ef:c8:32:40:05:d8:e3:a5:3d:14:7f:3a:
d9:e9:bc:ee:51:c5:ea:42:f6:8d:ab:05:16:19:3c:55:22:36:
b0:2d:cb:48:59:5e:b9:90:8b:b1:72:7b:24:c3:55:b7:02:c2:
78:2f:2d:81:f2:32:e6:52:4e:fb:a9:53:94:d8:20:f6:3c:03:
36:4d:28:64:02:92:08:c7:66:c5:2f:2f:8e:31:e6:6d:a7:f4:
fd:3f:3b:e5:a9:fd:63:3f:7c:ba:23:6c:0e:6a:a7:d6:c8:1e:
f1:bb:4a:b3:a8:15:ec:6a:3a:ae:f9:2d:04:42:48:e4:6b:77:
d1:0d:36:ee:79:38:68:22:53:0d:54:1e:63:56:26:87:5b:1c:
02:a3:c8:6a:7e:32:b8:7b:b0:69:db:a9:42:11:35:31:d5:49:
e5:8c:ef:36:78:f4:fb:a4:09:7b:76:9c:ef:7d:7b:f0:8a:41:
65:14:f3:e8:4b:ac:2c:4d:f7:c8:87:14:9f:28:18:4e:bf:54:
46:5f:31:f3:0d:32:f1:e1:d8:9c:bd:02:b6:5a:74:e5:50:5a:
63:93:69:76:01:4c:4b:31:94:4e:a8:d9:b8:fc:fc:bf:1d:50:
31:71:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:08 2023 by rpki-client on console-fra.rpki-client.org