Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/IKl-aW5AHceYqJtGQvQwJwk8JGc.roa
File: IKl-aW5AHceYqJtGQvQwJwk8JGc.roa (raw, json)
Hash identifier: BcbhKm/ZdZkxj6QrPqsx+kwRpZXI/PWcUEk8UV3tbYM=
Subject key identifier: 20:A9:7E:69:6E:40:1D:C7:98:A8:9B:46:42:F4:30:27:09:3C:24:67
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B628632
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/IKl-aW5AHceYqJtGQvQwJwk8JGc.roa
Signing time: Sat 01 Jan 2022 08:58:39 +0000
ROA not before: Sat 01 Jan 2022 08:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55002
IP address blocks: 62.244.244.0/24 maxlen: 24
213.248.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191006258 (0xb628632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20a97e696e401dc798a89b4642f43027093c2467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:13:de:7f:f0:02:21:91:45:24:90:60:2c:
b6:9f:60:1a:6a:64:00:54:f9:4e:e5:22:37:2d:4a:
61:da:ee:f8:73:2d:2c:0f:d7:e2:d3:7a:31:e2:e0:
01:36:3e:f9:34:27:6c:9a:ae:96:bd:40:0a:cd:9a:
ce:15:bd:10:23:d4:aa:29:cf:9a:22:b1:99:c8:6c:
48:7f:50:d7:89:b5:26:2e:8f:c3:8c:d7:ff:58:ab:
67:47:bc:3a:6d:6a:b4:9d:07:4f:20:68:8c:31:a9:
8e:21:e5:2c:01:55:58:0a:53:38:3d:2c:7c:fd:e1:
db:43:f9:40:9a:52:18:83:3e:18:0d:e6:ec:1b:69:
d5:a9:e9:e9:bf:44:36:d6:58:ca:76:84:9f:dc:b0:
0a:4c:9d:ee:96:83:e1:97:b5:c2:26:f8:05:5c:03:
fd:b0:fa:f6:c6:f0:b4:2d:73:ca:63:4d:14:1e:35:
fc:e6:58:17:7d:48:7c:b6:5a:2f:de:ac:c8:58:11:
72:dd:c3:a8:80:71:ba:60:56:b5:ad:aa:ec:b3:c5:
23:f9:8b:af:d4:7b:f2:e8:a3:94:1e:58:a8:cc:39:
37:5e:c2:38:3a:9f:0d:0b:f1:d7:6c:58:c2:f3:d4:
b9:20:6a:b2:dc:0b:64:27:21:d3:fb:b5:dc:48:0f:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:7E:69:6E:40:1D:C7:98:A8:9B:46:42:F4:30:27:09:3C:24:67
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/IKl-aW5AHceYqJtGQvQwJwk8JGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.244.0/24
213.248.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:cb:4e:ad:80:5d:e4:f1:ef:14:b0:96:82:15:a6:b3:2d:7d:
06:c4:52:da:3d:98:1f:3b:e2:dd:cb:02:a7:f4:36:ed:93:d4:
3a:d7:67:58:76:7e:ee:cc:38:ed:ad:41:e1:dd:51:72:db:06:
1e:e5:d2:62:48:ac:c3:61:8e:83:30:b6:b9:5f:43:a3:14:5c:
55:73:88:36:c8:fb:66:ba:09:99:60:7a:ad:09:90:f7:f8:b0:
2b:63:42:ed:7e:2e:fa:7c:59:41:4a:c3:89:1f:1e:6b:7d:5c:
62:9d:a1:e1:8d:c7:2d:00:0c:68:2f:10:61:bf:c9:49:8a:55:
bc:da:c7:3b:74:9a:02:d6:92:c3:d7:a9:a3:55:57:ce:5d:ff:
bc:7b:f8:6d:d2:36:74:19:c8:ac:c8:08:4c:b8:29:bb:3b:44:
ae:4f:93:49:fe:62:d4:83:e6:ab:5e:42:37:a3:98:01:90:26:
61:5e:70:f7:8f:64:d6:12:19:2e:4e:aa:ac:ee:eb:fb:6c:9e:
63:3a:5a:37:71:73:b6:09:23:46:0b:36:c5:0c:34:07:b4:01:
e6:94:7f:1c:96:4a:9b:3b:46:38:55:b7:6d:99:ae:c5:3b:b3:
8f:ac:af:b2:31:33:fa:fc:4b:eb:e3:44:89:71:d5:3f:cd:56:
45:58:b4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:03 2023 by rpki-client on console-ams.rpki-client.org