Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/ycjKE_IiOI6rHiLfw_y_jx32DyY.roa
File: ycjKE_IiOI6rHiLfw_y_jx32DyY.roa (raw, json)
Hash identifier: HXQe5Tt96YWxYw0nSYymPKGiUN3UMc3jWwiIUPJs9gs=
Subject key identifier: C9:C8:CA:13:F2:22:38:8E:AB:1E:22:DF:C3:FC:BF:8F:1D:F6:0F:26
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 0A18D83C
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/ycjKE_IiOI6rHiLfw_y_jx32DyY.roa
Signing time: Sat 01 Jan 2022 13:06:01 +0000
ROA not before: Sat 01 Jan 2022 13:06:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25466
IP address blocks: 62.101.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169400380 (0xa18d83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jan 1 13:06:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9c8ca13f222388eab1e22dfc3fcbf8f1df60f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:b8:d5:65:c6:7c:24:d0:17:32:40:ad:08:
b3:d1:0f:37:56:5a:00:4e:e3:44:73:5f:b6:93:2f:
ff:0b:4b:25:88:e7:53:94:07:bb:77:ab:07:74:8c:
21:86:1d:51:4e:e5:de:78:4e:22:05:bd:3a:7c:7a:
74:dd:18:4d:f4:c9:65:50:e3:02:77:39:51:74:4f:
ef:45:8d:aa:df:7c:f4:ad:b2:f9:d9:65:f0:5d:6d:
21:e3:b5:22:52:83:b2:7d:7d:11:cc:e7:72:8b:e8:
d3:f5:c2:f7:22:bf:9e:19:c7:f7:3f:32:eb:cb:39:
ba:dd:2f:9e:f6:5d:bc:6c:d9:76:67:94:17:02:15:
55:d9:8a:18:0f:94:02:68:77:1d:45:3a:96:62:79:
f8:68:f3:5d:ca:5a:72:c5:c9:b8:50:e0:5d:90:8c:
3c:bd:60:82:74:ff:14:e3:a9:52:af:9a:56:13:29:
c4:1d:5d:1d:64:99:b0:27:e8:74:a0:d5:16:c7:e9:
58:08:cf:91:be:f9:2a:ab:3f:10:d5:49:36:64:f6:
c8:40:31:e4:cd:a0:c5:e3:82:98:74:63:28:b8:33:
b0:2e:b2:83:cf:6f:76:25:a0:52:d2:0e:3a:c0:c3:
d4:40:43:86:cd:ed:5e:a5:97:66:c6:60:97:30:c8:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:CA:13:F2:22:38:8E:AB:1E:22:DF:C3:FC:BF:8F:1D:F6:0F:26
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/ycjKE_IiOI6rHiLfw_y_jx32DyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:8a:06:2a:e4:a1:34:ac:30:1d:d2:f0:e8:65:6e:f0:ed:73:
41:cd:95:00:fa:42:d1:a9:05:94:14:8f:57:dc:c0:ff:61:1c:
90:6f:22:9a:f9:53:79:82:b1:2f:09:e8:27:8d:c4:8b:60:3b:
73:3b:07:e8:cc:60:99:02:59:e4:46:5a:56:ea:f4:94:96:b1:
bb:83:0f:05:d3:42:3d:4a:f6:87:75:f5:8d:6f:0f:fc:a8:91:
fe:f0:0d:e6:21:5c:6c:9d:ac:2d:f1:25:7d:87:cd:d7:d8:e8:
c6:ab:7c:77:13:d8:62:4d:28:99:8e:d0:49:99:14:ab:c0:33:
0f:0a:af:6c:e6:d3:f7:b3:5b:82:c3:02:a7:b3:84:91:88:7a:
79:d6:ae:a2:12:e0:b8:2f:3a:89:68:0b:af:1b:f4:1e:96:29:
76:84:0f:75:59:67:0c:91:69:5d:ef:c7:72:f6:6f:12:25:8e:
46:68:81:40:7c:9c:fd:7c:47:c8:2f:2d:b4:26:b5:f3:09:dc:
97:ae:b4:22:20:6f:b6:d0:36:97:cf:a6:e7:8e:9b:37:99:b3:
e4:65:53:c4:89:fe:d8:11:a9:50:52:67:d4:0a:02:61:4b:8b:
a0:22:a4:0e:f2:19:ad:b1:40:08:dd:e0:7f:72:09:58:e2:3d:
14:c6:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:25 2023 by rpki-client on console-ams.rpki-client.org