Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/dZt73L6rgLhCpwNRq84YCv-w240.roa
File: dZt73L6rgLhCpwNRq84YCv-w240.roa (raw, json)
Hash identifier: HQK1yNmyz6DHITOxE1/SbZc5MbPHBDDXsS3+wqgC7TM=
Subject key identifier: 75:9B:7B:DC:BE:AB:80:B8:42:A7:03:51:AB:CE:18:0A:FF:B0:DB:8D
Certificate issuer: /CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Certificate serial: 0181F465EF751C6EF9DA36F9711B32E56B7C
Authority key identifier: 9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/dZt73L6rgLhCpwNRq84YCv-w240.roa
Signing time: Tue 12 Jul 2022 21:52:09 +0000
ROA not before: Tue 12 Jul 2022 21:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:ef:75:1c:6e:f9:da:36:f9:71:1b:32:e5:6b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8ea65f69616ef18c0b691f49bc25dd3085429b
Validity
Not Before: Jul 12 21:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=759b7bdcbeab80b842a70351abce180affb0db8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:6b:53:9c:30:7b:b2:61:8b:cd:20:0f:1d:
2f:25:ae:f0:e1:03:d9:6b:f4:57:bd:2c:29:af:55:
fd:df:e2:89:90:3a:fd:a1:5b:a3:0a:60:03:1c:0b:
65:6e:38:ad:f1:e9:d1:0d:cc:f1:cd:c6:c6:a7:18:
14:62:d3:25:bf:e3:4f:e2:96:99:28:35:00:c1:05:
d9:b4:02:5d:b2:ce:0e:37:57:0b:4d:2a:04:82:72:
d1:38:e2:ff:10:07:be:78:e5:59:76:2d:b4:10:3b:
29:f6:36:e0:96:1e:8c:a6:95:cc:39:be:e3:d8:f0:
c8:7c:36:2a:8e:29:9b:2e:e5:ad:0a:f4:4c:4f:75:
64:72:ec:83:96:c1:1d:a8:79:8d:98:a3:65:c2:47:
0b:ef:37:27:c2:3c:92:85:5c:3d:ce:b2:96:ad:70:
5a:fd:28:4a:34:7a:01:9b:10:7c:bf:ef:75:41:94:
95:4e:44:17:0b:f0:03:b6:c9:b8:dc:e9:96:90:73:
05:22:dd:0c:aa:cf:87:b3:a4:de:a9:68:21:88:c4:
f5:6b:22:36:b7:b6:2f:33:2a:59:45:d8:6b:06:2d:
8d:78:10:d9:93:9e:22:d1:da:7e:bb:54:c7:ed:1d:
8c:e4:8e:80:30:de:ae:8f:0f:20:4e:f3:e0:79:f8:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9B:7B:DC:BE:AB:80:B8:42:A7:03:51:AB:CE:18:0A:FF:B0:DB:8D
X509v3 Authority Key Identifier:
keyid:9A:8E:A6:5F:69:61:6E:F1:8C:0B:69:1F:49:BC:25:DD:30:85:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo6mX2lhbvGMC2kfSbwl3TCFQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/dZt73L6rgLhCpwNRq84YCv-w240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3af81c-e93a-40ee-9683-2d611a20d6d9/1/mo6mX2lhbvGMC2kfSbwl3TCFQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9e:d0:cb:38:5c:35:60:fa:fc:9e:d1:11:59:39:9b:9b:be:
c8:ce:78:dd:a2:5d:58:a4:b0:05:97:76:5d:ff:11:64:82:f6:
92:cf:d8:a9:38:50:b3:05:47:23:85:e5:60:e7:79:4f:f7:f5:
5e:ce:c5:42:94:88:4f:89:29:18:61:f7:0e:3c:1c:58:96:8a:
f5:23:85:fe:4e:db:f9:23:65:ff:c9:85:a9:9d:80:b6:cc:83:
ec:af:63:d5:22:c2:36:86:ab:7d:a2:da:b5:e8:00:4a:30:8d:
45:52:98:ee:04:21:b9:97:c2:d0:cf:d1:3b:d6:0f:eb:4b:61:
41:ad:08:0c:01:a9:28:71:c8:57:a5:a9:d3:fd:7f:67:26:21:
fb:04:f1:4e:d1:83:a6:cb:79:48:7f:f0:d8:7b:39:88:a8:ac:
71:9b:cd:48:49:2f:63:0f:7d:44:f4:aa:d2:13:c1:11:01:59:
c8:cf:68:63:5e:32:73:62:2a:e7:be:67:c0:07:d0:5b:15:ac:
44:01:25:61:d3:64:60:c2:df:b8:5d:6d:9f:22:84:6a:d4:3d:
fc:c6:1f:12:ea:b0:e4:ca:e5:66:ac:6d:2c:d7:29:53:e4:d7:
6f:23:c5:a9:bc:25:9a:3d:d1:ba:eb:a5:9c:d4:cc:40:9e:16:
46:42:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org