Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Rh1FmIpjklpQDGRvGa2TuQaWiX0.roa
File: Rh1FmIpjklpQDGRvGa2TuQaWiX0.roa (raw, json)
Hash identifier: GVm/nngF4m8Zi1oAYSZEF/DagL5SVS1waYMU9Rdk640=
Subject key identifier: 46:1D:45:98:8A:63:92:5A:50:0C:64:6F:19:AD:93:B9:06:96:89:7D
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0183F9F2FC3E5D8A655DAE893D8011E50B6C
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Rh1FmIpjklpQDGRvGa2TuQaWiX0.roa
Signing time: Fri 21 Oct 2022 09:49:54 +0000
ROA not before: Fri 21 Oct 2022 09:49:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14178
IP address blocks: 62.100.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:f2:fc:3e:5d:8a:65:5d:ae:89:3d:80:11:e5:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Oct 21 09:49:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=461d45988a63925a500c646f19ad93b90696897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:21:cc:db:cd:41:05:55:6e:e2:aa:b8:cc:
32:bc:51:e7:0c:7b:c1:62:0b:b1:5d:7e:61:21:4d:
49:d8:4e:f8:62:fb:fc:4c:8e:1d:4b:e7:00:3f:45:
d5:58:e7:70:be:5e:de:ed:3c:41:14:d3:94:99:98:
5c:d3:70:69:e2:6b:64:ef:1f:87:6f:e6:69:e4:47:
b3:e1:1e:3a:2f:8f:81:25:3d:e1:89:89:73:42:a2:
ec:4e:8c:ad:b1:bd:e8:b7:cf:03:0e:b9:b5:82:6b:
34:e5:1f:6f:20:b9:05:86:12:e6:ce:38:6d:62:04:
99:b0:2c:25:6c:68:3b:0b:5a:f2:02:c1:d0:9e:e6:
8b:73:31:8d:40:f7:c0:99:3e:71:68:49:71:b8:db:
50:d0:48:93:5e:92:b1:b5:25:76:d1:bc:06:f4:1e:
7f:19:48:49:c2:69:70:c3:c5:8e:97:01:d1:87:e7:
9d:bd:3f:4c:5e:a7:c6:bf:23:bd:f2:38:2c:6a:e5:
18:58:1b:41:48:90:aa:a4:78:0d:f5:46:64:d5:24:
7e:6c:a9:15:7e:40:4f:a0:99:9c:2e:79:51:af:40:
1e:0c:a6:fe:0a:84:74:40:64:9e:d9:9e:bd:60:8a:
84:f4:5b:34:9f:db:8b:96:ce:93:a2:10:43:e2:60:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:45:98:8A:63:92:5A:50:0C:64:6F:19:AD:93:B9:06:96:89:7D
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Rh1FmIpjklpQDGRvGa2TuQaWiX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.209.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ce:eb:5a:38:ed:1f:f4:9b:e2:28:bc:9a:5a:92:50:16:86:
5c:7c:d3:3a:03:d2:1a:01:0b:dd:75:6e:80:6f:23:8b:aa:c4:
08:6d:38:39:9e:d2:5b:34:cb:ae:82:5b:ed:04:37:96:28:12:
03:bf:24:a6:d3:56:20:a0:ec:4f:0e:6a:32:4c:85:7e:11:50:
22:59:03:16:b8:ae:d4:c6:48:1f:6d:3a:f8:52:b9:c2:6c:86:
9c:d7:a2:84:c7:28:2c:3c:43:42:49:ed:73:6c:18:5d:33:d6:
23:d1:ff:f8:85:d3:4f:3c:04:93:07:f6:86:90:d6:05:1a:eb:
18:24:26:cc:09:d4:8a:43:21:fd:d6:63:dc:2d:a6:d3:55:7f:
6f:3e:3b:7f:c6:93:c2:9e:14:63:05:0d:ca:f4:b0:c2:69:4e:
0e:09:9a:a3:b6:d4:1c:a9:37:fd:84:e6:6e:a9:ba:b1:79:41:
b8:b3:8c:28:60:30:f5:09:bb:9a:5c:b5:bd:10:b3:b6:ae:d8:
f2:79:e0:85:f4:fe:02:27:e8:63:af:7b:19:9a:64:72:3c:2d:
0c:43:12:3d:6b:19:8f:b5:4a:51:98:7f:5f:0e:94:9d:2d:73:
cb:1a:05:39:42:b3:e5:55:36:48:a5:0a:32:da:07:b5:e2:69:
ea:40:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-ams.rpki-client.org