Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WAwFBgt54oJaN3BZsKbRqkXhaqw.roa
File: WAwFBgt54oJaN3BZsKbRqkXhaqw.roa (raw, json)
Hash identifier: SEXbL/rcSYx0xXS+95E9dS9oHmMlxDcG2BdqzH/y2uc=
Subject key identifier: 58:0C:05:06:0B:79:E2:82:5A:37:70:59:B0:A6:D1:AA:45:E1:6A:AC
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 155F886D
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WAwFBgt54oJaN3BZsKbRqkXhaqw.roa
Signing time: Sat 01 Jan 2022 08:04:50 +0000
ROA not before: Sat 01 Jan 2022 08:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 62.100.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358582381 (0x155f886d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 08:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=580c05060b79e2825a377059b0a6d1aa45e16aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7a:49:42:80:13:1c:61:2d:ce:88:09:e0:58:
ca:c8:4f:72:76:f4:0c:22:68:ad:67:90:f8:fa:d6:
6c:b5:50:17:7b:1b:1c:8c:f0:7f:c2:1d:f1:49:81:
ac:37:27:a6:31:d3:1f:e6:80:dc:18:55:c1:d4:c1:
55:fa:d0:89:92:d2:3d:ff:ae:f7:13:ae:99:62:95:
08:28:47:04:95:0a:55:10:0b:c8:fb:5b:4c:8d:aa:
87:72:d5:5d:d7:31:25:de:a9:be:a3:62:58:fd:e7:
89:95:0a:79:e7:85:03:6c:26:44:a2:f6:a9:4e:7c:
a8:d5:42:de:e9:ff:18:1f:8f:aa:cd:32:a3:48:98:
b5:d0:cf:1e:71:2b:9a:20:39:75:9f:68:6d:e2:8d:
2d:9e:4d:86:88:32:90:a4:16:ae:bb:6e:e5:d5:2e:
e4:4e:81:fd:8f:bb:f3:8f:67:7f:25:56:69:ef:c6:
44:e0:30:a2:61:52:b3:d1:86:76:d4:ad:e7:39:69:
08:c5:34:07:28:33:e7:ca:6f:32:31:79:b6:6e:df:
d6:a9:39:7f:ea:33:62:5b:fd:fc:19:52:3c:3a:ec:
e6:f2:20:49:eb:71:8f:cf:b5:b9:73:8e:4f:f8:ac:
10:ca:cd:13:d4:95:df:d6:b6:f9:d8:f2:90:5d:0a:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0C:05:06:0B:79:E2:82:5A:37:70:59:B0:A6:D1:AA:45:E1:6A:AC
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WAwFBgt54oJaN3BZsKbRqkXhaqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.211.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7e:4a:67:48:93:65:ce:d5:41:94:ec:7f:71:cd:0e:55:3e:
2f:17:0a:60:32:0f:12:5f:44:c9:7e:b9:8e:32:44:ea:27:9d:
bf:55:d1:67:20:1c:ba:7f:73:87:2a:65:a3:70:1b:23:85:42:
46:56:46:68:89:48:7b:6e:65:09:e5:70:1b:11:1a:b8:29:ee:
ed:27:ed:13:48:8a:6a:29:2c:56:c7:bf:bf:0f:eb:17:92:7f:
9d:fa:97:91:c7:37:7c:fe:90:b5:a5:5e:19:f3:c3:6b:47:a1:
bc:32:02:6b:40:8d:5a:c5:ff:7d:b5:4a:d2:a5:09:fb:da:90:
a7:74:3b:5d:a2:d4:a5:24:32:70:2a:39:6d:73:d0:57:a1:c1:
55:7f:0c:a2:01:4d:99:93:68:05:ad:02:ca:64:75:2f:05:17:
22:0b:00:36:22:eb:c6:16:58:6b:eb:a4:7d:e6:86:96:51:ff:
4b:2b:94:aa:46:be:d9:b1:35:ba:69:5c:8f:b9:5b:96:de:1b:
22:a7:a4:19:0c:83:bd:b5:f9:85:c8:58:93:3b:ed:47:be:89:
b3:00:bf:1f:b6:c5:82:7d:f2:3e:5e:b6:4e:7c:2b:3d:e5:34:
da:08:5a:0c:d8:1d:68:3c:55:72:d7:03:94:e9:00:f0:86:0c:
9f:d5:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:00 2024 by rpki-client on console-ams.rpki-client.org