Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1c2-NE8QjhC88EwAYGbC86vPxmk.roa
File: 1c2-NE8QjhC88EwAYGbC86vPxmk.roa (raw, json)
Hash identifier: mB+Rq5iDUPn5JzOU9P4hp4r0REkwZhyfG4rtW0VNRW8=
Subject key identifier: D5:CD:BE:34:4F:10:8E:10:BC:F0:4C:00:60:66:C2:F3:AB:CF:C6:69
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0AB18E62
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1c2-NE8QjhC88EwAYGbC86vPxmk.roa
Signing time: Mon 14 Mar 2022 08:43:54 +0000
ROA not before: Mon 14 Mar 2022 08:43:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35372
IP address blocks: 62.60.143.0/24 maxlen: 24
62.60.144.0/24 maxlen: 24
62.60.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179408482 (0xab18e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 14 08:43:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5cdbe344f108e10bcf04c006066c2f3abcfc669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:5e:63:9b:af:7b:05:51:b5:a6:e7:c7:62:
cb:62:39:88:96:46:97:a6:ae:4b:79:80:2d:1f:3d:
f9:54:f4:b4:59:f4:be:1f:ff:0f:a4:ff:14:68:67:
22:3b:0c:04:f5:2a:c2:16:7e:4b:e8:6b:35:4d:f8:
0b:d1:88:4f:3f:bf:8e:81:89:79:08:15:21:86:77:
c6:05:4d:66:26:37:4d:2a:cf:0b:39:86:4c:15:b9:
41:43:8c:48:1a:39:e3:37:28:e3:9a:d7:79:08:02:
88:c2:51:31:4c:0e:89:0c:fc:7c:d1:bf:1e:b2:54:
bc:80:55:e6:c4:2e:92:93:d9:a7:9c:06:f0:73:5c:
f8:d5:d8:50:a0:b4:2e:bb:7f:ff:00:01:7b:d8:09:
95:07:99:6a:72:55:89:03:9c:be:25:b6:14:93:de:
1a:37:9b:94:a6:1c:30:2b:cd:7c:97:d2:8f:b9:a0:
8e:3e:1a:af:5f:c9:05:c5:8c:3a:93:8b:6a:4a:03:
5f:23:e7:b5:e9:88:09:2e:e6:fe:d2:dc:02:66:03:
bb:8c:35:c0:9e:91:0d:0b:98:81:17:f6:b3:3e:09:
6d:35:6f:f9:0f:d2:d4:be:7f:52:1a:71:7a:67:7f:
11:15:72:b2:61:03:ab:41:10:b0:e6:76:04:b0:6e:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CD:BE:34:4F:10:8E:10:BC:F0:4C:00:60:66:C2:F3:AB:CF:C6:69
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/1c2-NE8QjhC88EwAYGbC86vPxmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.143.0-62.60.144.255
62.60.160.0/22
Signature Algorithm: sha256WithRSAEncryption
46:0a:74:a0:53:02:b3:b7:8f:65:84:ca:9d:41:ba:dd:a4:a7:
81:c9:02:46:a8:bd:10:be:56:98:25:e3:60:12:da:0b:9e:4c:
2e:51:d0:4c:96:90:78:a5:87:22:31:6b:52:ca:80:dd:61:02:
11:75:24:bf:6a:e1:46:c7:db:c5:70:54:2f:ea:d4:79:e2:dd:
72:96:32:6b:42:cc:26:7d:30:61:dc:c4:5f:20:77:7e:26:d4:
13:6a:13:b9:4d:cf:37:71:ab:f4:06:9a:45:e2:49:d3:6a:ea:
fc:22:5c:40:d6:c4:33:d1:4e:98:bd:53:90:e0:39:ce:89:56:
5d:a7:ca:69:09:c8:56:7d:25:bc:ee:1c:cf:16:4d:97:12:a4:
d3:53:ae:a3:87:20:14:b1:e2:a6:d2:59:3b:42:a6:e5:65:ee:
64:00:b0:56:9c:17:e2:da:57:42:19:fe:4e:50:1d:ff:a4:86:
09:ee:96:56:a3:1d:05:9e:06:74:38:02:f4:4e:03:c0:9c:93:
e0:f6:78:80:40:ef:c7:69:ca:02:94:6b:0a:d2:2b:23:7a:5d:
40:b8:ab:7c:e1:17:1c:ad:64:cc:86:a9:26:94:f6:35:84:ad:
cd:8d:35:9e:39:4f:b1:87:98:88:e6:f1:1d:09:9f:bd:a0:4f:
89:a3:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:28 2024 by rpki-client on console-ams.rpki-client.org