Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5E5z20LO1d0GQrJR7kPjs_V9ivg.roa
File: 5E5z20LO1d0GQrJR7kPjs_V9ivg.roa (raw, json)
Hash identifier: deL7b6ZEUskqWN3HLqv2UOAoRuHHKxlg3eTakR+wUaQ=
Subject key identifier: E4:4E:73:DB:42:CE:D5:DD:06:42:B2:51:EE:43:E3:B3:F5:7D:8A:F8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B3684A0
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5E5z20LO1d0GQrJR7kPjs_V9ivg.roa
Signing time: Sat 07 May 2022 07:40:35 +0000
ROA not before: Sat 07 May 2022 07:40:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58202
IP address blocks: 62.60.232.0/22 maxlen: 24
62.60.240.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188122272 (0xb3684a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 7 07:40:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e44e73db42ced5dd0642b251ee43e3b3f57d8af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:86:68:e8:ad:e5:6a:0f:81:67:f5:62:69:
37:8f:3f:3b:57:f2:ca:58:ea:7c:f3:ac:ad:21:b6:
b4:fc:c2:88:fc:6e:49:df:e5:1f:47:d1:89:fb:c1:
81:b2:2d:b2:0d:23:75:f8:1c:75:76:06:21:d8:cc:
54:5d:3e:14:a9:10:82:e7:8c:92:92:1e:07:c7:99:
e6:e2:e6:63:ee:14:f4:4c:84:97:99:6b:c8:36:1b:
e4:0d:d2:0f:a7:c8:e2:8f:72:3b:23:56:7d:d0:9c:
79:7e:18:61:0d:87:88:eb:46:fe:78:2a:b2:b7:09:
66:6d:47:b4:3e:1a:ae:30:e6:98:38:71:23:14:9c:
ce:99:9f:85:cc:3f:a5:50:63:f4:26:0d:d3:03:19:
68:0b:31:e5:3b:2d:5a:2e:30:90:b6:93:95:8b:31:
9b:a7:ad:a5:69:9b:3f:68:96:25:77:df:5c:f8:ad:
8c:18:69:13:bf:2b:e1:78:3e:c3:60:a6:e0:db:04:
a5:65:98:46:5f:5a:9d:2e:71:4e:3e:8f:bd:f2:04:
1e:1a:6a:21:20:84:5a:41:63:ae:03:24:98:cb:17:
cb:b7:d1:5f:d4:1d:49:77:cb:32:f3:7f:71:9d:3b:
10:96:2f:d7:7a:ca:5a:28:e1:03:65:41:87:a7:fb:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4E:73:DB:42:CE:D5:DD:06:42:B2:51:EE:43:E3:B3:F5:7D:8A:F8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/5E5z20LO1d0GQrJR7kPjs_V9ivg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.232.0-62.60.247.255
62.60.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:cf:62:cb:d7:36:51:be:86:ab:3f:60:49:76:29:ff:03:50:
18:04:8a:65:61:93:b1:1f:e9:94:cd:18:25:11:55:39:3b:84:
80:4d:8a:f8:0e:26:89:df:80:ae:73:68:74:01:c5:e2:37:b9:
6c:97:cc:0a:b9:69:3d:97:ef:d9:b8:76:99:aa:da:77:04:02:
ff:79:67:f7:8c:5b:1b:76:53:d5:f0:95:98:a9:b3:5d:b3:34:
e7:34:ee:92:36:0a:02:df:fb:3e:15:1f:79:41:d7:36:60:2a:
06:f6:0e:13:56:71:53:25:a1:8e:dd:e8:76:69:82:3f:a8:68:
b5:d9:95:46:ba:c2:17:dc:ac:d7:06:ab:56:2e:9b:46:ca:0b:
d9:d5:12:b4:97:0f:41:8b:5d:f9:e6:a6:02:d8:cf:d1:16:c6:
b4:38:31:f1:e9:93:35:5e:1c:77:7f:b6:63:1e:70:15:b8:60:
a1:9c:43:79:94:8f:10:00:bd:2b:75:c0:7b:41:88:fd:06:f8:
16:a3:e4:a1:8a:75:ca:8c:aa:6e:20:92:15:36:63:94:7d:f1:
af:44:62:0e:c8:52:fc:42:f8:39:2f:3e:b9:a4:b2:d6:1b:bf:
43:40:5d:b1:ee:ca:42:23:c7:ce:47:a8:3b:f6:0a:1d:6b:98:
75:71:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org