Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AmIKiZhJ-w-19y5PWrC4ABmT07M.roa
File: AmIKiZhJ-w-19y5PWrC4ABmT07M.roa (raw, json)
Hash identifier: ccGTNTMbmuV5Z6Rm6VSI87H2WhFAAqSvCYBInI+zh9M=
Subject key identifier: 02:62:0A:89:98:49:FB:0F:B5:F7:2E:4F:5A:B0:B8:00:19:93:D3:B3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01839D7B04E6132D82D489B8276DD0D23733
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AmIKiZhJ-w-19y5PWrC4ABmT07M.roa
Signing time: Mon 03 Oct 2022 10:53:48 +0000
ROA not before: Mon 03 Oct 2022 10:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58202
IP address blocks: 62.60.156.0/22 maxlen: 22
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:7b:04:e6:13:2d:82:d4:89:b8:27:6d:d0:d2:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 3 10:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02620a899849fb0fb5f72e4f5ab0b8001993d3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:0b:ee:91:22:05:16:8c:56:41:49:72:75:
3d:3a:01:9c:a9:a9:b5:8b:43:be:48:00:bb:7f:b0:
a7:99:06:85:a3:5c:7f:d1:f1:81:0c:91:c0:29:e8:
d7:8e:d8:4e:ea:b3:bd:7d:e9:04:dd:b9:12:43:57:
a9:3c:1b:d6:e0:f2:70:24:25:94:61:71:56:39:e2:
8c:13:f3:d5:90:22:16:de:66:60:4c:b2:f4:4d:20:
01:98:58:33:c5:ce:fd:ba:12:13:ae:31:dd:b2:cd:
e8:76:2b:96:af:8c:18:5a:2c:5a:ec:c1:61:da:7d:
6a:45:16:5d:4a:3c:77:39:09:d7:1a:12:c5:75:33:
a0:e8:91:6b:55:e8:1e:60:a0:d9:1b:e2:9a:3c:35:
f8:72:ef:59:ca:b7:65:90:ea:5a:f1:7f:57:11:a4:
39:9a:18:a0:55:08:a1:8d:89:82:c4:13:c3:3f:90:
b1:ed:77:9d:50:5d:ef:db:1b:79:5e:fa:2c:53:64:
87:76:12:ec:46:86:3d:f3:2e:d2:b8:36:3d:0d:2f:
6e:4f:34:45:40:ef:f3:c3:8b:62:19:47:ba:0a:8c:
dc:23:3a:a4:69:47:b6:67:74:de:8c:7d:78:b5:a1:
e8:1e:fe:4d:c6:ab:52:63:99:22:95:84:76:9b:d7:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:62:0A:89:98:49:FB:0F:B5:F7:2E:4F:5A:B0:B8:00:19:93:D3:B3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AmIKiZhJ-w-19y5PWrC4ABmT07M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.156.0/22
62.60.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:86:3f:69:91:f5:a0:98:b3:b5:a8:72:d3:6a:de:79:b4:32:
3b:81:51:01:57:e3:24:e6:97:db:5e:7a:88:02:58:dc:36:03:
7b:bd:4c:ee:56:9e:74:df:a7:58:99:ee:31:04:f2:21:e8:f7:
66:35:f4:8a:17:24:bb:d2:af:e6:14:e3:55:32:b4:bf:2a:55:
11:6d:3d:ea:19:c7:d3:d7:f2:42:54:8b:d9:15:94:a9:19:f7:
7e:4c:f0:48:c4:71:da:68:cc:1a:21:ef:fb:78:57:ee:ae:9a:
33:04:3f:17:2f:3c:c5:43:16:d6:39:ee:0b:62:ea:a5:28:46:
6c:82:89:49:3b:88:6a:7d:4d:25:8a:ba:b8:3b:d0:4d:e3:f7:
0a:98:b5:a5:15:25:7c:cf:1f:5f:23:52:9f:ba:49:ca:c3:6c:
c9:39:f9:af:bd:cf:a1:6b:64:f5:88:e6:d5:2b:5b:de:a7:9c:
f7:f3:27:06:c3:eb:c3:e4:24:91:38:4a:94:11:1f:73:a0:c8:
be:37:f4:99:ac:d2:d1:c4:2b:c6:1c:9f:d3:1e:61:3b:7c:4f:
87:8c:43:3e:03:b1:05:dd:14:ec:90:f4:32:16:7b:ed:c2:fd:
01:93:ec:d9:77:be:86:7d:67:14:08:d9:6f:b3:01:35:73:24:
f6:c2:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org