Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOU6XNFOxI7vNKOfUDIls_92B4A.roa
File: FOU6XNFOxI7vNKOfUDIls_92B4A.roa (raw, json)
Hash identifier: 2ZuYVzaX5JxY8oFAJwib38F8O7dD7yfu+inwsHwOA0s=
Subject key identifier: 14:E5:3A:5C:D1:4E:C4:8E:EF:34:A3:9F:50:32:25:B3:FF:76:07:80
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B643D3C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOU6XNFOxI7vNKOfUDIls_92B4A.roa
Signing time: Mon 23 May 2022 11:30:30 +0000
ROA not before: Mon 23 May 2022 11:30:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58202
IP address blocks: 62.60.232.0/22 maxlen: 24
62.60.240.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
62.60.152.0/21 maxlen: 24
62.60.146.0/23 maxlen: 24
213.176.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191118652 (0xb643d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 23 11:30:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14e53a5cd14ec48eef34a39f503225b3ff760780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:63:2f:30:28:ad:d3:9e:77:e4:41:5d:25:
7c:c7:46:be:db:0b:b7:17:7d:cf:56:bd:43:6a:43:
53:17:8f:ee:9a:5f:6e:67:d5:18:e4:4c:6d:63:31:
5a:26:f5:3a:e2:e6:ea:98:f2:1b:2f:4b:aa:a3:88:
0f:f7:75:09:90:7e:35:d8:4f:cf:a1:cb:89:69:92:
68:3c:93:3a:fc:c6:fa:68:cd:58:6a:3d:83:17:ac:
5d:13:2f:59:dc:1d:a4:91:4c:13:aa:9f:bc:8f:ca:
65:8b:cd:0b:40:f9:b2:db:35:e6:a3:14:ad:9d:b6:
35:ff:01:7f:f8:0d:39:ac:79:75:cd:ee:7c:86:56:
f5:2f:a7:49:2b:0f:39:d1:ea:4f:bb:67:e1:8d:7b:
d7:0f:b3:17:56:6b:5c:1d:0b:d8:3f:95:cf:be:a9:
b6:40:fe:54:f8:4d:ba:dd:e5:02:8a:e1:22:fc:c2:
6f:76:20:03:1a:61:41:e1:e4:e0:19:2d:15:3e:e4:
4b:e6:f4:6f:52:e6:56:4d:7f:46:78:e6:e7:bb:2a:
08:f4:dd:6a:25:12:fd:62:ff:43:23:f1:3c:77:46:
cd:2b:25:9b:38:1a:ce:6e:73:36:15:6c:37:0a:4b:
be:25:57:4b:20:91:32:9a:10:94:49:68:a3:4e:3b:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:3A:5C:D1:4E:C4:8E:EF:34:A3:9F:50:32:25:B3:FF:76:07:80
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FOU6XNFOxI7vNKOfUDIls_92B4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0-62.60.159.255
62.60.232.0-62.60.247.255
62.60.252.0/22
213.176.24.0/21
Signature Algorithm: sha256WithRSAEncryption
92:a7:88:49:44:ac:c5:b0:1d:45:ab:9e:c0:3f:e2:41:68:d7:
44:b3:26:5a:7b:1c:a0:fb:23:a1:dd:6d:85:9c:e5:92:f0:65:
58:e7:2d:c7:aa:66:bb:57:0c:a7:de:cc:c5:72:56:5c:b9:9d:
11:8b:8a:58:72:7b:34:91:1e:62:f6:48:cb:45:ce:1f:6d:1a:
6d:bd:a8:12:af:fd:3f:cb:18:66:4f:01:c6:86:73:b5:9c:67:
67:a7:cc:f4:b2:0a:d5:91:9b:52:c5:31:9a:61:bf:a9:de:80:
5e:86:56:47:40:a6:83:86:53:5b:0a:0c:10:bd:1e:f3:c0:b6:
7b:a0:9c:d2:27:c0:47:b4:32:01:82:b2:6e:72:4e:c3:bf:88:
51:e5:4e:6c:3f:77:97:dd:50:19:a7:be:83:31:4c:91:25:34:
b0:7a:3f:5b:f4:e3:7f:7e:b2:1f:f2:70:96:8c:d9:0c:77:f4:
a0:e6:ef:99:de:90:94:9e:91:77:5e:80:3d:75:73:13:91:a2:
58:e8:b9:45:b5:7c:d3:b1:1a:59:9d:2b:a2:f2:69:87:b7:bc:
d0:74:15:e2:f5:f3:67:ca:8d:c7:56:2f:92:05:eb:0e:8b:38:
8f:5c:9e:1f:1f:34:75:58:0b:65:aa:94:a0:86:14:cf:4e:38:
75:e8:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org