Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FYxGa96EQDhO9SyHFgli2VinXBQ.roa
File: FYxGa96EQDhO9SyHFgli2VinXBQ.roa (raw, json)
Hash identifier: PzoKA5LDp06Ni+9XR0rkJAvArG/X+00VX3H9GAolb1A=
Subject key identifier: 15:8C:46:6B:DE:84:40:38:4E:F5:2C:87:16:09:62:D9:58:A7:5C:14
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B3A70D6
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FYxGa96EQDhO9SyHFgli2VinXBQ.roa
Signing time: Mon 09 May 2022 08:25:42 +0000
ROA not before: Mon 09 May 2022 08:25:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197328
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.224.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188379350 (0xb3a70d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 9 08:25:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=158c466bde8440384ef52c87160962d958a75c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:de:0f:95:a6:e8:83:eb:b5:f0:1c:56:c9:
2f:2b:a2:9a:d6:d8:91:31:51:51:d5:4b:22:f3:d0:
2a:f5:46:28:fd:63:1f:a9:6d:53:f0:99:cf:af:51:
55:7f:44:95:1a:15:a2:ba:09:7c:5b:51:ac:96:75:
4b:b2:b6:01:15:df:7d:e1:26:3d:43:ac:64:ef:34:
fb:26:8e:e3:9a:4f:ae:fb:cf:07:6e:6d:09:47:75:
8a:b3:e6:61:ad:f6:bb:83:c2:51:44:f0:b4:0b:17:
fe:16:90:3c:de:f3:77:e1:9b:fa:a5:69:a8:a3:cc:
79:a2:e7:ce:78:0f:41:9e:14:85:f7:b9:af:60:9b:
16:ec:47:0e:d7:af:56:c1:f1:cb:14:f1:fb:fd:c0:
2d:04:99:f2:b3:75:b4:91:eb:b8:51:67:26:d8:e6:
7e:10:d0:e7:f0:6c:7b:1f:0e:a4:3d:34:a4:f6:7f:
de:78:d6:62:2b:af:7e:d2:cb:58:0b:a1:b0:b7:2e:
98:7d:84:4b:27:70:c6:74:4a:97:25:b3:3b:a4:63:
83:99:5e:69:82:59:49:4d:05:66:e9:08:f0:59:9a:
34:3d:59:9f:29:df:c6:e6:d6:3d:fe:5a:cb:5b:1d:
b1:c5:36:d6:b9:2e:77:62:f0:b2:b0:f5:80:56:5c:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:46:6B:DE:84:40:38:4E:F5:2C:87:16:09:62:D9:58:A7:5C:14
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/FYxGa96EQDhO9SyHFgli2VinXBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.208.0-62.60.231.255
62.60.248.0/22
Signature Algorithm: sha256WithRSAEncryption
55:d8:29:3a:9c:99:3e:f2:63:ed:84:40:40:d9:76:4b:aa:f7:
fc:ed:01:da:bf:f1:99:a0:4d:79:92:be:08:62:d4:cb:d4:c7:
ba:e3:20:ff:aa:41:f5:f1:45:9e:75:aa:d9:1f:56:6f:79:5e:
8a:8f:0f:16:fc:97:0f:3a:95:02:7b:ae:7e:c6:60:55:37:c7:
16:d0:60:73:47:9d:c9:91:5a:f7:cb:a0:d4:56:60:e1:de:da:
fe:e1:d7:02:ac:b4:5e:49:d7:ad:a1:7d:e6:29:b0:77:48:ef:
a2:84:d9:9a:89:2f:8b:d2:bd:5a:25:5b:9a:f1:f2:65:3b:6e:
18:63:25:f7:f0:ff:1d:66:96:5e:1c:c4:11:14:4b:8a:6e:4e:
a5:3f:f1:18:24:a6:85:ba:57:d2:78:80:b7:22:c6:2b:b1:4f:
41:3b:2b:32:6c:91:52:d2:76:9f:bc:a1:da:06:9d:d4:e1:ec:
16:66:bf:40:c7:c5:8e:2e:76:dc:44:89:55:fa:9e:1e:a8:b7:
22:8a:42:6c:69:33:40:5f:e4:8d:95:f2:5c:e5:bc:4b:4e:6b:
b7:a3:6f:61:c8:16:b8:b3:f7:45:59:bf:df:43:ec:c6:3b:17:
4a:d5:08:a6:8a:15:47:7e:04:29:a5:ae:79:a5:32:01:3b:0f:
7c:f1:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org