Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ie4W-gqPkq0e-bm1HHWtSM2mDCs.roa
File: Ie4W-gqPkq0e-bm1HHWtSM2mDCs.roa (raw, json)
Hash identifier: sHKk4WK7dFQkw2QddaPeZ94ZXSgMixC8aWxH/pVLcgQ=
Subject key identifier: 21:EE:16:FA:0A:8F:92:AD:1E:F9:B9:B5:1C:75:AD:48:CD:A6:0C:2B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01840E9E649BF9807DBE5C1B92967E3A714C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ie4W-gqPkq0e-bm1HHWtSM2mDCs.roa
Signing time: Tue 25 Oct 2022 10:09:32 +0000
ROA not before: Tue 25 Oct 2022 10:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
62.60.128.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
62.60.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:9e:64:9b:f9:80:7d:be:5c:1b:92:96:7e:3a:71:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 25 10:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21ee16fa0a8f92ad1ef9b9b51c75ad48cda60c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:8d:df:bf:8f:46:8e:92:72:df:60:dd:ba:
62:0e:46:90:70:81:d0:1f:b9:40:be:9c:bd:8c:05:
b2:c6:94:05:0b:6f:be:9c:ad:8f:82:b5:15:33:10:
f7:b5:da:4f:53:c7:d7:4b:f8:01:24:98:cd:95:21:
b7:63:cb:d7:d6:fa:e8:33:d1:1f:26:2b:84:b7:ab:
7a:fd:55:cf:d8:54:43:97:0d:8b:d4:71:06:3c:d2:
e1:19:a3:5e:6d:83:ec:2a:f5:b3:f0:36:ab:50:a8:
18:83:4e:50:45:59:de:38:03:6c:c5:9e:de:22:93:
17:3f:f0:c1:cd:6b:75:d1:36:f7:45:d1:a8:07:ac:
06:80:e1:91:10:b9:0a:10:e3:8e:1e:0c:74:44:1a:
44:bc:fa:2d:17:43:e2:19:34:ec:a8:60:58:41:ac:
99:7c:c0:4c:ba:5e:27:c4:24:09:22:4d:d0:e2:b5:
55:05:c1:55:1d:d7:0d:77:48:73:cd:2e:07:ae:0c:
26:70:78:fe:24:65:39:9c:2e:74:a9:57:60:9e:f0:
ac:07:58:8e:24:f3:e8:21:bb:4d:72:b0:b2:32:76:
5d:70:7b:82:05:6d:3d:bf:6e:40:f9:c4:df:03:ef:
47:3b:52:5f:57:b4:05:a6:b9:d3:f4:71:38:dd:de:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:16:FA:0A:8F:92:AD:1E:F9:B9:B5:1C:75:AD:48:CD:A6:0C:2B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ie4W-gqPkq0e-bm1HHWtSM2mDCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/22
62.60.152.0/22
62.60.216.0/22
213.176.64.0/22
213.176.88.0/22
Signature Algorithm: sha256WithRSAEncryption
92:3d:39:77:0d:47:fa:66:56:6f:fc:58:20:ac:e5:30:c5:a0:
b3:15:2e:b7:98:c6:31:5a:3c:c7:61:b3:7c:5e:89:b6:9a:aa:
86:bb:27:e4:2a:d5:15:a5:ef:4a:57:8f:18:75:bf:8c:59:df:
a5:8d:44:23:87:69:83:a3:ad:c7:f6:6f:3b:37:27:d7:a2:ed:
dc:36:89:bd:28:85:7c:b5:26:14:a3:40:08:93:97:72:58:be:
cb:d4:9c:80:13:0a:89:23:93:c3:85:1a:ee:05:39:53:1b:de:
72:2c:8c:c5:38:d8:f6:4e:6b:62:89:39:68:45:d3:db:f2:3d:
b1:be:33:4f:e1:fa:15:f2:c0:e6:32:8b:dd:3f:64:a0:00:a9:
d3:b1:84:73:ff:d5:10:78:cd:7b:36:ae:7b:af:96:0e:f4:7c:
07:e2:ba:1d:cb:9d:23:dd:2d:4d:02:8d:63:1b:96:ab:38:2c:
81:d0:e7:4e:a9:5f:84:34:8c:ca:24:4f:ce:d9:16:3a:e9:0e:
0f:5b:6c:66:27:b5:94:17:bf:02:44:11:32:60:35:ca:ad:3d:
3b:25:6f:ff:04:fe:58:d7:f7:fc:f4:97:0d:17:e2:68:d1:72:
94:5c:77:87:d0:95:50:51:95:a6:5d:d1:bd:69:8d:0b:69:50:
99:52:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org