Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LYaCIbdeDy9Fgr240baS7GoOMik.roa
File: LYaCIbdeDy9Fgr240baS7GoOMik.roa (raw, json)
Hash identifier: Nbgl5/cxwAd9qtEPOQhC63Gn7zHvjHxbssGjCgTlLIQ=
Subject key identifier: 2D:86:82:21:B7:5E:0F:2F:45:82:BD:B8:D1:B6:92:EC:6A:0E:32:29
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B9527EE
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LYaCIbdeDy9Fgr240baS7GoOMik.roa
Signing time: Wed 08 Jun 2022 08:18:03 +0000
ROA not before: Wed 08 Jun 2022 08:18:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197328
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194324462 (0xb9527ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 8 08:18:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d868221b75e0f2f4582bdb8d1b692ec6a0e3229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:86:23:36:ff:90:a0:d1:63:aa:b6:2b:56:
a5:fe:4e:61:1d:74:e7:c0:45:87:99:0a:97:0b:34:
f4:44:2b:85:a8:ef:0f:9d:79:fa:27:83:8d:f1:fb:
de:70:5a:19:d6:9a:99:29:54:6a:d2:a6:5c:18:b8:
f2:55:78:d3:a4:b4:86:20:f4:e2:ab:7a:56:21:77:
04:72:17:45:b1:8d:53:8f:92:dd:e2:a1:58:c8:13:
06:c6:5f:2d:1b:cc:9e:6b:03:71:9c:aa:50:e2:80:
20:77:6c:5e:1d:61:01:e7:4f:f0:09:23:8b:61:d0:
ca:f6:67:1e:f5:8d:4e:05:56:bc:e3:2b:aa:18:33:
f1:25:40:58:f5:e0:44:5b:82:90:d1:14:03:7e:dc:
92:83:f6:9f:24:c3:ca:a2:7c:af:57:ed:6c:8d:34:
c1:6b:ae:dd:5d:55:45:d8:1a:59:b0:5e:09:b4:45:
d3:6e:57:ba:23:1d:71:38:82:88:b3:ae:99:ef:cd:
bf:fe:96:4f:90:15:2a:91:13:96:00:65:ee:64:c4:
fd:2d:ad:12:4a:1d:0a:c8:71:fb:b9:d8:67:69:53:
b8:cf:f3:9d:e9:68:55:45:08:d8:8d:bd:79:26:10:
8a:7c:b5:0f:1f:4c:c0:26:17:bb:6b:0e:4d:c8:97:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:82:21:B7:5E:0F:2F:45:82:BD:B8:D1:B6:92:EC:6A:0E:32:29
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/LYaCIbdeDy9Fgr240baS7GoOMik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.216.0/21
Signature Algorithm: sha256WithRSAEncryption
74:5e:bc:18:84:41:f5:0e:38:de:b4:a7:79:10:25:df:02:63:
fd:50:ca:93:e8:06:28:52:74:02:41:3b:98:a9:ff:7a:51:ba:
8d:83:63:f7:ed:82:65:64:97:d4:b9:d5:45:51:21:76:70:ef:
93:da:4c:2d:4c:43:7a:1d:fb:5a:6e:f1:a1:29:4f:1d:0d:c0:
fd:5b:69:d7:0f:b6:68:c9:f5:68:64:54:f9:eb:65:9d:57:67:
73:4f:d1:77:d8:35:6c:f9:a8:00:a7:70:27:99:33:d9:4e:ee:
ae:f1:3c:83:4a:ea:da:cc:c8:a5:63:09:ad:6e:c8:c9:41:d0:
ea:bc:84:d4:7d:88:76:86:bd:7f:f5:d3:0c:1a:e1:34:91:f3:
04:76:57:7f:f8:5a:df:4e:76:a8:44:4b:cd:d1:8d:e6:8b:36:
b3:b2:e7:3e:b2:c3:cb:18:ae:b1:8d:73:49:95:05:57:2f:ef:
e1:6e:c6:a1:8a:fc:14:9d:b0:59:10:72:39:13:41:f6:ca:f6:
3a:6f:7a:e0:28:ff:1a:c2:30:7f:73:46:b5:c7:81:55:78:f2:
25:6a:48:e4:69:ae:6e:df:be:f4:d1:36:37:70:0f:ca:81:0e:
38:e6:6b:95:a8:8f:8f:a6:89:cb:a7:52:22:df:5c:2e:3d:30:
15:91:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org