Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RvZxfu4nCUvqrNCVypng8jV_P3g.roa
File: RvZxfu4nCUvqrNCVypng8jV_P3g.roa (raw, json)
Hash identifier: pRY1tspTAikWdZ+4HYOeDPTErVIlWcOspbZ3MpjSUv4=
Subject key identifier: 46:F6:71:7E:EE:27:09:4B:EA:AC:D0:95:CA:99:E0:F2:35:7F:3F:78
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0181E21A53A12E53F724FFFBF0C9BDEAA3F4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RvZxfu4nCUvqrNCVypng8jV_P3g.roa
Signing time: Sat 09 Jul 2022 08:36:24 +0000
ROA not before: Sat 09 Jul 2022 08:36:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16200
IP address blocks: 62.60.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e2:1a:53:a1:2e:53:f7:24:ff:fb:f0:c9:bd:ea:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 9 08:36:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46f6717eee27094beaacd095ca99e0f2357f3f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:58:71:12:84:07:39:63:27:3f:9c:ce:6d:
46:8b:14:f4:b3:82:dc:ca:32:a2:0a:72:64:b4:ec:
c4:f1:11:76:40:ac:19:2d:54:91:59:63:bf:8c:86:
05:d0:51:5a:5b:24:79:5c:7b:e3:9f:4b:84:14:ef:
73:92:4d:1d:6c:1d:ad:c0:c3:a3:6a:91:69:82:96:
03:f7:6c:24:7e:68:af:ac:8a:2f:ff:ce:d1:30:22:
b1:a0:6e:e5:05:bd:f5:aa:85:2d:40:35:a0:6c:a9:
07:07:ef:b3:6b:ce:8e:ae:b2:fa:ca:ca:d0:88:21:
e5:fd:31:0b:75:f8:ed:ef:48:9d:74:68:34:21:da:
84:de:58:80:cd:09:11:dc:1f:f0:86:f2:84:06:c4:
3a:da:df:9d:2e:ba:e4:fc:40:71:25:8c:28:88:8c:
c6:d6:6c:81:fe:40:1c:c2:eb:d1:0a:4f:98:e5:72:
1e:65:2b:93:69:0a:a3:19:fe:5f:1d:1f:e4:60:60:
81:d6:ad:48:d3:dc:e7:24:24:53:29:b5:c3:a5:62:
81:17:e9:f5:12:1a:57:9b:9b:f6:ae:44:ae:d2:04:
21:90:d7:51:a5:91:06:8a:35:93:32:2d:01:71:86:
a1:89:39:45:fb:63:aa:80:45:1e:6f:3e:5a:6f:02:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F6:71:7E:EE:27:09:4B:EA:AC:D0:95:CA:99:E0:F2:35:7F:3F:78
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RvZxfu4nCUvqrNCVypng8jV_P3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:26:3c:17:bf:ff:c6:53:e3:10:90:92:b6:b2:7e:07:ac:63:
83:b6:7e:1d:6d:94:9e:ed:47:38:d6:ce:28:14:c7:60:71:b1:
cd:f8:b1:a9:67:81:a7:f9:e1:3c:a6:f7:16:b8:b3:b1:44:94:
27:a8:f8:9c:c8:c4:6e:6d:e9:e5:25:59:e5:f2:a4:ca:cb:f6:
bd:5b:b3:3b:7c:e4:55:fa:35:bb:c7:dc:b7:6b:13:4d:c8:5f:
a7:da:77:e7:5c:a8:c0:d6:f6:a0:20:c8:91:7f:27:7e:c0:e4:
ff:74:55:7d:30:01:39:e7:73:9b:08:8a:d5:ec:73:e1:b5:de:
47:99:41:2b:aa:68:bc:e3:bc:4d:be:81:4d:a9:bb:12:72:33:
e1:5b:9e:40:11:52:f2:57:87:0d:67:c0:50:da:24:30:af:ac:
da:a4:9f:15:d1:f1:fb:13:42:86:e9:ab:9f:bd:87:fa:7a:ae:
37:7e:da:b2:e4:de:9c:ae:1a:5d:85:02:96:9f:68:fe:f8:b4:
35:4c:13:3b:7e:82:d4:6b:d4:c7:6b:19:13:30:a0:61:2b:59:
17:dd:40:85:91:1d:a7:31:35:de:89:cb:27:03:ee:84:d1:0c:
66:df:42:ad:49:9e:76:5b:3b:a9:23:a8:ee:a4:60:9a:f7:dd:
cd:a2:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org