Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TBl8CQUTaNh-uKxWC1p2_Os-lbk.roa
File: TBl8CQUTaNh-uKxWC1p2_Os-lbk.roa (raw, json)
Hash identifier: kDByWWf/o1e46VihmAng2lJ1nVfB1Xlgnxsvh2xpHmk=
Subject key identifier: 4C:19:7C:09:05:13:68:D8:7E:B8:AC:56:0B:5A:76:FC:EB:3E:95:B9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B8A7656
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TBl8CQUTaNh-uKxWC1p2_Os-lbk.roa
Signing time: Tue 07 Jun 2022 10:43:02 +0000
ROA not before: Tue 07 Jun 2022 10:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.168.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193623638 (0xb8a7656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 7 10:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c197c09051368d87eb8ac560b5a76fceb3e95b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:22:a1:47:15:b6:e7:2c:98:94:c2:c1:26:
ce:7e:ae:32:00:76:05:f7:cd:16:2b:ee:4d:33:43:
9d:62:47:49:4f:dd:72:ac:47:f4:58:83:18:98:aa:
20:1d:65:24:5f:7c:53:05:ec:96:e1:af:5d:69:f3:
8d:8b:13:64:0d:91:86:90:cb:03:22:35:1c:94:f2:
6d:32:5d:d8:be:01:d1:50:b0:ae:2a:8a:0f:8b:12:
21:3b:33:1d:8e:00:3b:ee:24:93:6b:e1:cc:9b:5a:
c5:24:15:b9:e1:ed:08:b5:cb:ca:d7:ff:94:24:de:
75:b3:10:04:82:f0:c4:b1:67:f1:7a:de:d6:92:a2:
85:66:6f:8c:3a:26:ab:b1:d3:31:b0:09:eb:47:57:
f4:eb:1c:69:49:fc:a2:d6:82:6b:d8:4d:be:fb:6b:
28:0a:8a:8d:91:fc:85:29:05:0e:fb:c8:f6:73:51:
a1:bb:d7:d1:5e:7a:9f:47:4f:9b:b4:a6:cc:b4:80:
ad:7f:8b:e4:9c:9c:9d:23:d4:1b:dd:10:1c:49:27:
e3:70:1a:ff:72:2b:67:0a:48:69:9f:08:25:25:02:
db:6b:f6:93:4f:f9:fa:7e:2d:14:4d:6c:e8:4d:d0:
94:e2:f5:b6:98:5d:f1:a3:4c:31:dd:23:ef:70:d5:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:7C:09:05:13:68:D8:7E:B8:AC:56:0B:5A:76:FC:EB:3E:95:B9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/TBl8CQUTaNh-uKxWC1p2_Os-lbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.164.0-62.60.179.255
Signature Algorithm: sha256WithRSAEncryption
3d:9b:70:cc:e9:f3:47:72:35:d3:c4:e4:9a:db:4e:ab:77:f2:
81:59:1b:22:c9:93:46:8f:14:9e:7d:e4:59:e3:e5:1d:fb:d1:
22:32:dd:76:07:5d:b4:14:7d:c1:cd:ff:3b:75:5f:8c:bd:33:
65:c4:2a:02:b5:c2:f7:a0:a7:e4:3e:89:53:e8:fe:d1:88:5b:
95:12:27:8b:bc:1f:bf:a3:cb:67:ab:ba:df:bc:3e:f3:ca:f1:
30:e2:3d:3e:61:2d:f7:1b:03:f7:7e:90:33:c3:fb:d0:e0:d2:
2d:71:fa:b9:c8:8c:97:92:40:4c:3c:ab:47:8e:ba:7c:b1:69:
da:10:b4:2a:33:6f:72:ae:5a:06:58:12:79:19:11:39:0d:20:
8f:e4:94:ee:f6:43:0b:78:ff:00:77:9d:64:b4:76:dd:88:71:
35:0b:03:e1:df:e9:45:10:e0:03:ce:c8:a5:ec:53:d1:6c:20:
d4:57:39:23:c9:30:6f:97:ad:a4:d8:b4:7b:49:23:84:c8:fa:
30:b1:38:36:a6:c0:97:86:2d:76:39:fd:34:47:13:07:09:5f:
00:bf:2b:bd:a2:10:9b:de:65:45:d2:a6:d3:b7:bd:34:26:1c:
3c:34:64:73:11:cb:03:7a:ca:34:6c:73:cb:33:da:d3:63:ba:
cf:dd:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org