Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZMjHYwhQ2nwK23_mMme4SsyLZ5w.roa
File: ZMjHYwhQ2nwK23_mMme4SsyLZ5w.roa (raw, json)
Hash identifier: OJKNsr4PIPiitrCoHa73LGZzJu/2S+88d8jBtzJYZlM=
Subject key identifier: 64:C8:C7:63:08:50:DA:7C:0A:DB:7F:E6:32:67:B8:4A:CC:8B:67:9C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B9418D4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZMjHYwhQ2nwK23_mMme4SsyLZ5w.roa
Signing time: Wed 08 Jun 2022 08:15:02 +0000
ROA not before: Wed 08 Jun 2022 08:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61391
IP address blocks: 62.60.197.0/24 maxlen: 24
62.60.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194255060 (0xb9418d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 8 08:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64c8c7630850da7c0adb7fe63267b84acc8b679c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:90:13:2e:21:b7:90:bf:e0:0b:83:09:26:
53:72:71:3c:fa:a7:9b:c8:14:e9:12:b3:26:95:bb:
cd:fb:41:58:18:05:e6:19:c1:90:a7:c0:e1:a4:fb:
de:f2:69:71:78:89:d2:34:be:e8:7b:98:c8:93:5a:
01:93:09:90:37:6e:f2:e6:31:10:eb:a0:99:ae:a8:
49:51:80:46:cd:39:11:52:32:82:54:28:0a:83:c2:
3b:a3:f5:0a:7b:b8:bf:f0:d1:cf:08:d2:56:3d:c5:
47:0f:27:90:2a:30:e0:b7:b7:70:1a:7c:10:60:25:
09:ef:06:c2:1b:b4:21:f0:c8:35:2b:ab:7f:0f:3f:
50:bf:7d:40:0e:c0:70:49:c4:d4:53:f9:f5:c1:52:
6c:2e:e0:75:26:0b:bf:c9:ae:f3:7a:73:0c:ba:d1:
b5:92:b0:ba:47:ed:fc:9e:64:9c:f3:4e:66:16:af:
43:5e:c5:af:4c:b2:a8:e2:db:3a:8a:76:1b:af:7c:
a6:19:6c:3f:50:1c:d8:ac:97:59:70:75:a3:2d:16:
de:66:8a:c8:b2:2a:84:ac:52:e0:75:a6:86:7c:09:
b8:42:c3:b1:f1:aa:9c:b4:01:1f:0e:51:42:5e:bd:
02:ea:d7:39:7d:30:ff:36:82:f6:29:34:47:06:9b:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:C7:63:08:50:DA:7C:0A:DB:7F:E6:32:67:B8:4A:CC:8B:67:9C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ZMjHYwhQ2nwK23_mMme4SsyLZ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:be:6c:7c:ea:a4:b2:21:d1:36:d8:75:63:f2:7c:02:0c:39:
01:32:dc:30:5e:90:91:ba:2c:ff:d9:f4:71:21:b7:a5:c8:22:
66:ba:71:a6:7b:a9:53:be:be:c9:cf:6d:89:1b:3d:ed:68:ae:
e1:0e:68:47:db:35:cc:da:8b:2f:b1:d9:0f:ad:c3:80:aa:ea:
94:0c:ae:35:84:ef:cd:78:7a:c4:9c:3a:55:8e:2b:5c:f8:37:
49:d3:31:78:22:81:b0:2b:55:c2:2b:96:c0:c4:db:d2:a2:02:
e4:fb:7a:0f:a0:2b:13:c4:8c:08:5a:af:b0:4a:a2:92:4c:23:
e2:b4:79:a4:f3:03:71:44:bf:28:39:c9:08:fb:71:be:57:ef:
3f:05:0c:35:4a:b4:6c:44:53:d3:eb:b2:fa:57:07:ff:cd:46:
8c:ea:3f:25:71:8b:64:5e:a9:f1:5b:8d:fb:9f:74:84:85:36:
18:0e:cb:67:e7:6e:8c:ee:1e:71:10:46:78:a7:98:2e:dd:96:
1e:4d:10:27:1c:53:cc:d8:f4:b9:c1:1a:c0:3d:80:68:3a:43:
20:96:90:d8:f3:f8:b5:34:cc:12:e7:4a:b2:30:5f:25:9f:31:
2b:e4:a0:f5:a8:0b:a5:af:ed:fb:79:5a:1e:30:6a:4b:d1:dc:
69:78:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org