Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Zsm6xczs30LzrqKQLQQ5XWyzoQs.roa
File: Zsm6xczs30LzrqKQLQQ5XWyzoQs.roa (raw, json)
Hash identifier: yIVeBsBmIsKFbACBVRva4aymux7sG9KVt2WGuN7zcZI=
Subject key identifier: 66:C9:BA:C5:CC:EC:DF:42:F3:AE:A2:90:2D:04:39:5D:6C:B3:A1:0B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B908D05
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Zsm6xczs30LzrqKQLQQ5XWyzoQs.roa
Signing time: Wed 08 Jun 2022 07:32:02 +0000
ROA not before: Wed 08 Jun 2022 07:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.60.164.0/22 maxlen: 24
62.60.160.0/19 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194022661 (0xb908d05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 8 07:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66c9bac5ccecdf42f3aea2902d04395d6cb3a10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:41:45:35:94:9f:b6:b6:df:00:59:90:4e:
96:da:8d:6e:b8:bf:33:cc:b3:b2:26:94:94:55:10:
7e:86:67:3c:c0:5e:06:e8:4c:d4:52:84:64:68:5c:
b2:e6:da:da:6a:3c:d3:0f:36:bb:cf:56:35:5b:f0:
0a:c2:f4:f5:96:23:1d:be:5d:33:71:2c:fc:b5:58:
03:e3:26:91:87:72:bb:5f:d2:d1:7e:08:d4:3b:93:
06:b6:da:51:71:a2:1a:51:37:a3:7a:15:b3:a8:0c:
a9:bf:41:be:1e:fe:eb:91:86:b8:78:1e:86:4e:25:
f6:46:5c:13:26:1a:55:f0:ce:a3:e2:6b:24:6f:a2:
38:e7:f7:9c:a4:c4:7b:22:6d:fd:a3:eb:03:a3:8e:
22:5c:7d:12:78:1a:dc:b2:7d:2c:5b:01:c4:f1:11:
42:54:8d:19:d4:86:09:8e:59:2b:a4:a4:4c:60:12:
17:a5:03:ab:0c:df:e1:0f:1e:f2:46:b2:87:9f:76:
4a:a1:e9:44:92:01:22:bd:f1:23:3a:82:a4:b9:d6:
c3:d1:46:44:2f:1e:a0:93:b8:c9:b1:ee:36:06:77:
03:97:32:e0:ec:8a:49:49:b3:5d:70:c4:78:32:ae:
35:1b:21:52:55:3e:0d:78:38:36:39:e3:95:27:af:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:BA:C5:CC:EC:DF:42:F3:AE:A2:90:2D:04:39:5D:6C:B3:A1:0B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Zsm6xczs30LzrqKQLQQ5XWyzoQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.160.0/19
Signature Algorithm: sha256WithRSAEncryption
74:28:18:21:82:4d:50:9c:cc:40:a5:80:d2:c7:28:64:7d:4f:
89:58:a1:90:df:30:15:49:9b:4c:58:59:9e:cd:2b:44:b9:ee:
02:fb:5c:47:ac:ae:dd:07:7d:e2:8d:83:c6:4a:73:ed:cb:c5:
42:ff:de:f3:32:20:9f:26:21:16:f7:40:c0:b0:48:c8:a3:b8:
5e:17:69:00:e8:4f:38:c6:5b:c4:8f:5d:48:e8:25:70:c1:f6:
72:ee:8c:22:14:60:ca:85:61:42:7e:ee:1a:ff:5c:bc:af:33:
84:a3:d7:3c:e6:86:13:7f:2f:ae:7c:7c:85:31:37:c2:42:40:
42:78:8e:2e:1f:13:f8:40:f6:36:5c:7a:3b:b4:90:bc:0f:e4:
fc:56:0e:b1:da:76:85:2c:28:47:a9:49:e3:c1:0d:15:34:ad:
af:91:3c:ed:03:c0:c1:a9:08:2c:d6:49:c4:e5:fd:9a:ff:01:
73:40:9b:4e:62:bd:5e:16:ab:9e:e5:fe:fa:6e:35:53:bc:48:
28:6f:91:60:ce:b8:5e:bd:b4:8c:51:b7:3e:d8:84:02:96:f5:
b3:02:84:f9:8e:f8:93:17:35:6c:a4:dd:90:f3:73:d7:a8:36:
04:32:b5:67:e3:9f:de:b2:3a:9d:36:4f:b8:1b:87:b3:46:cc:
85:b2:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org