Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cRi4mdPDXtep1T9vCTMzChEUPW0.roa
File: cRi4mdPDXtep1T9vCTMzChEUPW0.roa (raw, json)
Hash identifier: ok6iUABiw5ag6uhT4bFrDrsEiScfbM6vd032WnKQuY4=
Subject key identifier: 71:18:B8:99:D3:C3:5E:D7:A9:D5:3F:6F:09:33:33:0A:11:14:3D:6D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B0DA9F2
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cRi4mdPDXtep1T9vCTMzChEUPW0.roa
Signing time: Thu 21 Apr 2022 13:13:36 +0000
ROA not before: Thu 21 Apr 2022 13:13:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58202
IP address blocks: 62.60.224.0/19 maxlen: 24
62.60.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185444850 (0xb0da9f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 21 13:13:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7118b899d3c35ed7a9d53f6f0933330a11143d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:2b:ca:83:aa:c3:a8:af:59:a8:12:a3:01:
38:a6:65:d8:1d:b3:a8:eb:58:c0:b7:ea:27:05:f6:
d7:74:7f:6c:7a:de:c7:b0:93:0a:64:c4:c3:2e:9a:
38:ce:c3:ff:da:ba:ba:be:73:9f:45:68:29:18:c1:
9f:40:bd:c0:28:0d:76:3c:ee:6f:6e:9c:2e:c2:a6:
a5:d5:70:5a:23:b9:88:bf:2e:1b:ed:ea:f0:82:90:
74:e8:2f:a8:3a:3f:90:4b:ba:d5:08:02:be:bf:30:
70:5b:82:ec:20:dd:55:e6:46:69:d6:07:43:6c:85:
c1:7e:59:00:ee:bb:37:84:ba:a3:8b:6c:bb:55:c4:
f1:9f:11:1d:01:cb:4b:d8:77:dd:e9:bc:3d:1f:90:
19:65:46:85:11:2d:f3:15:97:a4:dc:42:fe:ec:a8:
45:f5:56:7a:eb:ff:37:e5:5c:b9:08:14:ff:f2:cd:
9c:63:d9:91:c8:2a:ca:d6:65:a9:44:c8:81:ef:c4:
6b:ff:82:b5:3b:48:93:73:18:d7:82:d2:0a:96:bf:
bc:d6:4b:85:38:b8:d8:a6:ce:c7:1b:3e:0c:e1:78:
cb:34:66:9a:60:62:c1:a6:2e:ef:9a:3a:44:57:ac:
cf:8d:c0:69:29:d7:dc:a1:be:5e:b1:53:cc:d5:0c:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:18:B8:99:D3:C3:5E:D7:A9:D5:3F:6F:09:33:33:0A:11:14:3D:6D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cRi4mdPDXtep1T9vCTMzChEUPW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.208.0-62.60.255.255
Signature Algorithm: sha256WithRSAEncryption
cd:49:86:eb:18:d8:99:47:a4:ee:68:30:fa:73:91:28:a4:3e:
83:37:b5:c4:19:38:14:07:88:29:5a:01:5d:b9:71:60:65:e5:
30:8b:d5:d8:5a:b5:18:1a:70:9d:97:8c:17:22:b9:7e:18:2a:
f8:06:d6:73:4f:23:52:ab:c6:14:be:68:35:db:83:26:fa:6a:
8a:99:88:e7:6b:76:72:78:03:54:8b:10:c1:8e:d3:ef:e8:ea:
06:49:32:cf:44:15:14:8d:3c:b2:ab:4c:08:a2:ef:3f:c5:9e:
93:33:c2:ae:bf:c8:96:c9:c2:9d:c3:e6:cf:80:0f:20:8d:a9:
3f:d8:ce:f2:e5:a1:2a:cf:71:42:3b:d1:3e:b7:fc:79:31:84:
30:52:3e:d1:ed:46:2e:7e:3c:ca:71:d7:61:55:e0:86:f9:95:
9c:3b:9b:d1:2b:1a:70:9d:b6:cd:4f:03:8b:1b:4f:81:f7:be:
0b:bd:35:57:df:3c:4f:8e:0f:5f:bd:1f:49:01:4d:0a:1c:48:
95:48:7a:a7:91:45:0f:79:a6:86:38:96:8a:d0:28:a0:bc:25:
2f:dd:d7:55:29:58:f0:97:4f:6b:c8:b8:4f:29:66:0f:81:cd:
39:a8:30:ad:52:3b:eb:33:89:ac:0f:8c:71:10:8d:05:6b:c5:
24:5a:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:23 2023 by rpki-client on console-ams.rpki-client.org