Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iJNgPf1buRVhamxI_8brC2EymF4.roa
File: iJNgPf1buRVhamxI_8brC2EymF4.roa (raw, json)
Hash identifier: tyvABI1mSFfrO4UbXwe1+NQGTjYMWw2c7sEqH7SB3yE=
Subject key identifier: 88:93:60:3D:FD:5B:B9:15:61:6A:6C:48:FF:C6:EB:0B:61:32:98:5E
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018514A2867FA6134FA34225987909EB5A60
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iJNgPf1buRVhamxI_8brC2EymF4.roa
Signing time: Thu 15 Dec 2022 07:14:33 +0000
ROA not before: Thu 15 Dec 2022 07:14:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
213.176.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:a2:86:7f:a6:13:4f:a3:42:25:98:79:09:eb:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 15 07:14:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8893603dfd5bb915616a6c48ffc6eb0b6132985e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:53:83:62:f7:9a:d7:c6:96:64:4c:4c:70:
5f:2a:44:e4:61:b4:c9:55:40:f3:80:45:0e:d9:22:
5a:8d:9a:0f:b4:f9:1d:95:f8:d3:40:ed:69:1a:25:
e0:78:80:0c:b6:f9:3d:7c:aa:92:16:7d:f4:90:ec:
c8:62:86:c3:d8:50:ac:f6:f1:5a:a6:78:e3:cb:d8:
54:cc:03:0c:c9:1f:74:0b:6f:d2:16:79:a2:d4:3a:
e4:9e:75:8c:87:ae:8d:0a:56:5f:9b:f3:89:4e:3c:
12:d6:3d:e3:a4:e8:60:c6:ae:60:0b:99:bb:cd:f0:
03:72:af:4e:bd:00:a1:bd:76:09:4a:3f:c7:ee:02:
83:91:96:ca:a6:5b:66:df:8c:b7:af:67:ab:ee:17:
10:2a:93:13:7e:1e:24:cb:9f:11:e3:96:69:2c:7c:
d6:53:eb:05:c9:8c:17:eb:20:cc:05:23:86:1a:2a:
23:44:39:ca:d7:ee:e7:6c:55:cc:97:11:33:f1:90:
d5:7d:2d:03:79:3d:68:6a:6d:b3:0c:79:01:fd:5e:
9e:23:04:9d:6d:44:74:a6:a0:cc:91:f4:c3:8e:04:
dc:eb:16:59:bf:c1:a8:a5:56:3c:ee:b0:0d:e2:70:
de:c4:d1:85:a7:a9:2f:cb:ae:80:b6:20:90:2d:bf:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:93:60:3D:FD:5B:B9:15:61:6A:6C:48:FF:C6:EB:0B:61:32:98:5E
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/iJNgPf1buRVhamxI_8brC2EymF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0/22
62.60.148.0/22
213.176.20.0-213.176.31.255
Signature Algorithm: sha256WithRSAEncryption
1a:a9:da:95:b9:1d:9b:64:67:44:4f:19:eb:2e:3f:cf:13:aa:
67:3d:e7:32:72:e1:a1:4f:39:c0:d0:fa:e7:fc:51:11:8b:bf:
7c:14:75:b4:5c:72:63:17:f5:de:af:36:f5:58:71:40:8a:66:
d4:47:c6:b4:42:f5:00:78:d7:13:3a:c5:6a:ce:98:2e:c5:b4:
d1:9e:62:90:27:10:05:33:bb:0c:fa:f4:f4:f4:19:0a:5d:7f:
52:47:de:05:fa:9a:a4:c2:8e:f0:ec:2d:17:06:8f:b4:99:cf:
b0:53:b8:4d:f5:8c:55:ab:33:2e:17:06:60:4b:82:64:59:76:
bd:84:be:f9:ac:3e:36:b1:b5:78:08:61:40:3b:f1:b9:41:5b:
aa:00:23:27:27:6c:28:1e:17:e6:64:d0:14:c9:95:42:4a:1b:
76:f7:f4:de:08:17:be:93:fb:6d:0c:83:75:ab:ec:ef:0e:a3:
ed:58:cb:3b:4f:b1:e5:da:42:47:32:b0:d7:a1:bf:91:25:57:
ed:e6:1b:24:a9:2d:cf:22:07:91:1c:8c:fd:fc:07:16:86:b1:
5f:a0:e4:4a:3e:bd:eb:2c:b2:65:0a:4a:96:2e:b9:2f:54:86:
35:69:a2:73:88:19:ec:b9:d2:b8:5c:0e:a0:38:ab:73:7e:26:
8f:ab:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org