Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j_WB8MwDWmL4_0YHK-EBu9VYGjA.roa
File: j_WB8MwDWmL4_0YHK-EBu9VYGjA.roa (raw, json)
Hash identifier: lwb0Pu9HPqBEvDTt+/ZawHFzD1n8dc8lkYgCfojh0WM=
Subject key identifier: 8F:F5:81:F0:CC:03:5A:62:F8:FF:46:07:2B:E1:01:BB:D5:58:1A:30
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B5D28B4
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j_WB8MwDWmL4_0YHK-EBu9VYGjA.roa
Signing time: Sun 22 May 2022 07:41:29 +0000
ROA not before: Sun 22 May 2022 07:41:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58202
IP address blocks: 62.60.232.0/22 maxlen: 24
62.60.240.0/22 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
62.60.150.0/24 maxlen: 24
62.60.151.0/24 maxlen: 24
62.60.148.0/24 maxlen: 24
62.60.149.0/24 maxlen: 24
62.60.146.0/24 maxlen: 24
62.60.147.0/24 maxlen: 24
213.176.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190654644 (0xb5d28b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 22 07:41:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ff581f0cc035a62f8ff46072be101bbd5581a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:1b:46:dc:92:ce:81:88:55:83:1c:78:44:
8a:9f:54:85:3d:1c:83:12:e1:cd:5a:7d:94:ae:ef:
4f:b9:9d:b8:79:98:8b:c5:aa:f6:f7:ac:32:d0:f0:
33:29:fd:48:e0:ae:2f:a9:7d:3e:68:87:c7:d7:88:
5b:5b:e8:87:84:50:ed:c5:f0:f5:7d:6f:4a:77:a1:
dc:d2:bc:93:99:43:60:0f:49:20:88:5f:eb:27:75:
5c:5e:cc:4b:3f:f9:2e:a0:2a:d6:d6:6a:2b:da:75:
b3:08:a9:66:33:1c:32:bb:4f:f2:c5:41:e0:46:2c:
63:f3:03:58:b3:0b:46:4a:65:ba:2b:52:7c:d2:8c:
8a:07:f0:7f:12:77:8a:0b:69:a5:1c:43:3c:bd:84:
15:09:a6:f1:4e:70:f3:19:05:c7:6d:64:20:79:63:
f1:db:5e:81:04:2c:9d:bd:f7:0f:79:3d:5f:85:44:
f2:80:76:e1:6f:ab:97:04:92:a9:a0:a8:18:ea:d6:
fa:90:93:15:9c:2e:ca:66:5a:0c:2d:ba:f8:5a:33:
f2:d4:5c:e1:aa:55:f8:67:b8:4c:ab:ae:5f:2b:a6:
91:42:8d:74:e7:9b:0c:4b:13:25:14:67:05:50:f6:
bb:91:a9:3e:34:d7:01:32:c3:14:c5:bb:31:1f:50:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:81:F0:CC:03:5A:62:F8:FF:46:07:2B:E1:01:BB:D5:58:1A:30
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/j_WB8MwDWmL4_0YHK-EBu9VYGjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.146.0-62.60.151.255
62.60.232.0-62.60.247.255
62.60.252.0/22
213.176.24.0/21
Signature Algorithm: sha256WithRSAEncryption
38:9d:01:9a:c8:0a:1b:a7:45:09:cf:2c:64:49:29:b6:ba:ab:
42:29:00:cc:26:05:d1:23:ed:bc:ac:6f:c6:68:07:a0:4d:e9:
70:ac:f1:2b:e3:45:61:ec:59:1f:f1:20:84:22:bf:b7:6b:01:
86:b9:75:e6:13:b3:03:d1:12:ea:b6:12:eb:f6:0b:10:c9:21:
64:f8:4f:ad:70:db:7f:7a:78:31:0f:7f:ab:79:76:62:ba:5a:
5b:fe:be:68:fc:fd:3b:5c:a5:95:31:84:a7:f7:b5:1b:7a:76:
82:00:ed:05:ff:4e:55:7c:4a:d2:b8:a5:b9:2f:d3:f8:0b:3b:
c0:8a:a6:9c:34:03:d8:ce:a7:90:e1:2e:4a:df:cb:91:34:b1:
81:da:48:c0:3c:da:c3:87:eb:5d:dd:8b:6b:0c:be:b8:8f:22:
01:9c:c7:57:f3:f5:5e:6f:c2:68:9f:4a:1a:3e:69:97:92:fb:
b5:d8:a0:50:a5:71:d2:73:f2:bb:35:a7:79:3d:3d:ef:b6:fa:
86:21:d0:f5:98:fd:f6:97:93:6c:1f:cf:60:2c:8a:18:27:01:
f0:63:62:2d:d1:0b:44:fb:fa:42:68:5f:06:33:fe:b9:1c:8f:
3e:d5:a7:b4:15:3b:19:a1:da:24:23:b9:38:bd:e7:f2:d4:e6:
bb:4b:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org