Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jaoNv-07padLz0t9AuMpP8_7SdU.roa
File: jaoNv-07padLz0t9AuMpP8_7SdU.roa (raw, json)
Hash identifier: YoZflRZ17kLX7PekYIvu/NTi17NfCqWSEljGraOAAx4=
Subject key identifier: 8D:AA:0D:BF:ED:3B:A5:A7:4B:CF:4B:7D:02:E3:29:3F:CF:FB:49:D5
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01851FDD4C2EC19FC210CEB9805A30E72D66
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jaoNv-07padLz0t9AuMpP8_7SdU.roa
Signing time: Sat 17 Dec 2022 11:34:34 +0000
ROA not before: Sat 17 Dec 2022 11:34:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.148.0/22 maxlen: 24
213.176.20.0/22 maxlen: 24
213.176.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:dd:4c:2e:c1:9f:c2:10:ce:b9:80:5a:30:e7:2d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 17 11:34:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8daa0dbfed3ba5a74bcf4b7d02e3293fcffb49d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:61:24:79:61:69:ac:7a:b8:ef:40:70:7c:4a:
6c:44:a4:53:a6:47:35:3c:de:76:da:9e:29:23:f6:
9e:03:01:d7:ac:2b:21:af:29:aa:65:3a:bb:25:03:
cf:5e:11:b2:c2:e9:2e:dc:e4:61:f0:09:61:b6:ba:
8b:a7:0d:1e:00:db:e8:37:d1:1a:f5:1a:10:02:67:
b7:a1:52:df:d3:9c:82:3a:d6:96:04:9f:b2:65:ec:
14:ef:11:6c:8b:6d:46:8d:5f:f6:5f:e7:4f:fa:3e:
70:c3:03:9f:44:11:1f:b5:c1:e9:fe:23:8b:69:c1:
22:57:79:1c:5f:bf:2b:a8:63:b9:de:25:e7:1d:4c:
ea:a6:2f:32:ce:c9:01:3f:92:bd:9f:dc:69:d3:5c:
b0:4d:22:8d:6f:aa:f2:34:7f:55:dd:41:88:fb:c7:
4f:1e:50:b3:a8:c7:7a:16:c1:af:19:be:0b:72:54:
b5:05:3e:2d:d5:76:e3:76:1d:4c:95:0a:c3:23:6b:
e4:69:04:ad:18:c8:31:9d:55:8c:8f:80:e8:60:cb:
91:e9:ee:da:e7:fd:9d:85:9b:f4:99:02:30:f1:f7:
e9:94:a8:e0:c2:ee:97:1c:f5:0f:6b:1f:9d:56:c2:
bd:97:ea:fc:79:d4:8a:7e:52:28:64:e8:b7:7d:e6:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:0D:BF:ED:3B:A5:A7:4B:CF:4B:7D:02:E3:29:3F:CF:FB:49:D5
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jaoNv-07padLz0t9AuMpP8_7SdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0/22
62.60.148.0/22
213.176.20.0-213.176.27.255
Signature Algorithm: sha256WithRSAEncryption
42:43:d8:0f:c7:d9:1d:af:d4:36:95:b8:09:38:61:40:f7:f5:
44:e9:09:c8:9d:e5:91:6e:32:0d:36:d8:5c:3b:98:c4:2d:da:
af:a1:40:be:f0:26:56:ac:b9:44:20:b7:6c:26:52:56:3c:3c:
d3:81:91:a2:52:18:05:23:e5:66:c5:8f:ee:1b:f2:91:db:20:
ee:43:77:cd:8a:04:05:7a:59:43:e5:75:93:e6:e0:6d:92:18:
41:aa:b0:5b:96:a9:11:4f:1f:20:31:39:70:47:72:e8:8d:2e:
ee:a0:98:17:b5:6a:96:89:7f:92:da:99:43:b4:0c:56:5e:6e:
63:1e:d8:d7:2e:4c:74:1a:e4:6c:4d:d2:4c:f7:d5:e8:80:fe:
79:99:3e:d0:cd:c4:7b:7d:cc:97:4b:71:a3:24:19:6f:49:4e:
46:e2:60:0e:04:db:6d:77:7f:3e:2f:e5:18:d7:9d:1b:f7:83:
c4:35:e2:35:21:0f:9b:a6:d7:71:2d:43:97:60:52:22:1a:4d:
fe:ea:2d:f2:46:e8:e9:b2:23:f1:db:6a:76:f8:7c:d0:f0:d5:
09:1c:2c:4c:8e:22:23:38:71:89:04:e0:09:a3:96:4f:ec:7b:
57:9c:bf:67:46:d6:0c:8a:d2:a5:ca:75:ed:18:05:d4:e1:65:
12:36:ad:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org