Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mC2TUkzMRdrngRsf7o5GdCXzJsc.roa
File: mC2TUkzMRdrngRsf7o5GdCXzJsc.roa (raw, json)
Hash identifier: E0mzCW8UKtNeAArbZ1ENF4EKRqCwj2bXGC1JUmpAO18=
Subject key identifier: 98:2D:93:52:4C:CC:45:DA:E7:81:1B:1F:EE:8E:46:74:25:F3:26:C7
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018403F75E5AC766BACA09ADE9657454C805
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mC2TUkzMRdrngRsf7o5GdCXzJsc.roa
Signing time: Sun 23 Oct 2022 08:30:53 +0000
ROA not before: Sun 23 Oct 2022 08:30:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 62.60.216.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
62.60.128.0/22 maxlen: 24
213.176.88.0/22 maxlen: 24
62.60.152.0/22 maxlen: 24
213.176.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:03:f7:5e:5a:c7:66:ba:ca:09:ad:e9:65:74:54:c8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 23 08:30:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=982d93524ccc45dae7811b1fee8e467425f326c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:e1:85:25:58:c3:56:9c:93:9b:65:ca:77:
55:fa:46:9d:27:27:cf:73:b0:0a:9c:24:fd:b8:7a:
cd:72:99:3e:b7:2b:9c:df:3f:11:b9:87:0c:ba:95:
ae:f2:3a:f6:17:da:c2:14:78:fe:15:02:31:c5:ed:
94:33:11:57:e2:30:09:cd:8b:6a:3a:8b:9d:4e:93:
f3:9a:45:0a:2a:4e:32:81:32:0c:58:98:ab:65:95:
0f:fb:e7:15:9b:f8:3a:3c:51:5b:60:7f:c6:1c:d3:
3c:b6:48:41:31:f4:f4:26:91:dd:12:be:e5:9c:3a:
24:5c:48:8a:4d:42:28:86:44:6c:ff:98:34:25:83:
3d:28:df:be:8b:22:cc:16:dd:cc:59:bd:0c:b2:ee:
0c:6d:0d:c1:e5:b3:a8:f9:4f:13:e4:5b:0e:f2:05:
e5:91:09:b0:46:ac:bf:e7:ec:96:6a:ec:4e:8c:6c:
9d:20:c5:6e:dc:54:eb:18:b3:37:40:28:a9:94:a4:
8f:16:7e:51:d8:7a:4e:c1:44:c5:59:59:d8:97:3e:
d1:72:a6:6e:c8:b5:2b:f6:dd:06:92:a7:b8:8a:fb:
bf:cb:22:12:ce:bd:83:10:72:06:3f:b7:71:63:0b:
cd:ee:a7:7f:b6:e9:c0:b3:48:86:a6:ff:fa:23:14:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:93:52:4C:CC:45:DA:E7:81:1B:1F:EE:8E:46:74:25:F3:26:C7
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mC2TUkzMRdrngRsf7o5GdCXzJsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.128.0/22
62.60.152.0/22
62.60.216.0/22
213.176.64.0/22
213.176.88.0/22
213.176.116.0/22
Signature Algorithm: sha256WithRSAEncryption
68:ea:a8:59:fa:d3:16:c4:f2:6c:34:b2:78:3b:9e:0f:d6:b5:
97:94:0e:3b:23:56:21:82:59:fd:ff:cf:fd:cd:6a:8c:da:a8:
ba:d7:f4:18:63:07:2c:37:25:64:6b:28:eb:07:fb:04:06:40:
63:1e:87:73:63:3a:cc:dc:98:56:d0:f3:b1:8a:9f:e1:d3:6c:
f4:1b:3a:b3:c1:41:86:a1:13:1c:4f:fa:60:9e:a8:0f:5c:a0:
e0:03:45:ac:90:ae:e2:b9:a7:76:f0:bf:f8:51:03:9d:d9:6b:
5c:68:c4:3b:c2:4f:d0:46:a0:bc:d2:5e:1f:65:d5:e3:a7:93:
06:e5:21:f1:b3:34:75:13:5e:55:b2:89:d8:21:11:01:6b:c5:
be:73:c9:72:0f:75:60:93:8f:be:20:35:76:08:ae:00:d8:f8:
1b:37:c1:d4:89:58:fd:0f:00:fd:64:03:1e:17:68:92:65:ff:
09:08:f7:a3:e9:13:75:80:99:37:cc:29:e3:22:0f:ec:d1:74:
c2:e2:eb:59:1a:e1:56:91:9b:c6:40:a8:df:b0:75:45:b9:6c:
39:b9:84:c8:7a:4b:9a:d2:29:10:1c:9d:83:1c:85:a3:11:ed:
11:e6:de:2e:04:72:13:09:a8:09:c3:ee:4e:f0:ea:a3:b4:14:
7c:78:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org