Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/n-sPynXrUnh_LQD5vwKdsQMCTVA.roa
File: n-sPynXrUnh_LQD5vwKdsQMCTVA.roa (raw, json)
Hash identifier: doz71t/P2wbCrcoK3hYJB+YWo1CCjCrv/6747Yl0YWk=
Subject key identifier: 9F:EB:0F:CA:75:EB:52:78:7F:2D:00:F9:BF:02:9D:B1:03:02:4D:50
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0184FB87F0B4FC6EB74B3DF5E27E90C05513
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/n-sPynXrUnh_LQD5vwKdsQMCTVA.roa
Signing time: Sat 10 Dec 2022 10:15:00 +0000
ROA not before: Sat 10 Dec 2022 10:15:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.60.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fb:87:f0:b4:fc:6e:b7:4b:3d:f5:e2:7e:90:c0:55:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 10 10:15:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9feb0fca75eb52787f2d00f9bf029db103024d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:29:56:52:8c:ce:9c:01:e8:40:54:4d:74:ff:
47:c8:7d:0d:c6:db:db:01:34:3d:82:ac:6a:c5:8c:
77:e6:5c:6a:dd:26:79:15:63:95:bd:c9:9c:53:6c:
e3:8c:38:6a:fd:da:3e:dd:26:ac:20:47:1f:dd:32:
53:b5:44:ff:52:15:fa:58:67:c0:12:70:93:1c:21:
29:03:8f:e7:90:33:3b:c4:36:d8:74:fd:0a:8e:de:
c4:e2:1f:eb:43:31:d6:fe:0f:d3:46:4b:32:26:d7:
c4:b0:e0:de:f9:cd:a6:73:d5:78:bc:c4:4d:00:1c:
b3:40:c0:24:ae:19:c1:9f:ff:41:5a:c9:3b:4b:6f:
86:97:55:81:91:73:07:20:ba:22:ab:d9:dd:64:51:
19:81:08:90:39:73:da:dc:bc:9e:74:b0:bd:9c:7a:
f6:65:fa:d9:2c:b0:2a:3f:e3:cd:9a:cc:12:c2:99:
62:dd:ef:b9:a6:29:6a:32:8f:6a:94:99:2e:4f:aa:
40:9f:2a:b6:29:a0:af:ec:70:9c:5b:73:da:c1:3e:
66:19:78:a1:79:db:63:9a:e4:6a:42:f3:b6:3f:ca:
03:47:a7:2c:19:be:c4:b8:a1:21:28:81:86:4a:7a:
22:a6:70:67:6d:28:25:57:cf:80:38:b1:be:a2:19:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:0F:CA:75:EB:52:78:7F:2D:00:F9:BF:02:9D:B1:03:02:4D:50
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/n-sPynXrUnh_LQD5vwKdsQMCTVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a6:40:25:a1:10:b0:16:9f:67:28:d2:17:e8:f3:6e:89:db:
f4:47:f3:4b:68:fa:43:fd:2e:1c:7d:d9:71:8c:29:0a:e4:61:
01:aa:2c:00:90:3c:8d:c6:2c:f3:31:12:73:41:f5:a5:0a:24:
74:26:9a:1d:50:06:4b:82:ca:f9:6d:7d:60:0b:f4:9f:8c:dc:
9b:7b:c8:5f:88:7a:10:b7:bb:8b:c2:c8:a2:f6:40:1f:65:76:
c6:4e:45:1d:f1:56:43:0d:44:3c:c3:7c:80:2d:77:c8:32:e0:
f8:a5:1a:49:fd:17:ed:de:5b:31:83:1e:9a:f7:77:5a:7e:61:
6f:eb:2e:39:fa:ef:95:e9:90:7f:3b:82:21:91:cf:58:86:79:
af:6f:41:54:5a:9e:23:d3:15:9e:ce:82:13:99:7e:87:dc:34:
cc:f6:48:1e:e1:2c:d2:12:c3:b9:48:d8:da:06:c1:22:40:19:
39:3e:5d:17:2b:f3:fa:9f:a8:f1:ba:94:dd:e4:4a:a7:44:20:
3f:68:9b:3b:39:75:29:2a:9f:4f:fd:a4:22:01:94:71:c7:5c:
68:26:a2:8f:80:ef:98:6c:ad:72:45:fd:32:bb:b0:21:6a:44:
ab:9b:4f:3a:c4:3f:ba:00:53:a4:65:7a:c9:a0:42:41:6f:5a:
19:a4:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org