Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ohA35X3ccWcbDubm60ovi_8vEqg.roa
File: ohA35X3ccWcbDubm60ovi_8vEqg.roa (raw, json)
Hash identifier: q64GRRHh7nU4dwJAaTXlxiW6+fhmccVXyg9j4ZoQEYw=
Subject key identifier: A2:10:37:E5:7D:DC:71:67:1B:0E:E6:E6:EB:4A:2F:8B:FF:2F:12:A8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B32BDEA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ohA35X3ccWcbDubm60ovi_8vEqg.roa
Signing time: Sat 07 May 2022 07:33:13 +0000
ROA not before: Sat 07 May 2022 07:33:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57674
IP address blocks: 62.60.216.0/22 maxlen: 24
62.60.224.0/22 maxlen: 24
62.60.220.0/22 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187874794 (0xb32bdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 7 07:33:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a21037e57ddc71671b0ee6e6eb4a2f8bff2f12a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:fd:ce:fd:07:d6:8f:f2:da:bf:c5:57:03:
dd:68:3e:b4:af:fa:ee:f0:c4:59:f4:73:04:76:df:
68:25:fa:a5:42:a1:8a:70:2a:e7:38:e5:c6:04:cc:
a2:75:57:87:74:fb:4e:e3:d4:c6:94:b6:ee:30:83:
bb:4c:47:79:54:46:42:9a:15:32:dc:cc:21:6f:06:
fb:d0:6a:14:06:ce:99:ac:e8:c4:b7:81:ab:8d:51:
25:d4:14:6a:75:f3:11:19:a5:44:89:c4:99:c9:9b:
16:8e:a8:d6:fb:4f:29:a5:57:1f:85:15:8d:9d:a7:
7e:b6:5e:76:aa:6d:0f:c8:b7:e5:cb:68:8e:bc:80:
7b:b7:f8:5b:89:44:f9:5f:4f:c2:27:cb:1b:88:7b:
ee:39:be:95:1f:fd:57:03:e8:c1:fd:a1:c6:4d:5d:
c7:fd:3d:9f:02:f7:b0:cc:1f:19:8f:9e:57:75:66:
41:12:83:6d:e2:22:f6:ea:10:33:3f:68:fa:65:b2:
4b:c3:d3:c7:fc:2a:78:b1:30:ad:44:9d:89:a1:46:
fd:50:a6:de:ae:09:2b:01:e2:8f:13:5b:84:95:6b:
9b:c3:55:c6:b1:b1:9f:03:cc:c4:a4:d9:62:ad:aa:
f6:fa:44:f6:d0:49:fe:4f:be:b2:5c:b7:74:80:f0:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:10:37:E5:7D:DC:71:67:1B:0E:E6:E6:EB:4A:2F:8B:FF:2F:12:A8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ohA35X3ccWcbDubm60ovi_8vEqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.208.0-62.60.231.255
62.60.248.0/22
Signature Algorithm: sha256WithRSAEncryption
13:53:bf:9d:a8:2a:56:55:35:80:e1:03:fb:15:6f:02:e9:2a:
6e:8c:f2:c0:33:b4:89:d2:19:8c:38:db:54:cd:97:15:7b:ce:
7f:19:32:60:c8:95:e8:15:6c:b9:3a:e1:0e:83:92:54:70:c4:
3b:d6:9f:29:60:48:49:47:cf:a6:e0:d4:c3:c0:f8:53:54:a9:
72:ba:29:8c:9b:b8:dc:ec:32:6c:67:ad:ca:15:8b:df:cb:9c:
81:e9:12:b9:3b:8f:ee:dd:11:c4:2b:a9:94:e8:50:78:02:12:
25:ea:15:da:98:bf:8c:29:a0:2c:50:8d:4d:b3:3f:0c:b5:a0:
cc:e1:b5:19:d2:53:a1:36:bc:39:0d:86:12:fd:4c:6f:20:f2:
69:be:b6:62:a7:30:78:a1:a1:14:65:04:12:8d:2a:c1:65:84:
59:87:7d:28:c3:bd:fc:c5:4d:6d:5e:fa:c8:ca:bb:36:95:12:
ca:5a:ef:54:a9:3c:53:b3:8f:0f:b3:e8:7d:df:07:72:14:46:
19:80:97:af:d5:88:12:fa:fc:65:fa:cf:b7:e6:e7:4f:50:73:
0c:a5:e9:91:fa:de:71:29:0a:15:cd:e2:4a:6c:0a:ee:cc:a0:
c6:d2:c2:32:19:ac:3b:8f:84:8b:9f:0c:4a:33:00:42:5a:9f:
99:79:f8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org