Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yySyK_sGCmolO6RneVN2W3pSYZo.roa
File: yySyK_sGCmolO6RneVN2W3pSYZo.roa (raw, json)
Hash identifier: bIE0G6bFSwQ+deJcBSCutfLNjnDDZxxousCBaDDs5/k=
Subject key identifier: CB:24:B2:2B:FB:06:0A:6A:25:3B:A4:67:79:53:76:5B:7A:52:61:9A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0AA72E04
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yySyK_sGCmolO6RneVN2W3pSYZo.roa
Signing time: Sat 12 Mar 2022 08:34:47 +0000
ROA not before: Sat 12 Mar 2022 08:34:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35372
IP address blocks: 62.60.143.0/24 maxlen: 24
62.60.144.0/24 maxlen: 24
62.60.163.0/24 maxlen: 24
62.60.162.0/24 maxlen: 24
62.60.160.0/24 maxlen: 24
62.60.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178728452 (0xaa72e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 12 08:34:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb24b22bfb060a6a253ba4677953765b7a52619a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:73:9d:db:0c:6c:05:df:22:2d:49:a9:35:
39:70:31:3f:75:d7:36:ae:b2:1b:63:73:d8:f2:3f:
7e:ce:60:f1:79:1b:c2:02:94:e6:52:87:a9:84:b4:
c6:fd:97:e9:29:99:e0:b3:55:9e:cc:c4:91:d0:9d:
e4:a9:91:78:bb:01:80:89:6d:cb:39:c7:24:85:4f:
51:69:b8:f7:e8:50:7f:43:6d:5a:ec:4c:74:e4:21:
72:7f:57:12:3f:77:44:82:1a:2f:13:d5:85:1d:6d:
2c:96:0c:31:b4:1e:ed:d3:14:06:f8:96:93:4d:39:
d2:c2:5f:7a:c4:31:5a:98:96:c6:33:2e:49:63:42:
cd:78:7b:4f:b6:bd:8c:e7:86:78:ca:8e:b2:d8:9b:
ea:da:da:6c:05:c7:a2:77:91:6c:5e:ee:4b:b9:da:
d9:d9:bc:1d:da:a6:50:64:89:df:00:ad:d0:3e:ff:
d8:c2:43:f9:6f:65:b3:d1:d1:a6:b8:be:ac:28:19:
83:43:bd:a2:02:1f:a6:6c:69:9e:45:a5:eb:96:f0:
b9:da:50:dc:44:18:0d:7c:01:00:c2:31:7b:42:b9:
b7:57:1a:6b:50:67:13:83:2c:fd:e6:b2:06:96:f3:
29:10:28:f3:1c:3d:92:b8:59:04:2c:32:6d:41:32:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:B2:2B:FB:06:0A:6A:25:3B:A4:67:79:53:76:5B:7A:52:61:9A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yySyK_sGCmolO6RneVN2W3pSYZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.143.0-62.60.144.255
62.60.160.0/22
Signature Algorithm: sha256WithRSAEncryption
74:86:e2:b4:32:70:8e:35:b5:48:84:cc:22:5a:8b:ba:33:19:
1c:be:ef:88:a1:b0:d7:a6:65:4e:cb:50:cd:f0:ce:51:42:ca:
49:7d:6b:bb:ee:84:5a:20:2a:ed:69:63:d9:7f:36:96:56:74:
2e:c0:7a:be:e8:91:a8:8e:3b:8f:5a:9d:87:57:c5:81:7d:bd:
fc:3d:37:b1:e1:ca:78:5b:f3:88:11:b7:e3:2a:06:6d:65:06:
43:b6:03:6f:bd:d2:42:70:4e:ca:07:86:68:d6:0b:a0:79:79:
70:ed:8c:08:72:59:c2:c6:91:d2:d1:3c:a4:b1:3c:26:fa:58:
3b:9b:34:af:e2:79:ea:51:25:98:29:37:c0:41:f2:48:6b:7b:
0b:a6:37:2e:53:db:6b:40:55:00:44:c8:da:3f:80:fc:62:25:
3a:ad:1c:d5:f2:9c:02:bd:af:d1:81:1b:43:a3:86:cb:22:f3:
08:0b:e8:92:87:3f:43:5f:4f:0b:0e:97:3a:f6:6b:53:f5:1f:
b4:26:2c:6e:f0:af:4f:5b:a3:69:eb:2a:1d:51:0a:58:d3:68:
bd:7e:10:a8:14:73:ae:00:81:0d:cc:1f:fa:36:00:ea:83:77:
3e:1d:7d:d1:9b:5e:46:9e:bf:22:e3:b5:18:1b:0f:ce:c3:3d:
3e:e5:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org