Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/MsGpneZXnmp9V_MlXlncRQ1H1ko.roa
File: MsGpneZXnmp9V_MlXlncRQ1H1ko.roa (raw, json)
Hash identifier: r2LzY/niPjj8ytL4gVuxdeea2kkTjGQRHWiCJ89dzsM=
Subject key identifier: 32:C1:A9:9D:E6:57:9E:6A:7D:57:F3:25:5E:59:DC:45:0D:47:D6:4A
Certificate issuer: /CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Certificate serial: 5ED248
Authority key identifier: FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/MsGpneZXnmp9V_MlXlncRQ1H1ko.roa
Signing time: Sun 06 Mar 2022 06:26:42 +0000
ROA not before: Sun 06 Mar 2022 06:26:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 62.68.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6214216 (0x5ed248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Validity
Not Before: Mar 6 06:26:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32c1a99de6579e6a7d57f3255e59dc450d47d64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:f4:f5:68:ce:7d:38:64:6a:d4:35:05:ba:
ac:59:55:ff:2f:f4:a5:f5:79:8d:0b:fa:25:19:3c:
33:a6:36:fe:da:fd:a7:6f:97:0e:95:22:83:e7:89:
4c:d1:29:b0:b2:a5:02:fa:db:d7:84:07:e5:38:ed:
3e:72:f0:28:9e:94:30:db:55:c3:53:e6:ac:38:15:
37:b3:c3:93:0b:f8:f7:91:ce:25:f7:91:b1:71:fb:
66:55:bf:71:fc:24:12:52:0c:47:aa:51:dd:15:26:
63:2b:4f:84:d4:0f:0b:aa:e5:05:13:01:f1:e0:c6:
8b:db:4f:a0:5c:5d:f1:6d:65:ee:19:b1:c4:55:f8:
89:3b:c1:06:b0:7e:46:85:26:56:1d:0b:f8:ef:38:
0b:86:3f:b1:60:69:c3:49:88:ca:00:ab:52:db:db:
ee:db:d3:a6:14:28:18:2e:1f:7c:62:63:e1:bf:18:
91:ee:c3:3b:04:06:a7:98:59:d2:f0:13:8d:ca:22:
f3:33:33:37:04:24:c5:9a:73:31:c0:87:83:a3:e8:
56:f0:4b:66:ea:7c:7c:cf:e8:50:ad:64:e8:05:f2:
1c:d5:e5:e6:13:e3:de:04:ee:a2:24:0c:df:7f:18:
5a:7c:e9:53:07:61:a7:d4:06:7b:98:87:66:cd:63:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:A9:9D:E6:57:9E:6A:7D:57:F3:25:5E:59:DC:45:0D:47:D6:4A
X509v3 Authority Key Identifier:
keyid:FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/MsGpneZXnmp9V_MlXlncRQ1H1ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.80.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c6:90:f8:5f:67:f3:00:6a:e0:61:bc:3a:f7:87:c2:d4:07:
72:ac:51:5f:7a:0c:2b:17:60:fc:cf:76:dd:b4:6c:c9:52:3e:
b7:28:5c:42:3f:1c:67:b3:28:ae:c1:f4:f7:46:c2:6f:13:d7:
10:a9:9e:4d:54:52:0f:d9:d0:ed:19:28:57:48:02:ff:f7:1f:
cb:ba:a5:c7:b0:9e:2d:7d:7a:97:1e:2b:87:01:20:72:f9:23:
19:1e:db:de:bf:7e:b1:60:53:0c:6f:ca:94:47:e8:4b:bc:7e:
1c:e9:7d:bd:ec:12:03:2c:5d:4a:55:e1:e4:1e:c5:da:0a:69:
45:27:0d:e9:23:ff:ec:d4:8c:4c:e3:07:61:c7:2e:e5:2c:47:
97:a1:a2:1b:2a:c5:de:8f:0d:f8:d9:87:66:5d:f2:86:2b:d0:
bf:49:57:94:df:60:83:bf:90:a8:f9:78:31:c5:ee:75:ab:aa:
4b:c9:13:2b:51:3f:f1:ca:58:2e:45:74:cb:d9:14:b6:23:36:
b4:d9:6e:90:da:6e:68:41:61:fc:d4:bf:e9:8b:28:7a:8e:fe:
7a:e9:41:65:00:45:75:c8:cc:1a:07:4d:dc:33:c2:9b:58:81:
00:65:6f:1a:46:51:1e:21:11:5c:e9:67:9d:99:92:ec:ef:a3:
d3:f7:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org