Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Way8LcqolpgO2U7z3FrhxjAkPNo.roa
File: Way8LcqolpgO2U7z3FrhxjAkPNo.roa (raw, json)
Hash identifier: uE9hnTbTDcOt8UIDgK6KLHHFUxyxqg9wCujz+8NftRg=
Subject key identifier: 59:AC:BC:2D:CA:A8:96:98:0E:D9:4E:F3:DC:5A:E1:C6:30:24:3C:DA
Certificate issuer: /CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Certificate serial: B39A
Authority key identifier: FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Way8LcqolpgO2U7z3FrhxjAkPNo.roa
Signing time: Tue 25 Jan 2022 21:33:51 +0000
ROA not before: Tue 25 Jan 2022 21:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 62.68.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45978 (0xb39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Validity
Not Before: Jan 25 21:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59acbc2dcaa896980ed94ef3dc5ae1c630243cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:73:a2:56:f5:35:df:e5:25:8e:07:d1:0f:
57:12:ba:b1:77:92:b4:11:2c:43:f4:4a:93:6e:e4:
5b:e9:b8:c5:31:cb:c6:a4:c4:b9:b4:18:f3:b7:61:
9d:22:98:d1:c8:d6:75:99:1d:43:db:ac:a7:4c:22:
3a:71:5a:a6:8c:c0:dd:8a:5a:3a:59:02:9c:4e:82:
b5:25:de:ae:7d:4a:cb:b4:21:ee:f9:1f:c0:e3:91:
b1:00:a6:7c:33:3c:53:76:ae:09:a5:49:ab:c8:44:
20:39:2c:6c:93:d5:18:67:d9:35:90:7d:cc:db:cc:
10:ef:f7:83:b5:1a:f0:d1:46:57:9e:4f:0b:d3:9d:
45:bd:36:de:a7:d2:a0:fd:18:0a:67:5a:73:a4:fc:
b2:80:f0:f9:dd:3d:f3:0f:19:1d:23:58:04:fd:4c:
b5:84:63:ef:26:5d:aa:eb:24:5d:32:00:3d:35:79:
69:7d:3d:56:f5:75:12:9a:79:ca:3b:09:5a:4e:31:
1d:cc:c2:03:c5:de:86:9b:d1:f7:25:10:15:42:ad:
1a:d7:41:df:dd:79:ca:b7:73:29:7c:11:4e:5a:3c:
22:fd:3d:73:0f:00:ef:17:2e:ff:e6:3e:64:81:54:
34:a1:a9:b7:67:a9:fd:eb:2b:d7:9b:de:fd:42:8a:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:BC:2D:CA:A8:96:98:0E:D9:4E:F3:DC:5A:E1:C6:30:24:3C:DA
X509v3 Authority Key Identifier:
keyid:FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Way8LcqolpgO2U7z3FrhxjAkPNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b3:d2:08:7f:55:46:1f:76:e5:76:96:03:30:f4:e8:c0:a3:
dd:ae:95:d7:e0:00:54:91:a7:20:a8:31:17:ea:e7:76:c2:ee:
5a:a0:98:81:f4:f7:06:e2:62:e2:cf:ba:cd:e2:06:a4:6c:b7:
c7:38:9b:17:ce:d8:db:8f:93:c2:f7:83:9b:2e:70:a5:89:40:
2c:72:0f:c3:ba:8e:9d:ea:cc:2b:4e:a9:f9:22:73:5d:35:52:
98:0a:cf:f1:04:0a:2c:d6:73:37:94:1b:3f:06:56:35:9d:e8:
d5:a3:22:15:fe:6a:ec:ce:ab:b2:50:4c:05:43:79:01:3c:0a:
99:89:f4:22:07:53:a6:ed:17:02:dd:7f:9f:c6:36:bb:33:a2:
45:fb:b5:dc:68:8d:d3:e2:c8:80:60:98:e3:88:4d:91:1e:b0:
4b:f3:55:e3:8a:dd:83:92:75:ab:a9:85:e6:c1:e2:4c:49:32:
38:48:fa:59:bd:ec:09:f3:42:91:93:79:39:88:b7:e1:96:0b:
c4:b8:e3:ef:b9:a0:ed:6c:92:d5:57:d0:b0:92:51:ab:25:11:
a5:43:c5:fc:96:ad:7f:c0:cc:1b:85:f1:38:8b:96:87:0e:80:
6a:fd:b6:1c:cb:18:21:9a:1d:de:af:e1:99:da:61:33:11:14:
0c:08:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org