Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/SCEHTqjq2RPIPYzEBPoIjkvRwBU.roa
File: SCEHTqjq2RPIPYzEBPoIjkvRwBU.roa (raw, json)
Hash identifier: 60mcsIVP932+gLCc4FUekhmSh6YqIF8zi9oCx5BimDI=
Subject key identifier: 48:21:07:4E:A8:EA:D9:13:C8:3D:8C:C4:04:FA:08:8E:4B:D1:C0:15
Certificate issuer: /CN=e02a93acae2cea321b7caa4ec551675ab9907b56
Certificate serial: 670456
Authority key identifier: E0:2A:93:AC:AE:2C:EA:32:1B:7C:AA:4E:C5:51:67:5A:B9:90:7B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/SCEHTqjq2RPIPYzEBPoIjkvRwBU.roa
Signing time: Sat 01 Jan 2022 01:56:24 +0000
ROA not before: Sat 01 Jan 2022 01:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 62.3.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6751318 (0x670456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02a93acae2cea321b7caa4ec551675ab9907b56
Validity
Not Before: Jan 1 01:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4821074ea8ead913c83d8cc404fa088e4bd1c015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:33:4d:13:fd:74:67:b4:57:dc:1a:07:27:
70:e8:ab:9c:4a:bc:f8:9d:ac:b2:25:a8:a9:bc:3b:
22:6b:fd:5a:d7:68:8f:e4:45:3d:df:12:d9:87:7a:
34:89:74:8f:ec:56:a1:3f:14:19:d4:a1:06:ef:9c:
8b:bf:75:c9:35:ec:89:e1:79:91:a6:ce:d8:12:04:
3a:46:6a:1c:85:90:d6:16:10:dc:30:80:b3:d1:7e:
66:c9:b3:85:1a:9f:73:89:f6:6f:9c:4c:39:13:5f:
7c:61:2f:e8:99:3e:90:32:3e:c3:7b:6e:91:86:40:
d0:92:aa:a1:ed:a8:99:44:00:d2:8d:3a:a5:30:12:
af:ef:e4:48:6e:07:f4:d4:8e:c0:95:df:91:ca:98:
9b:3e:27:03:c7:de:54:69:17:31:75:39:e0:2a:54:
65:45:42:d3:d4:a1:01:30:53:70:70:47:0f:23:6d:
80:99:e3:b9:c8:78:94:0e:b8:1d:3d:98:4c:24:6d:
1e:27:fb:46:12:d2:d3:e4:ca:e9:38:67:ed:05:ff:
5d:2f:75:3f:5b:41:99:40:d2:70:9a:c6:7c:34:d3:
95:e0:9d:6b:d9:6e:b5:cf:e2:c5:32:6d:6e:84:b3:
33:db:6f:98:f5:2c:20:f0:39:9e:50:f3:71:c4:18:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:07:4E:A8:EA:D9:13:C8:3D:8C:C4:04:FA:08:8E:4B:D1:C0:15
X509v3 Authority Key Identifier:
keyid:E0:2A:93:AC:AE:2C:EA:32:1B:7C:AA:4E:C5:51:67:5A:B9:90:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/SCEHTqjq2RPIPYzEBPoIjkvRwBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e6:38:4c:ee:3c:23:13:20:bc:95:8d:05:af:68:53:e8:7b:
11:f3:70:ac:fa:67:60:e4:f9:c2:f4:5f:76:93:9e:25:12:6e:
13:95:39:de:58:66:49:31:14:c9:16:18:e3:4f:11:ef:88:90:
f4:7d:af:1e:10:a0:e6:66:d2:8a:9b:8c:3b:96:d9:1a:7a:83:
b0:49:7e:3e:e8:07:85:bc:30:95:bf:da:29:64:d7:c7:29:11:
90:3c:a8:d0:bc:bd:bb:6e:4a:8b:05:f1:ba:a5:07:f0:5f:e0:
78:59:5e:25:55:3b:66:fc:35:a4:ad:e7:78:90:d0:80:cd:2d:
29:42:20:e5:55:1e:df:49:e8:ce:85:c8:1b:a1:b1:fa:bf:83:
ab:f7:c5:1a:c7:b9:f9:a2:7b:ff:00:f8:6e:d1:73:38:56:6c:
d5:7e:5b:b6:b5:53:a3:d0:8d:cd:ed:ff:b1:9e:e6:11:81:0c:
73:27:82:00:20:66:f4:65:15:7a:89:2a:1c:1b:39:9e:94:96:
51:9e:c6:f8:cf:82:95:91:3a:6f:53:26:ff:c4:b5:5c:74:36:
01:70:2e:df:48:ac:4b:9e:59:b9:5b:01:e3:46:fc:50:89:9a:
4d:3f:bd:f0:33:7b:1c:89:4d:d8:a7:c6:26:94:e4:e3:b2:4b:
fb:d9:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:13 2023 by rpki-client on console-fra.rpki-client.org