Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/hK7Lt4K2YXs_P2OYXQAG3KNBjLg.roa
File: hK7Lt4K2YXs_P2OYXQAG3KNBjLg.roa (raw, json)
Hash identifier: +dOVEBZPZU3iwzee0y05NsLFzi+1YsVNrjcRSDcwqXk=
Subject key identifier: 84:AE:CB:B7:82:B6:61:7B:3F:3F:63:98:5D:00:06:DC:A3:41:8C:B8
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 03C30C69
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/hK7Lt4K2YXs_P2OYXQAG3KNBjLg.roa
Signing time: Sat 01 Jan 2022 03:53:23 +0000
ROA not before: Sat 01 Jan 2022 03:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49163
IP address blocks: 62.93.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63114345 (0x3c30c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 1 03:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84aecbb782b6617b3f3f63985d0006dca3418cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:63:17:8a:68:ee:55:7b:10:29:ca:6e:a5:
6d:da:7e:fc:74:b2:90:de:a5:db:c8:40:95:d1:c5:
e0:ec:61:64:95:b3:f1:14:79:1b:fb:b3:80:8d:58:
2b:14:74:c4:97:cf:e5:cc:71:d9:92:52:fb:76:cf:
a8:00:f5:29:e0:73:aa:3d:54:aa:f4:8d:af:0c:6c:
06:02:5b:fd:c4:51:dd:25:d9:cb:33:a9:97:f9:ae:
3d:e9:af:e7:96:3c:2c:56:38:58:73:63:25:3d:ef:
89:91:f4:f3:06:f7:0e:4c:8f:2c:8d:a1:3b:e7:2c:
5e:cd:19:0b:a1:cd:ac:b4:f9:ad:41:d4:48:ce:42:
2e:3c:2d:97:ef:a6:f7:0f:76:22:5d:cd:61:63:ab:
d7:f7:0c:16:a1:ed:5b:2e:92:0f:d4:98:34:96:0f:
f1:0c:ad:d7:58:61:f5:b7:85:3c:ad:2e:ff:f1:dc:
ab:4a:ed:cf:e5:f4:7c:0e:0a:9a:74:7b:d0:21:ab:
c5:3b:09:09:29:6f:98:3a:bf:75:3d:72:4b:22:c5:
e7:75:0f:b0:18:81:dc:8e:fa:22:51:88:73:43:e2:
fb:f8:6c:6a:01:67:91:d2:dc:82:d8:73:a2:4a:39:
64:ca:8d:48:41:0e:78:db:22:8e:2f:bf:22:73:ec:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:CB:B7:82:B6:61:7B:3F:3F:63:98:5D:00:06:DC:A3:41:8C:B8
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/hK7Lt4K2YXs_P2OYXQAG3KNBjLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.96.0/21
Signature Algorithm: sha256WithRSAEncryption
48:bc:bd:5c:b1:f5:ba:12:c4:90:af:dc:76:b5:cd:50:71:af:
86:95:15:b6:84:28:12:92:90:de:ea:4d:e8:6d:85:6a:5d:4c:
21:fd:65:44:10:f1:51:53:1f:67:c7:f1:47:18:82:31:c4:c3:
07:2d:41:21:c1:56:c5:a3:d3:6c:e0:20:a0:fd:0d:ba:03:c7:
c5:71:8b:b2:db:44:97:ac:15:0a:ac:9b:f4:66:79:69:44:38:
92:d2:a6:64:82:73:83:c9:e9:87:8b:74:4e:8e:59:c6:85:7f:
4d:38:fa:b4:1d:89:1a:98:30:69:3e:f4:fd:81:9b:03:48:26:
3d:44:c2:01:2c:63:19:25:9d:52:c9:14:fc:83:3f:d9:93:c7:
7c:64:82:13:77:7b:7b:a0:77:b2:2b:ed:ae:8c:4c:d8:c8:fe:
e7:fb:4d:f5:27:45:5b:da:40:30:4e:45:6c:42:26:45:82:08:
e5:a2:da:a3:5a:a5:ba:fc:31:71:f3:e8:6e:b7:3c:1e:81:cf:
f0:f7:1a:c0:93:44:bc:d2:24:cb:d2:1e:aa:dc:d7:8b:8d:79:
d3:cb:99:93:da:96:3d:6f:24:84:29:cb:53:8d:4d:ad:05:28:
e3:c5:7f:34:8d:ea:33:82:5a:0e:e1:e3:6f:ca:52:8d:71:c3:
56:2d:1d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:41 2024 by rpki-client on console-ams.rpki-client.org