Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/pr_FFO8Cok_L92QgTD4Lemkf5tY.roa
File: pr_FFO8Cok_L92QgTD4Lemkf5tY.roa (raw, json)
Hash identifier: ZwF/npi6efimE2oH2+u5hNSJle5Vn+lWgKW2ubCJTKg=
Subject key identifier: A6:BF:C5:14:EF:02:A2:4F:CB:F7:64:20:4C:3E:0B:7A:69:1F:E6:D6
Certificate issuer: /CN=164646b628bc27d2fb26b499a5edb2e1c4c5088a
Certificate serial: 96916F
Authority key identifier: 16:46:46:B6:28:BC:27:D2:FB:26:B4:99:A5:ED:B2:E1:C4:C5:08:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkZGtii8J9L7JrSZpe2y4cTFCIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/pr_FFO8Cok_L92QgTD4Lemkf5tY.roa
Signing time: Sat 01 Jan 2022 01:51:23 +0000
ROA not before: Sat 01 Jan 2022 01:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.233.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9867631 (0x96916f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=164646b628bc27d2fb26b499a5edb2e1c4c5088a
Validity
Not Before: Jan 1 01:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6bfc514ef02a24fcbf764204c3e0b7a691fe6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:dc:9e:14:ad:9a:73:30:6f:22:e9:a7:ad:
77:55:cc:47:0a:2e:8d:bf:6a:11:96:98:0e:b0:f0:
ea:c0:22:b2:7e:41:aa:fa:8b:a1:e1:00:4f:b8:d7:
26:a6:61:ff:e8:2b:9a:9d:0f:fa:43:cf:e1:1e:16:
7a:3d:fe:57:0b:0f:58:1d:59:b1:83:a6:86:35:c3:
64:ce:63:61:05:9a:b5:3c:57:f4:3b:00:6e:87:bf:
df:7f:d0:a6:af:37:58:5a:54:51:10:94:d3:ed:46:
50:cd:02:03:70:89:7d:03:60:38:3d:d6:68:2b:2e:
bd:ed:cd:e8:15:4e:e6:29:ed:b9:dc:8b:b5:35:9a:
90:5f:ea:c4:a7:13:1f:77:bd:fe:0f:54:02:d5:63:
35:ec:6b:c6:1c:97:91:a2:4c:79:a6:ef:58:b8:9c:
78:29:6c:28:5a:8b:5f:f5:a2:db:8a:b4:c9:6e:16:
ab:de:c9:bd:ec:4f:d2:92:7e:c3:8b:d7:88:aa:a3:
1f:a8:df:d7:89:20:6d:b1:52:db:a2:6a:fd:8c:bf:
5e:44:a6:df:94:56:f7:f4:77:5a:5d:bf:c2:4d:8a:
97:de:ec:0f:94:e8:51:8d:32:6b:24:2c:10:23:c6:
4b:cb:f2:79:0e:0c:12:b8:bf:13:29:48:52:e8:54:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:C5:14:EF:02:A2:4F:CB:F7:64:20:4C:3E:0B:7A:69:1F:E6:D6
X509v3 Authority Key Identifier:
keyid:16:46:46:B6:28:BC:27:D2:FB:26:B4:99:A5:ED:B2:E1:C4:C5:08:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkZGtii8J9L7JrSZpe2y4cTFCIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/pr_FFO8Cok_L92QgTD4Lemkf5tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/FkZGtii8J9L7JrSZpe2y4cTFCIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.38.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b8:cd:91:ec:35:56:1d:dd:98:27:df:fd:a6:2b:4b:b0:b9:
33:24:5c:a3:0f:6f:a9:02:c2:b8:38:8a:15:4d:49:72:22:1a:
bd:d3:95:ba:05:6f:ba:7a:8f:8c:70:b8:13:fa:7f:35:6e:b5:
31:14:78:5e:05:1c:9c:74:31:f6:f0:a1:da:51:db:d4:a2:3b:
8a:96:3f:fb:43:00:04:0a:51:7c:2b:1c:7e:46:fc:d0:7a:54:
a8:86:66:ad:79:da:7a:df:73:b9:33:c2:ea:c2:a7:74:c0:36:
fc:4a:47:25:d6:af:5b:ca:bc:27:b9:ff:c6:4e:65:a7:cb:0b:
b0:fd:c0:7d:c1:ed:f9:e4:61:ba:c9:56:50:ef:f1:be:7e:78:
f5:ec:aa:de:e4:a6:2b:af:86:27:7c:3f:81:1d:46:12:cc:1b:
31:dc:b0:51:e5:88:0a:ac:4c:cd:a1:91:a2:bb:f9:9c:2f:0b:
5d:c0:02:89:99:18:93:b0:b2:77:bd:b9:fb:4b:48:1d:eb:5f:
b1:18:8a:8b:25:24:bd:44:88:07:ed:7d:2a:5e:cc:38:e2:8c:
9c:4e:75:66:c5:fc:42:6a:2c:3d:96:be:f9:ab:40:a9:a4:89:
ed:a3:34:07:19:b7:ca:57:2d:ad:44:42:63:81:0f:0e:71:90:
e8:aa:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-fra.rpki-client.org