Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/qFiR55hlvo3Rs67p5I_OD7SIcg8.roa
File: qFiR55hlvo3Rs67p5I_OD7SIcg8.roa (raw, json)
Hash identifier: kad7KKJjt6S+vspQqpmP0RmstCDQ+esBa5JJRyw6wak=
Subject key identifier: A8:58:91:E7:98:65:BE:8D:D1:B3:AE:E9:E4:8F:CE:0F:B4:88:72:0F
Certificate issuer: /CN=87c232d3f005ca745d818cd6439e8087905010e4
Certificate serial: 849884
Authority key identifier: 87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/qFiR55hlvo3Rs67p5I_OD7SIcg8.roa
Signing time: Sat 01 Jan 2022 01:57:55 +0000
ROA not before: Sat 01 Jan 2022 01:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.3.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8689796 (0x849884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c232d3f005ca745d818cd6439e8087905010e4
Validity
Not Before: Jan 1 01:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a85891e79865be8dd1b3aee9e48fce0fb488720f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:58:70:0e:56:b6:9c:3b:d2:dc:5d:d8:3a:
e4:52:70:5b:28:22:02:ad:de:eb:34:2b:b5:9d:63:
ce:de:34:f0:02:e7:1e:05:69:b2:be:e1:3b:10:07:
31:00:03:41:31:a6:be:a3:99:e1:07:ac:61:0c:2d:
4f:97:71:5c:9d:c8:bf:e6:e0:d2:73:2f:6e:be:1d:
32:8e:ce:e7:82:6b:56:e8:00:25:c7:47:0a:b1:01:
2d:5f:16:8d:2c:ea:0a:83:e9:1b:db:2e:82:04:b4:
85:a2:be:86:c1:96:40:8e:e5:f2:05:7e:f2:c4:4c:
85:aa:02:e3:d6:0e:f7:9e:da:d7:44:e4:6b:75:de:
4e:93:67:46:91:0d:40:57:8d:2b:6a:71:c4:70:35:
a5:9b:3a:62:25:d7:61:bf:e3:af:b7:0a:f1:68:9f:
72:be:32:01:45:03:20:21:bf:ce:dd:1d:0f:b1:04:
3f:08:2d:92:bc:a0:3e:9c:92:21:f5:6e:33:39:97:
54:33:db:cf:20:b7:02:3e:b5:96:f3:76:59:e3:ae:
e1:6b:f8:1e:1a:34:62:40:2d:f6:b9:38:bc:d4:bc:
0b:51:a6:f5:e0:80:25:c1:7b:73:8f:e8:cc:c2:75:
26:91:d8:05:88:2a:8e:3e:a3:1f:1b:68:9b:4b:9a:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:91:E7:98:65:BE:8D:D1:B3:AE:E9:E4:8F:CE:0F:B4:88:72:0F
X509v3 Authority Key Identifier:
keyid:87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/qFiR55hlvo3Rs67p5I_OD7SIcg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.51.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b9:42:b9:55:b4:b6:6b:2a:22:96:53:da:9b:40:03:ff:9e:
1b:ea:33:85:b4:d7:a2:4e:9b:cc:3f:77:ea:a3:85:4b:04:b5:
71:e7:51:ac:be:b8:ab:c4:d2:8a:c3:9a:02:44:d8:c6:31:b3:
44:34:f6:b5:4c:b5:ca:f8:a7:17:e9:5f:69:4e:ee:c2:0a:82:
28:c1:15:ce:30:63:19:ab:96:b5:f4:ba:11:48:16:7d:94:fa:
36:67:2f:68:5a:bc:ba:e0:15:ed:e6:ba:64:42:3d:eb:22:b2:
58:f7:6f:67:af:19:ee:20:6d:13:ef:4a:72:e7:e5:e1:73:66:
67:21:fd:63:4a:00:0d:69:d2:46:dd:9c:ca:9c:40:39:00:4c:
aa:b6:76:5b:65:61:8f:ba:58:c7:0d:36:df:39:a7:da:6d:c8:
4d:2c:e1:93:30:a2:d5:87:33:43:f8:d7:e1:f7:cc:f1:38:72:
ce:e1:68:22:fe:4d:69:b8:a0:d5:af:6e:28:21:af:c9:45:6a:
eb:2c:a6:a2:b2:8f:83:d9:78:26:6e:c9:67:89:b3:3a:1f:af:
d6:62:68:3e:31:a3:f6:9c:d2:a0:79:a8:34:73:5f:ce:ef:31:
32:37:a0:a0:ed:12:f6:74:29:e5:63:04:d8:21:06:fa:2b:24:
1f:41:c7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:48 2023 by rpki-client on console-ams.rpki-client.org