Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/UkOFyHMgWC0f8nD0SSYr_UQSy1Y.roa
File: UkOFyHMgWC0f8nD0SSYr_UQSy1Y.roa (raw, json)
Hash identifier: Pz2mvEkp7cANF++lrKsWNfwuUblwK9SX0SRvdVnsfLc=
Subject key identifier: 52:43:85:C8:73:20:58:2D:1F:F2:70:F4:49:26:2B:FD:44:12:CB:56
Certificate issuer: /CN=3294455862b60844ada81040ad073ccaead5135b
Certificate serial: BB8C60
Authority key identifier: 32:94:45:58:62:B6:08:44:AD:A8:10:40:AD:07:3C:CA:EA:D5:13:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpRFWGK2CEStqBBArQc8yurVE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/UkOFyHMgWC0f8nD0SSYr_UQSy1Y.roa
Signing time: Sat 01 Jan 2022 02:00:12 +0000
ROA not before: Sat 01 Jan 2022 02:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 62.204.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12291168 (0xbb8c60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3294455862b60844ada81040ad073ccaead5135b
Validity
Not Before: Jan 1 02:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=524385c87320582d1ff270f449262bfd4412cb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:26:31:ab:a8:ac:c9:a0:38:6b:fd:1b:9c:
98:74:83:8a:fc:86:ed:55:7d:5e:f8:70:87:53:d0:
8d:d2:43:71:ef:e2:59:af:22:0c:28:d9:ae:5d:9d:
a8:de:20:a1:c2:84:b9:a2:1e:d4:9b:4c:2e:11:45:
1b:e2:1c:ea:00:92:50:b6:00:4c:8d:b1:6e:73:f2:
6d:b1:5a:96:b7:88:7a:5f:3e:79:4c:54:fa:e4:31:
02:ed:76:91:5b:c3:99:9a:bc:a3:02:ae:e5:61:74:
26:61:40:b1:fb:54:92:70:f3:48:8f:87:3e:0d:22:
df:44:4b:23:84:cf:4b:73:67:9e:5c:66:df:f3:21:
e7:8a:e8:6c:7a:a4:de:68:0a:7a:3c:3a:12:c9:c2:
17:24:a6:65:2f:b6:f7:f6:a3:87:b6:61:d2:b6:07:
4b:73:81:ea:dd:5b:e0:ea:29:92:7d:6a:b6:8d:37:
e4:d5:63:51:1e:74:24:4d:f7:5d:eb:8c:8c:d8:74:
98:f8:d0:10:82:48:c0:00:83:86:58:a5:39:43:dd:
87:c4:be:9a:51:15:7c:d8:42:a2:44:af:c1:94:4f:
f0:b0:e6:80:4e:7e:53:3e:2f:92:8d:ca:0f:f9:70:
e8:a6:6b:3c:78:84:57:c7:4e:a7:b6:b4:cd:e3:a9:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:85:C8:73:20:58:2D:1F:F2:70:F4:49:26:2B:FD:44:12:CB:56
X509v3 Authority Key Identifier:
keyid:32:94:45:58:62:B6:08:44:AD:A8:10:40:AD:07:3C:CA:EA:D5:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpRFWGK2CEStqBBArQc8yurVE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/UkOFyHMgWC0f8nD0SSYr_UQSy1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/MpRFWGK2CEStqBBArQc8yurVE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bd:9e:fe:57:5e:e2:81:06:2a:27:4b:9e:91:b6:76:79:8b:
54:c6:40:48:27:32:32:89:d1:7c:3b:86:95:ef:df:ff:90:cf:
b0:f6:d9:67:60:82:b1:c5:c9:29:06:73:23:2b:77:a7:4e:fa:
46:c0:d2:66:06:02:0f:06:dc:5f:61:af:0f:48:b0:50:ea:a9:
57:55:8a:84:fa:d0:af:88:10:8d:6c:e3:92:9a:3b:b0:cb:69:
f5:02:fa:5d:82:fd:26:35:88:96:db:60:83:f2:c9:c2:8e:bd:
42:7b:b2:d2:21:59:18:20:dd:2b:a9:93:3d:97:cc:1f:63:5d:
1f:92:cb:f5:0a:f8:32:a6:e4:3a:0c:27:e1:46:3d:2e:43:1e:
37:86:28:32:60:74:db:2b:18:d0:46:c3:be:0e:ff:60:c2:4e:
a4:92:ff:1e:46:34:a9:22:72:a0:8c:84:d2:22:03:6f:1a:23:
f7:8c:c6:ff:da:9b:ba:ba:05:25:e3:08:5a:2a:62:62:2d:90:
80:5e:b2:1f:83:e6:b0:a6:dc:0f:a2:bd:e5:31:ba:68:a5:cd:
c3:6e:74:97:ec:dc:b9:bb:57:22:da:5c:04:59:c1:02:3f:b3:
75:dc:8c:43:bd:de:ba:9c:63:2e:4a:20:32:a5:6f:b5:05:44:
f7:d8:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:12 2023 by rpki-client on console-fra.rpki-client.org