Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/CH3n3Un00gokypxw4VySaYWls7c.roa
File: CH3n3Un00gokypxw4VySaYWls7c.roa (raw, json)
Hash identifier: NSm0LQpB+XfSGMHXILwtv9O3FN3/k1Uj/SWwvCgPfN8=
Subject key identifier: 08:7D:E7:DD:49:F4:D2:0A:24:CA:9C:70:E1:5C:92:69:85:A5:B3:B7
Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial: 01A97EA2
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/CH3n3Un00gokypxw4VySaYWls7c.roa
Signing time: Sat 01 Jan 2022 12:57:24 +0000
ROA not before: Sat 01 Jan 2022 12:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50010
IP address blocks: 62.231.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27885218 (0x1a97ea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
Validity
Not Before: Jan 1 12:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=087de7dd49f4d20a24ca9c70e15c926985a5b3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:eb:d2:83:b5:8b:b1:05:0f:1f:79:bd:c6:
aa:5c:c5:25:f1:2b:65:c3:27:56:a3:1f:83:31:1a:
2f:2d:b8:7c:ef:dd:f6:cf:00:19:34:5f:02:00:79:
6f:6f:07:e0:b0:c2:8e:88:51:50:41:26:c0:c6:80:
0e:6e:09:b0:86:7b:54:8f:bb:8a:6d:10:d2:d1:b7:
17:00:45:d4:78:6b:e3:d4:41:ab:c6:ce:66:bd:b8:
19:3e:26:66:3c:2d:f6:20:19:77:63:3d:97:0b:5f:
a4:a6:02:af:17:26:d2:07:21:3e:1e:0e:a8:fa:a9:
44:18:30:a8:86:24:74:22:0c:de:1e:10:ac:e6:6d:
41:e2:e7:d8:37:1e:37:60:b0:a7:d9:30:0d:66:3a:
46:34:31:69:b9:38:41:a8:23:0a:9e:7f:65:dc:62:
6b:69:a0:3d:bb:88:f0:19:b5:6a:96:07:5b:98:cb:
0d:0e:3a:b7:2f:cc:42:b7:88:43:b5:64:40:2a:27:
74:a6:29:4d:1f:7f:dd:4a:c2:b4:ff:ef:82:a7:9c:
f1:99:e7:93:48:2f:81:1f:b5:f4:9e:07:5f:ce:9c:
7a:96:cc:6a:3d:16:d1:50:2d:ca:36:7d:43:38:c6:
04:91:cc:98:a6:5c:3c:4c:6c:27:4b:5d:71:f8:25:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:E7:DD:49:F4:D2:0A:24:CA:9C:70:E1:5C:92:69:85:A5:B3:B7
X509v3 Authority Key Identifier:
keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/CH3n3Un00gokypxw4VySaYWls7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.248.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e8:b5:f2:f9:6a:ce:54:7b:20:b8:ed:b6:9c:15:e4:5f:f4:
b9:56:d7:c4:46:36:00:9b:fd:dc:db:4d:f6:3e:6f:f3:e2:25:
1d:71:d7:2f:24:00:a2:36:9c:48:f1:61:d7:a5:8d:fc:bb:68:
08:d3:cd:b4:91:c5:ee:0a:48:43:47:47:98:be:e5:a1:52:4e:
9d:33:64:42:bd:8b:fd:48:64:e4:88:d8:88:c2:c9:e2:95:81:
f6:91:3b:13:8f:29:6c:87:3e:ba:48:24:5e:fd:8a:3b:bf:20:
6c:5e:50:4b:88:83:3d:4b:dd:39:c1:08:0e:cd:88:32:8b:06:
c8:b7:1f:62:f6:78:d8:2b:e4:6c:1d:31:a0:41:f9:e1:16:78:
15:e9:49:e9:34:4f:54:0e:4b:ed:23:4d:f8:22:67:1b:9a:d0:
cb:e8:0e:db:68:99:93:1d:b9:4d:99:68:aa:a7:92:72:12:d0:
4d:8c:ff:f3:b2:de:b2:6e:ad:ff:8a:3d:0e:bc:15:ac:29:77:
a7:37:73:40:87:a2:05:ca:4c:ea:63:9d:de:06:12:32:ba:bf:
38:30:a3:ae:b2:b7:ef:8e:c7:bc:49:76:8d:cd:85:11:4a:b5:
93:ec:46:b1:f5:f5:73:95:53:79:b3:a4:32:44:ec:b9:dd:b4:
d6:07:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org