Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/qWADbwI_3V3a_iwXqcnOaZy3hB4.roa
File: qWADbwI_3V3a_iwXqcnOaZy3hB4.roa (raw, json)
Hash identifier: ho15EVzQBeiUvC9cqpTiS8Ff25hp8DDf7q0PC/E63R8=
Subject key identifier: A9:60:03:6F:02:3F:DD:5D:DA:FE:2C:17:A9:C9:CE:69:9C:B7:84:1E
Certificate issuer: /CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Certificate serial: 1A021896
Authority key identifier: DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/qWADbwI_3V3a_iwXqcnOaZy3hB4.roa
Signing time: Sat 01 Jan 2022 07:01:17 +0000
ROA not before: Sat 01 Jan 2022 07:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34558
IP address blocks: 62.173.0.0/20 maxlen: 20
62.173.16.0/21 maxlen: 21
62.173.13.0/24 maxlen: 24
62.173.24.0/21 maxlen: 21
62.173.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436344982 (0x1a021896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9c7e17781e628ef6eb1c44bcdcb2e335621d2f
Validity
Not Before: Jan 1 07:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a960036f023fdd5ddafe2c17a9c9ce699cb7841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:be:d5:4e:25:89:aa:4f:93:1e:c1:97:19:
b6:18:fb:b4:44:8b:5d:32:ed:0d:78:ca:ae:b5:87:
44:f7:3b:f8:e3:19:4d:12:db:8a:06:a7:f4:e3:68:
4e:c5:a8:a4:24:5c:5e:0b:69:76:c2:8f:f2:98:2c:
0c:c8:dd:e5:c9:32:55:a2:9e:4b:0e:84:11:09:42:
5b:00:bf:f9:88:e5:f8:46:e3:32:aa:9b:20:81:d9:
03:b1:0f:6f:fc:70:60:c7:2b:98:03:b9:6a:72:92:
a1:4d:5c:cf:76:16:c4:eb:4a:34:85:08:c4:3d:86:
c3:e0:95:a1:08:40:ad:34:e8:7f:72:56:be:ef:0d:
2f:29:9d:86:9a:01:5c:56:68:c8:df:20:a3:2b:47:
cc:0d:67:ec:67:a0:ae:94:7e:35:57:12:61:4c:16:
99:7c:8c:89:c4:c9:30:ed:7e:db:ea:f2:c1:90:bc:
26:f3:6e:b2:79:39:f0:53:88:b8:06:a9:a6:54:88:
cf:93:69:91:bc:b6:f3:0e:32:16:40:c2:73:13:07:
1d:41:de:18:ba:13:5c:3e:c3:62:c9:5f:e5:d4:52:
9b:4a:e8:30:79:1d:6c:cd:b9:25:f3:c1:65:7e:5d:
8a:05:5a:54:5b:c4:ae:48:52:84:01:bc:c0:5a:8d:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:60:03:6F:02:3F:DD:5D:DA:FE:2C:17:A9:C9:CE:69:9C:B7:84:1E
X509v3 Authority Key Identifier:
keyid:DC:9C:7E:17:78:1E:62:8E:F6:EB:1C:44:BC:DC:B2:E3:35:62:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Jx-F3geYo726xxEvNyy4zViHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/qWADbwI_3V3a_iwXqcnOaZy3hB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/983c84-ac53-4fe6-a06a-691777ef64b7/1/3Jx-F3geYo726xxEvNyy4zViHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:44:a1:23:c1:dc:ca:c9:1d:ae:f9:aa:45:53:2c:11:86:2c:
56:74:95:07:d4:2c:98:e5:43:c5:87:33:97:18:0c:21:93:b3:
c2:c0:10:ac:a1:10:a8:24:92:19:28:a2:04:39:ab:76:63:66:
08:a8:26:f3:ad:d9:1e:f2:50:d1:6f:4c:1f:34:00:af:9e:54:
81:6d:b0:97:93:0c:74:85:d6:a2:c1:a0:02:5a:37:15:34:77:
65:d5:12:86:35:56:aa:44:ea:da:f9:0b:12:3d:25:92:92:36:
7e:0a:e6:f1:9c:76:7e:43:3a:c4:0a:95:c9:33:67:c7:bf:b2:
fd:c5:0c:8e:e7:52:c7:99:b6:db:1c:35:2d:f3:2c:48:9d:af:
3a:d1:9e:70:0f:10:c9:17:c9:a5:a1:89:84:07:38:78:75:94:
6a:e4:6d:84:1d:2f:0c:7c:17:66:02:65:19:da:39:5d:68:54:
1f:48:4f:7b:be:7f:6a:d3:fd:4d:9a:3a:53:a8:1b:e8:b7:6c:
20:af:75:2b:8f:b9:ad:6f:32:8e:b8:a9:5f:1c:90:66:32:d3:
9c:b3:4a:54:08:9c:ad:9c:b3:9a:53:59:8f:1c:8e:7d:01:2c:
16:be:f6:2d:07:81:98:0d:cb:ab:f4:eb:da:26:97:21:f7:e0:
82:7e:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:33 2023 by rpki-client on console-ams.rpki-client.org