Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/pabCzVdcKFejIyO_H7AMFhyJxGk.roa
File: pabCzVdcKFejIyO_H7AMFhyJxGk.roa (raw, json)
Hash identifier: g7MUKJn7c5+OJHi0NcWolBopFAl/PKoIsYLSvinvUqU=
Subject key identifier: A5:A6:C2:CD:57:5C:28:57:A3:23:23:BF:1F:B0:0C:16:1C:89:C4:69
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01827D4BCF5312AC61F96AFCB86A67C43C68
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/pabCzVdcKFejIyO_H7AMFhyJxGk.roa
Signing time: Mon 08 Aug 2022 11:51:36 +0000
ROA not before: Mon 08 Aug 2022 11:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 86.62.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:4b:cf:53:12:ac:61:f9:6a:fc:b8:6a:67:c4:3c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Aug 8 11:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5a6c2cd575c2857a32323bf1fb00c161c89c469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:b5:c2:a5:78:f7:35:ac:6f:25:8e:73:6f:
b1:43:9d:32:5c:68:94:93:8f:a3:85:b9:23:f9:ce:
91:db:ec:cc:6d:25:2d:0e:4a:2a:9e:87:23:11:76:
a9:7f:b6:f5:ed:43:b0:ff:8d:05:e7:01:cd:ea:0b:
23:ea:5d:75:3e:28:54:de:a4:c1:b5:fe:db:51:c0:
cc:8f:da:14:e8:4f:d6:ff:3c:7b:1e:4f:40:7d:c9:
c6:72:44:9c:3b:9a:fb:6f:77:6a:21:00:86:f7:26:
92:79:ed:b0:4e:ff:8c:fa:f6:8a:07:73:09:bf:b2:
78:2e:bb:dd:43:00:5a:cd:6a:f0:b0:73:86:17:28:
0a:f9:a1:7c:c4:30:f0:d5:a6:e0:28:c0:db:7f:98:
c4:e9:11:de:9d:65:e3:ef:46:4a:5f:b0:bf:8c:c8:
9b:ab:32:04:83:c0:29:9c:8c:d8:a4:af:52:55:4e:
a0:5f:9b:c3:ff:e2:1f:4b:94:c4:70:e4:de:cb:9b:
05:68:6d:90:7d:a8:1a:12:5c:ca:ea:88:97:bf:27:
f1:5c:d5:fd:a9:c4:3e:93:ba:04:23:95:02:40:33:
14:d0:02:58:fb:cd:42:29:27:c7:10:ae:1c:ae:03:
60:3f:58:9b:d5:5f:09:2b:54:4d:9f:6f:60:5d:fa:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:C2:CD:57:5C:28:57:A3:23:23:BF:1F:B0:0C:16:1C:89:C4:69
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/pabCzVdcKFejIyO_H7AMFhyJxGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.31.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cb:36:93:d5:07:18:8b:5d:6b:29:dd:17:86:80:1b:55:57:
34:57:01:d9:93:f2:e7:8d:65:71:69:8f:b7:8e:77:7b:52:fb:
1a:b7:90:d1:68:45:12:6f:63:43:de:4d:8d:11:7d:34:02:e1:
6c:1d:24:ee:9b:b4:a0:27:c8:62:58:dd:fe:f9:07:5f:d1:f4:
e6:be:85:0c:6c:1c:67:68:3f:5f:24:80:ca:03:74:a3:49:c9:
9c:11:9c:78:c9:c2:a5:a2:27:95:23:e6:ab:71:40:a9:cf:58:
a2:8d:f3:ac:dd:de:f5:a9:5a:cf:90:4c:78:b8:22:61:78:aa:
0f:b7:ac:0c:fb:12:0e:9a:a3:ce:8f:06:e9:9f:92:5f:f1:ae:
a8:78:88:48:21:7e:7b:a8:de:fd:ae:e3:22:5e:d0:35:ad:a1:
93:73:bb:bf:41:67:f6:bf:a4:85:fd:1c:d7:7f:3c:be:ec:0c:
de:90:61:1d:09:ca:3a:b4:9c:29:df:0b:bf:41:57:1f:9b:38:
15:0b:23:8e:b7:a7:7a:26:cc:e2:29:f4:c7:df:e7:e4:83:1a:
0e:85:81:b1:53:72:d5:31:07:98:87:fc:18:43:7a:49:ac:86:
f8:d0:5e:b8:5b:16:c1:f2:67:78:1d:51:19:f5:40:ce:33:ce:
1a:a4:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-fra.rpki-client.org