Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/t09AKywqfV5Fo7--4Y_Mly6JTtU.roa
File: t09AKywqfV5Fo7--4Y_Mly6JTtU.roa (raw, json)
Hash identifier: Nqf5MgYMz0KEwq+XqoSvfLzHAG/Z+qHIugRGx7QIHrA=
Subject key identifier: B7:4F:40:2B:2C:2A:7D:5E:45:A3:BF:BE:E1:8F:CC:97:2E:89:4E:D5
Certificate issuer: /CN=b9f59cb62a19320d82f9fc5d934ffcdc0e65e490
Certificate serial: 0181F465FAD0369BBF04BBD4F003BB232545
Authority key identifier: B9:F5:9C:B6:2A:19:32:0D:82:F9:FC:5D:93:4F:FC:DC:0E:65:E4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufWctioZMg2C-fxdk0_83A5l5JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/t09AKywqfV5Fo7--4Y_Mly6JTtU.roa
Signing time: Tue 12 Jul 2022 21:52:12 +0000
ROA not before: Tue 12 Jul 2022 21:52:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:fa:d0:36:9b:bf:04:bb:d4:f0:03:bb:23:25:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f59cb62a19320d82f9fc5d934ffcdc0e65e490
Validity
Not Before: Jul 12 21:52:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b74f402b2c2a7d5e45a3bfbee18fcc972e894ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:2e:99:7d:69:08:4d:8f:e7:3c:30:95:fb:
1f:51:fb:23:66:14:10:fe:59:8b:77:78:e2:cf:b7:
47:1f:5e:6e:99:ed:ef:bd:51:75:1d:8a:3c:08:cc:
91:0f:a0:3d:3b:34:f6:10:9e:5f:01:29:7c:94:cd:
a8:78:85:7f:09:a8:13:c8:c0:ef:94:1d:2a:2e:73:
ee:4f:e1:7a:da:e9:00:59:f7:75:5a:78:65:a4:67:
6b:04:72:b4:47:45:07:de:34:c2:32:af:7b:41:7a:
4b:6a:e0:88:27:d0:9e:17:32:21:89:cf:21:8d:0e:
f1:d0:fd:e8:7f:1f:eb:16:ae:a1:1e:30:e4:70:bc:
74:bc:f2:c7:a3:81:93:66:06:f5:64:4b:6b:f9:e4:
12:73:9a:ec:9a:4c:e2:5b:5e:02:fb:b2:0f:8e:00:
ec:f8:4e:9b:d1:0e:26:78:63:19:ba:42:07:7b:3f:
2c:55:79:49:6d:e5:e4:e2:0b:33:8c:ef:cb:11:3d:
0f:a9:35:e7:98:7d:a0:0f:90:b2:71:0f:ca:99:27:
ea:aa:d6:9b:1a:53:e5:e4:4d:8a:51:ef:52:46:d5:
b8:65:ea:8e:61:cf:ee:bd:5e:51:cf:8d:af:c9:53:
b5:9a:78:23:87:71:c2:ee:d8:aa:c5:b9:fb:01:47:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:40:2B:2C:2A:7D:5E:45:A3:BF:BE:E1:8F:CC:97:2E:89:4E:D5
X509v3 Authority Key Identifier:
keyid:B9:F5:9C:B6:2A:19:32:0D:82:F9:FC:5D:93:4F:FC:DC:0E:65:E4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufWctioZMg2C-fxdk0_83A5l5JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/t09AKywqfV5Fo7--4Y_Mly6JTtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/ufWctioZMg2C-fxdk0_83A5l5JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d9:09:1a:81:cd:eb:7a:b9:b1:8a:35:71:7b:39:95:44:6f:
a8:a1:14:ad:8a:21:27:d3:93:fe:ee:8e:fc:95:60:85:e8:13:
ca:fb:53:1f:55:ea:4a:0c:5d:0a:52:ae:56:06:0c:ed:1c:aa:
bc:27:2d:78:7e:9e:b6:60:4b:5c:5d:78:b1:31:24:ef:bd:4a:
58:ae:18:d5:7a:c0:a2:05:db:a9:20:e9:f7:d4:f0:e4:da:8c:
d1:e2:32:a3:cd:18:af:4b:2f:17:55:de:a3:0f:78:1f:6c:bb:
64:cc:72:9d:cb:a6:ed:18:71:48:be:b8:3d:a9:b5:d2:b5:9f:
51:5d:70:c5:77:ac:8e:35:0d:c8:90:29:ac:2b:fc:4a:23:61:
ba:5d:eb:cc:ef:f7:22:c3:32:e1:ad:23:38:07:a0:b2:fa:ee:
3a:ad:a6:51:93:9a:b8:58:ca:6b:e5:b1:52:4d:8f:6a:6c:cf:
00:22:2f:0e:a2:bd:ef:d4:a8:e6:99:03:2e:f4:29:c4:76:93:
2a:c0:f4:2c:42:5d:42:cc:a8:5c:38:d9:56:61:9e:66:6d:84:
ce:2f:2e:75:86:e2:dd:21:8d:25:5b:2a:7a:79:8e:bd:fc:7e:
56:b8:78:7c:94:98:bf:09:c8:08:aa:04:5f:ef:6d:8f:d8:af:
cd:94:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-fra.rpki-client.org