Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/62pab6q24b2SwfzNb9xh5cC-CQ0.roa
File: 62pab6q24b2SwfzNb9xh5cC-CQ0.roa (raw, json)
Hash identifier: W5mvlw5xH++dbhs6Jd1WuZcy6bwaHr8R6/tpfGZdE14=
Subject key identifier: EB:6A:5A:6F:AA:B6:E1:BD:92:C1:FC:CD:6F:DC:61:E5:C0:BE:09:0D
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 0A52894D
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/62pab6q24b2SwfzNb9xh5cC-CQ0.roa
Signing time: Sat 01 Jan 2022 12:58:08 +0000
ROA not before: Sat 01 Jan 2022 12:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8194
IP address blocks: 212.70.160.0/19 maxlen: 24
31.24.192.0/21 maxlen: 24
195.244.144.0/20 maxlen: 24
2a00:1780:dd00::/40 maxlen: 48
2a00:1780::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173181261 (0xa52894d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 12:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb6a5a6faab6e1bd92c1fccd6fdc61e5c0be090d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:ae:23:b9:89:f5:75:c5:90:89:45:fd:1a:
3e:48:91:52:6a:68:0c:7c:55:7b:25:0b:13:a9:b1:
21:3b:43:ee:96:75:11:2b:5f:5c:e6:a8:46:e6:ea:
5f:4f:d2:56:85:44:50:bd:e1:56:00:94:2f:59:b3:
59:a5:0c:e9:3d:eb:50:fe:1e:92:ce:ca:41:db:a9:
d3:93:f5:83:7d:f3:c3:4c:3a:46:62:37:98:93:4a:
a1:dd:7e:b1:20:47:bc:1b:ee:80:26:c6:17:78:5d:
43:d9:fc:d7:ad:b8:10:6b:fe:78:24:41:2e:a9:f0:
21:6e:f5:69:7c:93:30:cf:1e:55:0d:99:5d:c2:0c:
b4:0a:13:68:42:28:b4:3d:e4:5f:b4:e2:dd:9b:dc:
6d:ab:5f:a4:14:68:c5:26:a4:b2:b8:a7:4a:cc:d1:
52:aa:30:95:0c:fc:dd:05:46:9d:5e:55:9c:37:42:
8c:e0:06:bb:ab:12:9f:9b:8f:d4:cd:87:c1:38:94:
38:94:e2:ac:46:7c:cf:ab:6b:e2:36:0c:59:9d:2e:
72:b3:1d:63:fe:b7:2a:35:d3:5a:68:5e:4c:6c:99:
8b:9f:67:aa:8d:86:7f:3f:e1:56:1d:82:2b:a0:46:
b1:72:a8:db:19:c7:b8:4f:1a:91:b7:78:e5:72:5c:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:5A:6F:AA:B6:E1:BD:92:C1:FC:CD:6F:DC:61:E5:C0:BE:09:0D
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/62pab6q24b2SwfzNb9xh5cC-CQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.192.0/21
195.244.144.0/20
212.70.160.0/19
IPv6:
2a00:1780::/32
Signature Algorithm: sha256WithRSAEncryption
1d:e0:fd:16:5b:44:95:43:b7:2c:c6:5e:71:1e:ee:3b:51:fa:
6b:7a:1d:0c:13:e8:32:83:5d:03:a3:e7:39:93:17:8c:59:20:
1d:e3:aa:45:a0:d5:b4:d1:eb:09:3b:4b:73:12:60:cc:5c:0c:
01:bc:9a:37:3c:c0:38:8d:63:40:ca:dd:91:b7:ea:6d:ed:db:
bf:84:db:5e:99:b4:c3:6c:1e:70:79:df:3f:b1:99:b7:5b:87:
c8:60:77:a1:56:db:94:5d:96:6c:85:c9:8b:f5:a1:1a:43:fb:
06:c9:a8:1b:bd:c7:2f:36:dc:ab:e7:64:2c:e4:91:2e:93:cf:
77:9e:a1:d3:9e:8e:fa:0e:53:a4:0d:89:c2:2a:42:ee:c8:5f:
e2:b1:8d:1c:23:37:85:0f:f4:2d:a5:0b:b4:20:a7:e6:ca:58:
dd:f0:f0:95:51:c3:b9:e5:fe:01:a1:58:31:ca:9f:f5:de:8c:
c3:8a:2b:c9:0a:68:f8:8d:95:5b:9d:9a:24:52:3b:e4:65:30:
38:47:1b:74:8c:9d:71:21:c2:50:4f:5c:51:80:b7:46:d7:ee:
5c:45:79:b9:64:41:6a:17:40:22:b3:4f:a4:68:89:00:15:fc:
48:a3:30:04:28:54:5f:b0:28:30:4c:5c:e0:b0:d1:3e:a0:8f:
35:b5:f7:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:51 2023 by rpki-client on console-fra.rpki-client.org