Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/F-Xh7eIhMEbvRNOe8NDD5N4ZZV4.roa
File: F-Xh7eIhMEbvRNOe8NDD5N4ZZV4.roa (raw, json)
Hash identifier: IFmlN1HKJZCljJuqepd2t6uumNfjE3gNF9DXC0n8r8Q=
Subject key identifier: 17:E5:E1:ED:E2:21:30:46:EF:44:D3:9E:F0:D0:C3:E4:DE:19:65:5E
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01828B9CC3AC486F484A81FE6D1C90C6F301
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/F-Xh7eIhMEbvRNOe8NDD5N4ZZV4.roa
Signing time: Thu 11 Aug 2022 06:34:42 +0000
ROA not before: Thu 11 Aug 2022 06:34:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56804
IP address blocks: 62.0.4.0/24 maxlen: 24
147.234.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:9c:c3:ac:48:6f:48:4a:81:fe:6d:1c:90:c6:f3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Aug 11 06:34:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17e5e1ede2213046ef44d39ef0d0c3e4de19655e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:2a:7e:5f:9d:b4:56:3f:68:ef:48:41:5a:
3b:e0:d0:45:76:83:76:9c:69:af:45:bc:ae:f6:6d:
22:3d:03:ff:ca:41:2a:60:3c:12:6a:3a:7b:00:cb:
74:05:78:ef:52:b6:e1:7e:fc:f4:1a:50:85:26:48:
34:53:34:09:8a:a2:5a:c4:54:9d:fb:16:6e:ac:58:
2d:af:89:2b:28:17:af:dc:1b:bd:c1:5e:16:11:05:
e5:be:b6:f4:a0:e9:f0:1b:af:21:1e:b9:4c:9b:d2:
84:5c:74:13:4d:79:28:7b:0d:f1:b1:3d:75:04:8c:
36:3c:0d:b7:33:75:d1:51:6d:25:25:cf:60:37:42:
e7:82:fe:51:1e:c5:4e:ef:39:f5:41:3c:e6:00:9f:
99:10:2b:f3:a2:43:86:ab:58:d2:0c:89:8f:a3:62:
0e:4a:36:0b:39:2c:7d:1f:4d:d5:78:3f:66:0a:d4:
76:d3:f1:8a:f7:0c:77:da:19:3b:b4:8f:54:15:ad:
21:6b:26:26:d7:e9:b9:ff:db:bf:43:b7:4a:c8:b2:
e3:7c:c7:9d:ba:fc:49:0c:ab:00:0a:5e:6a:95:e7:
4d:99:05:37:9a:3e:7c:b8:7e:76:67:2c:ba:85:ad:
53:38:2a:53:7d:2f:ed:6f:6e:ef:cd:a9:34:4e:1d:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:E1:ED:E2:21:30:46:EF:44:D3:9E:F0:D0:C3:E4:DE:19:65:5E
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/F-Xh7eIhMEbvRNOe8NDD5N4ZZV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.0.4.0/24
147.234.42.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a3:d8:ae:63:d0:28:3e:ce:44:31:33:9f:45:25:1d:9d:f2:
5d:c8:1b:6b:61:e8:cf:93:c4:b7:52:94:3b:b1:02:22:71:ca:
18:27:0a:b2:bd:4d:65:33:20:44:31:49:f2:3a:c0:15:85:19:
75:f3:96:f8:db:89:e4:58:4b:7f:f6:9b:e3:8c:cc:ab:36:4f:
ee:cb:ea:61:b8:2b:e6:cb:f8:1a:52:de:d9:4e:ae:7b:c8:da:
d8:c8:c8:18:ea:ce:d4:c5:19:e7:a3:aa:43:10:d8:56:5b:35:
46:6f:69:14:cb:52:2e:7a:0c:c6:37:6f:86:02:7e:9b:82:9f:
fb:7f:8a:df:8e:6b:c0:3f:32:fb:a5:51:ca:73:53:25:e2:4b:
a1:0b:19:15:ae:12:e3:e4:e7:4f:94:5f:22:27:7d:ea:0c:5d:
04:f4:29:c0:2b:55:0f:1d:4f:02:8c:cf:38:d9:17:d0:ab:64:
60:06:a2:98:21:30:98:ab:b3:d8:ed:30:96:a3:2a:e3:5c:32:
76:75:c3:01:47:0a:32:f1:60:58:80:d7:89:1f:e7:e5:97:e9:
29:11:ed:70:a3:5b:e0:5e:61:47:4f:52:39:85:4a:5f:88:69:
a3:2b:d6:57:e3:b0:a0:1f:1d:88:0a:40:15:7b:57:66:79:47:
a1:55:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:56 2023 by rpki-client on console-fra.rpki-client.org