Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/BuGrdtsISIdW7uBOccqy0y1ZK_k.roa
File: BuGrdtsISIdW7uBOccqy0y1ZK_k.roa (raw, json)
Hash identifier: aw041FE7ojr+DxGeklGOT0j4msDKEZPsjYFkZC0I89A=
Subject key identifier: 06:E1:AB:76:DB:08:48:87:56:EE:E0:4E:71:CA:B2:D3:2D:59:2B:F9
Certificate issuer: /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial: 87C80E
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/BuGrdtsISIdW7uBOccqy0y1ZK_k.roa
Signing time: Sat 01 Jan 2022 02:53:36 +0000
ROA not before: Sat 01 Jan 2022 02:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 62.3.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8898574 (0x87c80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
Validity
Not Before: Jan 1 02:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06e1ab76db08488756eee04e71cab2d32d592bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:db:31:52:14:aa:2d:68:e7:fa:9c:c4:dc:
f3:43:80:92:09:4f:01:56:6a:00:66:ac:3e:3c:eb:
12:4f:03:4f:16:de:69:95:4b:ae:1e:f9:93:a8:e2:
c2:da:c5:90:19:bf:a5:7a:f5:af:60:a4:b3:77:d0:
ee:f9:d1:75:69:16:b0:4e:0c:c2:14:4e:74:6f:c7:
76:7a:9d:83:ea:4b:38:94:69:cc:69:61:d7:ef:55:
03:70:f0:04:04:24:cf:0e:f1:86:31:e4:14:f2:59:
8a:01:b5:35:b7:9f:2b:b8:40:46:a6:b8:1b:15:9c:
e6:7c:83:4b:75:32:77:f1:ca:54:40:c7:a0:ea:eb:
b9:9c:06:d5:6e:ef:81:79:b8:87:37:62:4d:f2:5b:
99:62:05:a9:7f:a0:ff:d1:93:01:70:cf:64:99:fe:
1a:3e:bd:66:bc:b3:cc:04:a4:ca:26:e6:0e:c9:0f:
34:80:c3:48:7f:7b:ed:48:80:36:e1:9e:2a:65:0d:
4d:c0:aa:4c:6d:76:48:19:ca:ce:99:72:91:38:e3:
96:f3:13:d7:a5:9c:b7:27:1a:12:48:30:f1:59:9d:
cc:81:17:f9:91:90:f1:29:e7:9d:1d:72:7e:5e:34:
c3:8b:9e:82:0f:3c:c6:af:f3:07:2e:bd:05:40:cc:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E1:AB:76:DB:08:48:87:56:EE:E0:4E:71:CA:B2:D3:2D:59:2B:F9
X509v3 Authority Key Identifier:
keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/BuGrdtsISIdW7uBOccqy0y1ZK_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.26.0/24
Signature Algorithm: sha256WithRSAEncryption
86:19:6b:cb:e3:87:e5:4f:54:86:20:6f:6c:65:55:03:6c:32:
3d:81:b3:55:7d:62:27:bd:28:77:7a:f1:35:04:22:c6:38:0b:
6c:91:62:67:7e:ef:a4:2e:77:9e:f0:3e:f5:60:73:ba:51:26:
d5:57:0d:fb:67:65:02:12:01:2e:a7:cd:73:a5:25:80:a3:e6:
b1:06:37:a3:48:9f:83:41:88:1c:c7:24:ce:61:52:95:92:a4:
69:10:04:d0:3b:9c:6b:e7:37:97:8c:65:36:de:0e:ac:39:7a:
7c:55:8f:a7:dd:13:fd:c8:2e:d2:6a:99:16:b2:59:0c:19:a6:
7d:8d:15:ff:a2:0e:95:3e:d6:65:c8:ba:34:97:f9:da:53:74:
b8:7d:96:ba:05:60:f8:20:95:65:d7:e4:52:1a:7e:5f:f0:9d:
25:85:88:44:13:27:2d:bc:06:4f:42:a9:4a:83:21:53:da:a7:
3b:ac:78:04:ef:50:8e:6b:ba:9d:90:f5:68:81:51:ab:6f:1f:
55:e2:10:e7:b2:0a:f4:ad:2f:4c:f8:ce:e0:27:1a:89:a5:51:
c5:4e:31:f8:59:7f:b4:ab:68:bf:d4:15:03:fc:d5:11:4d:4b:
27:5c:d0:69:91:2d:35:f5:30:38:90:0e:13:09:a3:21:c6:31:
79:e2:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org