Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/iNztie6jL9aMkEd0ClWg7oihro4.roa
File: iNztie6jL9aMkEd0ClWg7oihro4.roa (raw, json)
Hash identifier: 8whFT3X7sQkq9i+Oxzg+PRPHCeAmPkjTNvyfo5ECl9I=
Subject key identifier: 88:DC:ED:89:EE:A3:2F:D6:8C:90:47:74:0A:55:A0:EE:88:A1:AE:8E
Certificate issuer: /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial: EDDE92
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/iNztie6jL9aMkEd0ClWg7oihro4.roa
Signing time: Fri 18 Feb 2022 19:32:08 +0000
ROA not before: Fri 18 Feb 2022 19:32:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 62.3.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15589010 (0xedde92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
Validity
Not Before: Feb 18 19:32:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88dced89eea32fd68c9047740a55a0ee88a1ae8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:7d:cb:fa:45:d1:60:58:22:60:14:86:cf:
7d:1b:5b:13:d1:00:1d:f5:ff:5e:40:ad:15:41:5c:
36:41:0a:b0:f6:b6:d4:cd:87:29:fe:93:82:c9:7f:
57:56:ca:5d:b6:a3:a8:b4:d8:44:a7:10:d5:fd:5e:
6b:9f:7b:a0:36:e1:df:78:af:59:b4:02:fe:74:bc:
50:07:1d:2c:f2:0c:b8:9d:71:4c:33:61:43:5e:65:
aa:5f:50:aa:30:7e:6b:12:36:88:01:08:31:dc:ff:
75:d9:7f:0c:27:7f:e5:7a:33:b0:c5:55:d9:92:7a:
9a:be:70:32:8f:57:cf:f2:01:07:3c:33:ab:c9:bd:
69:a3:ab:39:8f:58:14:fe:8d:dd:2c:17:e1:25:6a:
2a:60:c7:61:4b:5e:e9:11:34:ea:66:d7:e8:82:f7:
d6:f1:96:46:4e:e9:58:ed:82:60:fc:27:92:f3:15:
e2:1a:60:14:99:df:30:74:7d:31:e5:43:6a:4a:be:
5b:28:ea:4a:5c:b0:d1:b5:98:a1:a5:dd:c3:4a:05:
69:d3:07:53:2d:06:0b:d5:22:a0:c2:80:33:c7:c9:
bd:92:62:2a:f7:4a:1e:30:8a:b0:e6:3a:40:58:81:
3a:63:21:16:e7:8c:04:30:6a:48:ca:30:ae:6e:02:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:ED:89:EE:A3:2F:D6:8C:90:47:74:0A:55:A0:EE:88:A1:AE:8E
X509v3 Authority Key Identifier:
keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/iNztie6jL9aMkEd0ClWg7oihro4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0c:9a:4f:ff:87:15:0c:7b:b2:36:bb:c7:e9:25:fa:d4:e6:
c3:b3:35:c2:94:48:3a:d2:51:ba:3a:cc:79:bd:d9:b3:0f:c9:
91:14:00:08:3b:23:04:c0:cd:c0:9a:10:d2:aa:46:aa:d3:f1:
0b:01:21:72:2c:dc:35:22:75:4f:44:c4:0e:1e:78:c7:53:3c:
9b:f6:40:0d:58:e6:ae:2e:78:4b:96:44:f7:3c:c1:38:34:be:
12:84:d2:26:0a:1c:46:4d:c3:4b:7e:4f:c8:7d:5e:d0:90:4d:
a7:5e:b8:ad:dd:40:31:19:86:14:04:21:8a:02:96:0c:a9:b5:
75:24:20:ad:c0:7a:c3:af:b3:38:bc:29:6f:6b:54:6a:2e:67:
8b:e6:fe:9c:38:c6:6a:8f:1d:4e:3e:68:00:e6:fc:6b:52:98:
92:7d:a4:5c:f0:53:6f:4b:1d:61:0f:44:2d:23:da:8a:68:bc:
dd:8b:dc:06:d8:47:14:3b:0e:1b:9d:19:0a:5f:4b:61:e3:ae:
df:be:8b:05:4e:82:5f:9f:db:af:fb:c1:87:db:f1:2e:eb:89:
36:ed:33:1c:73:a7:42:79:24:fd:55:33:59:92:37:d8:f3:fa:
c2:28:c6:07:73:9e:e6:f1:79:2e:86:c8:2e:ba:c9:63:b7:93:
30:c5:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org