Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/yrIIWkZ7TP_uuBSNyLk7rZv_eh0.roa
File: yrIIWkZ7TP_uuBSNyLk7rZv_eh0.roa (raw, json)
Hash identifier: C6mo9ADuRBd1rPX6627TvaL1rto3Dwre8B3j3MfaUXQ=
Subject key identifier: CA:B2:08:5A:46:7B:4C:FF:EE:B8:14:8D:C8:B9:3B:AD:9B:FF:7A:1D
Certificate issuer: /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial: 017EE2F9
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/yrIIWkZ7TP_uuBSNyLk7rZv_eh0.roa
Signing time: Fri 22 Apr 2022 07:25:28 +0000
ROA not before: Fri 22 Apr 2022 07:25:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 62.3.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25092857 (0x17ee2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
Validity
Not Before: Apr 22 07:25:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cab2085a467b4cffeeb8148dc8b93bad9bff7a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:68:11:8d:51:4d:d6:f1:bb:a6:ba:f6:cd:3c:
3e:98:09:e2:b7:9e:e8:63:59:57:95:fb:c9:c5:3f:
39:dc:91:ed:12:f4:0c:73:2f:f8:1d:a9:f8:8d:e6:
6f:0c:97:f1:23:1b:7a:aa:98:af:1c:58:e7:c4:30:
54:d8:d6:c6:65:72:35:12:10:4f:c4:e3:16:f6:b0:
c4:6c:9f:90:34:33:b6:a1:c1:2a:c8:df:f6:c0:28:
b4:98:c9:0b:2f:4b:d7:a7:ed:2d:b9:b0:be:a8:27:
99:31:82:4a:b0:89:cb:fb:b4:d8:75:14:b1:4f:18:
16:19:39:a1:5e:9f:24:15:82:dc:af:12:35:9f:db:
36:47:48:e9:1d:93:6d:d3:db:50:d3:d2:c8:08:e3:
1d:e0:6c:5a:31:43:77:76:b2:e3:e8:e4:bb:9b:73:
70:46:0b:87:5a:df:3b:1b:64:d4:42:c4:c0:eb:df:
04:af:98:4f:9b:17:6d:67:b6:a2:af:df:f3:9c:7e:
2f:11:c8:24:f7:3d:ef:7c:db:38:10:0c:92:d2:73:
95:0b:8d:2b:96:df:38:8d:cc:4a:1a:72:5e:d6:ed:
c8:1d:38:0a:35:12:69:12:05:bc:96:1e:fd:61:3a:
8c:03:22:b6:4b:aa:9e:83:28:c2:e3:91:de:40:01:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:08:5A:46:7B:4C:FF:EE:B8:14:8D:C8:B9:3B:AD:9B:FF:7A:1D
X509v3 Authority Key Identifier:
keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/yrIIWkZ7TP_uuBSNyLk7rZv_eh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.26.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ba:aa:a5:3b:ef:95:6f:47:0f:1d:75:e9:27:de:58:c5:96:
ff:46:5b:9a:55:95:08:2b:e5:2b:be:7e:35:4d:21:ea:33:1c:
68:15:5e:89:d7:9b:bf:a6:b7:b6:b7:23:ca:e6:4f:09:06:52:
5c:68:85:85:af:ed:2e:8b:ff:a3:6b:e1:eb:6a:a6:e7:45:8a:
ca:a7:8e:cd:2e:11:19:88:39:ed:61:8c:36:c9:f2:20:87:5b:
63:d7:ec:ad:93:f7:c7:ca:5e:71:1b:33:c7:08:f3:1f:2a:09:
ac:69:82:97:82:48:9a:ca:d6:1e:86:17:04:42:0d:30:e3:3a:
40:c0:8a:0d:48:ba:26:6d:cc:66:51:a5:a1:45:d5:b7:11:83:
90:e3:19:83:30:fd:9a:53:d2:0e:cd:eb:4f:91:7e:49:8c:31:
4d:6b:d5:eb:a1:7e:81:1f:34:a1:ac:aa:2d:20:f5:3b:56:bc:
47:3e:dd:e0:67:7e:38:1a:aa:01:58:eb:c9:1d:40:e3:ef:ae:
8c:cf:48:af:76:c6:0c:f6:de:80:e7:34:52:5f:a4:82:1f:b4:
ac:43:c4:59:b8:a6:3c:e8:0b:2d:8b:5f:b7:6b:3a:40:96:4a:
24:3a:7b:c0:db:cd:0e:32:7c:0a:fb:18:ef:6e:a5:63:3e:9c:
a2:a2:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org