Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/91BY4oF0IcW8Rcp_yDVD9ddu2sY.roa
File: 91BY4oF0IcW8Rcp_yDVD9ddu2sY.roa (raw, json)
Hash identifier: E0LDdEo0R4XSlN5mNpWt0GiEdwpRvXcQaTMO7nYmS9I=
Subject key identifier: F7:50:58:E2:81:74:21:C5:BC:45:CA:7F:C8:35:43:F5:D7:6E:DA:C6
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0181D261E3C09B3DE22C6A4307E5FFAA9282
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/91BY4oF0IcW8Rcp_yDVD9ddu2sY.roa
Signing time: Wed 06 Jul 2022 07:20:39 +0000
ROA not before: Wed 06 Jul 2022 07:20:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 62.182.168.0/22 maxlen: 22
62.182.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:61:e3:c0:9b:3d:e2:2c:6a:43:07:e5:ff:aa:92:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jul 6 07:20:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f75058e2817421c5bc45ca7fc83543f5d76edac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:77:8a:b1:87:3a:cb:0f:dd:05:d3:14:2d:
48:9e:61:8d:02:e0:a4:e0:12:aa:26:aa:e8:53:b2:
d6:17:9a:71:6e:47:e4:e4:cf:61:9d:00:55:2d:cb:
cd:66:50:33:0b:c3:3c:43:58:04:81:c5:c0:19:67:
ee:a4:b4:09:2d:08:3a:4c:ff:72:3d:ca:e4:cd:b1:
c5:ed:d6:09:58:db:0b:22:78:17:5b:dc:84:13:7d:
3a:07:f3:4d:e8:cb:6c:2f:c9:6d:f2:6c:ab:01:85:
2e:6d:f1:64:37:bf:e0:74:4a:6f:14:d6:15:dd:8d:
a8:6e:ec:fb:53:91:9d:f5:64:7f:94:37:ca:98:d2:
68:95:a2:93:30:50:89:8d:94:a3:4a:5b:89:d5:2f:
03:87:48:ee:e2:56:33:a0:c7:eb:90:26:33:b8:cd:
46:d8:4d:4d:5c:9e:bb:3a:20:b6:20:ab:88:46:0f:
65:8c:5f:a8:b1:95:80:65:0a:58:2a:5b:3c:97:44:
1f:84:fe:f6:d0:ec:9d:a1:ca:21:02:a8:b8:6a:69:
e6:79:8e:b6:cd:db:9d:68:56:0c:01:40:0a:13:97:
ca:06:1b:1c:35:5e:c8:89:ba:93:83:76:a8:a3:b2:
ce:51:a9:03:67:5e:80:3b:8e:03:5b:62:0c:bf:a5:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:58:E2:81:74:21:C5:BC:45:CA:7F:C8:35:43:F5:D7:6E:DA:C6
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/91BY4oF0IcW8Rcp_yDVD9ddu2sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:af:10:11:36:10:c3:57:5e:97:02:ea:16:8d:dc:05:26:0d:
3f:b6:a1:a2:42:3f:b4:53:e4:a1:f5:1a:56:d0:37:8e:42:af:
bd:e6:cc:93:47:ec:86:88:cf:1e:23:34:d3:55:e3:e4:db:5f:
73:ff:1a:d7:06:93:2b:cb:f5:69:b7:25:85:9f:82:91:57:75:
41:9c:23:12:5c:3d:be:16:86:4d:f3:bc:f7:ac:58:35:3f:73:
04:a4:c0:85:81:21:dc:22:26:c0:f6:7c:cd:b0:f3:fe:b0:d6:
a5:af:80:65:a6:15:7e:0f:80:b1:72:9b:d2:5c:d0:c0:08:9f:
ec:f1:9d:87:1a:3e:5e:66:1e:d0:6d:75:c4:b6:7d:3e:21:5a:
0b:87:25:c4:2e:78:95:40:81:3c:0e:e0:7c:b0:e2:1f:10:df:
93:11:4a:84:8e:9b:d3:73:64:8c:24:11:2a:be:2a:4f:cf:56:
11:c7:3c:72:fa:5d:d4:ff:0d:a4:a5:42:f7:f3:f0:be:e1:c8:
c1:7f:7a:07:eb:e3:45:06:bd:bc:50:bc:f2:9a:c0:3c:3f:6c:
12:2b:ec:43:7d:d2:77:9c:df:fe:a5:45:3c:57:2d:d3:25:ec:
2b:1c:ab:7e:d5:12:86:11:ed:f4:07:fa:63:a4:f0:54:5a:e3:
b1:af:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:12 2023 by rpki-client on console-fra.rpki-client.org