Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EK3onqwscel9_Tqw-1oZshitU1E.roa
File: EK3onqwscel9_Tqw-1oZshitU1E.roa (raw, json)
Hash identifier: rTAhwv7wohGYQ2VPqZ4bqHc3QkWT+nwWuSurRNq75CY=
Subject key identifier: 10:AD:E8:9E:AC:2C:71:E9:7D:FD:3A:B0:FB:5A:19:B2:18:AD:53:51
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0184E82FD706C5C21FA97C07FE48D3C1E8ED
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EK3onqwscel9_Tqw-1oZshitU1E.roa
Signing time: Tue 06 Dec 2022 16:06:00 +0000
ROA not before: Tue 06 Dec 2022 16:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 62.182.171.0/24 maxlen: 24
62.182.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:2f:d7:06:c5:c2:1f:a9:7c:07:fe:48:d3:c1:e8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Dec 6 16:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10ade89eac2c71e97dfd3ab0fb5a19b218ad5351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0d:9a:d2:d6:24:c3:66:1c:60:a0:d0:63:08:
cb:d0:34:7c:e9:63:67:33:bf:2d:c5:80:15:3e:bd:
c7:dd:80:9a:6e:1d:d2:a9:ab:6d:e8:f6:c6:a0:5f:
05:b7:51:00:0d:e6:0d:4f:e7:1c:6d:2c:1d:b8:c8:
af:a8:e1:03:64:b6:4e:61:bd:67:61:7f:51:b5:f9:
45:d2:45:7b:f2:d8:3e:48:92:29:d0:c9:00:da:45:
6a:6d:01:45:70:11:ef:82:42:7f:c6:7f:0e:f4:9f:
98:1a:8d:95:98:fa:06:02:eb:fe:ef:5e:23:21:20:
4b:16:e9:df:73:47:52:a2:62:20:f8:be:a9:0e:db:
09:30:f7:8a:71:e0:48:33:a5:76:1e:e3:43:f8:f6:
f0:a1:f1:81:c5:6b:2b:2e:0a:dc:b3:01:12:0a:bb:
33:4f:05:38:9b:80:75:75:4d:e3:b7:36:e6:ed:82:
fb:6b:01:34:42:84:d6:05:72:fe:82:df:e7:35:2d:
67:86:fb:35:70:09:80:06:b6:f6:6f:2e:5e:a2:25:
c8:94:8b:f0:3b:39:6f:68:b8:f3:60:47:0c:fd:c8:
4e:fa:35:3d:d5:95:17:d5:c2:b5:96:6d:6d:27:0d:
f0:5d:b4:42:c0:9f:64:fa:41:60:a2:1f:65:54:d7:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:E8:9E:AC:2C:71:E9:7D:FD:3A:B0:FB:5A:19:B2:18:AD:53:51
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EK3onqwscel9_Tqw-1oZshitU1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.169.0/24
62.182.171.0/24
Signature Algorithm: sha256WithRSAEncryption
48:34:46:b9:a0:a6:63:a7:f4:d1:14:57:1e:ed:67:36:dc:c7:
f0:d3:3a:63:d6:6c:91:8a:25:06:da:9c:36:81:39:3b:ec:12:
dd:d8:7e:76:3f:e6:bd:6a:38:fc:2e:c2:c0:62:7a:91:9d:e0:
89:34:7f:c2:4d:1c:9e:34:ce:aa:ef:a0:b9:87:60:29:45:86:
e6:3b:a5:eb:32:a0:4d:7c:da:3b:cc:0e:6b:ec:82:32:3c:0d:
7f:ec:6c:b6:d0:5f:75:2f:78:94:f7:d8:a9:bd:4b:e7:da:c1:
20:bc:76:ac:dd:0d:a4:85:7a:18:87:bb:14:de:86:42:70:89:
0c:48:e6:34:06:e7:fd:37:fe:57:ef:98:fa:24:2f:cb:a6:bf:
9e:6f:cd:d8:c9:57:4b:c2:73:a5:bc:d5:a4:ad:80:e9:83:33:
ca:1b:d2:aa:2f:20:91:69:93:03:7f:0c:74:57:c7:ca:e3:4b:
c8:27:6a:57:71:41:6a:82:6e:8e:c8:ef:65:25:fc:b3:19:1b:
60:18:25:ec:dd:70:7c:96:30:a5:ac:2d:83:34:ec:41:5e:0d:
76:bd:77:ab:13:73:98:db:9e:5c:f5:57:07:3f:30:05:73:1d:
8e:a1:fd:15:1b:71:c5:c6:d2:b6:f4:42:8f:d0:40:46:9c:fc:
e8:85:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:12 2023 by rpki-client on console-fra.rpki-client.org