Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/d5Wtc0aiqELURQ3llm4O2sH5qtY.roa
File: d5Wtc0aiqELURQ3llm4O2sH5qtY.roa (raw, json)
Hash identifier: HilFfC+cAVTH8tHzChbXnxiAIytebFXkNdiOUP5lWc8=
Subject key identifier: 77:95:AD:73:46:A2:A8:42:D4:45:0D:E5:96:6E:0E:DA:C1:F9:AA:D6
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 01844156ADA37A0A7D362A079A8C2A595E0C
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/d5Wtc0aiqELURQ3llm4O2sH5qtY.roa
Signing time: Fri 04 Nov 2022 06:31:50 +0000
ROA not before: Fri 04 Nov 2022 06:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 62.182.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:56:ad:a3:7a:0a:7d:36:2a:07:9a:8c:2a:59:5e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Nov 4 06:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7795ad7346a2a842d4450de5966e0edac1f9aad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:9b:10:64:ec:b4:b0:5e:bd:0d:61:bf:88:
c6:ea:3a:35:21:d1:9c:56:dc:72:9a:3f:fb:b4:8c:
be:33:cd:0c:d3:d5:c4:03:83:08:69:4f:a3:3a:d9:
0e:1a:27:dc:cf:0a:2e:25:de:bb:18:13:e5:10:69:
e0:1a:01:b0:7c:24:5a:8e:44:83:92:b6:6b:ca:29:
d9:76:ff:92:9b:21:c0:bb:8b:b2:71:02:ce:1e:53:
3a:9d:a6:48:b5:af:1c:38:ec:02:ef:79:e4:34:1e:
d3:8b:ec:75:60:44:78:15:a3:89:33:98:09:73:78:
c3:82:ab:29:d2:ad:50:c5:36:24:ef:10:b9:ba:9c:
c5:0d:a4:90:52:b3:cc:2c:f3:c6:f2:b2:ad:d0:ed:
f0:e9:08:62:3e:93:a3:91:02:69:fc:ed:3b:d9:f6:
70:e3:55:65:6a:3e:84:1f:b8:27:fa:e5:99:b2:70:
61:fe:9f:34:32:c3:95:11:19:b3:6b:6a:26:f1:4b:
48:06:c5:6a:4e:4e:3b:bb:d5:d9:2d:9d:3b:cd:39:
16:db:f9:2e:a8:28:e8:af:61:59:ec:b2:78:39:f8:
84:8f:61:ed:27:84:5b:44:6a:49:d4:2e:8e:ab:44:
dd:f1:03:06:aa:61:d5:e1:40:bb:c0:50:13:6e:ee:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:AD:73:46:A2:A8:42:D4:45:0D:E5:96:6E:0E:DA:C1:F9:AA:D6
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/d5Wtc0aiqELURQ3llm4O2sH5qtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:43:ee:fe:a3:f2:9c:b6:55:8d:5a:a6:4d:bc:5f:cc:d7:c9:
5c:9d:1b:9f:ed:b6:f8:29:88:af:74:25:df:77:51:05:bd:59:
e6:09:4a:9d:47:38:75:4c:ed:b0:9d:dd:28:f5:c8:4f:ed:40:
25:cb:44:09:ad:28:71:29:83:73:4e:d7:da:a6:e4:7e:88:7e:
1d:00:4e:ed:c9:d1:74:26:b4:d8:4d:e1:d3:7a:bc:d3:7a:3c:
f6:7e:15:b6:96:9b:36:39:9c:cc:bc:7c:fa:df:b0:c9:ed:64:
f8:98:22:dd:de:33:1c:d1:f3:23:00:cb:19:5c:3d:40:d2:3b:
2e:70:8b:a1:bb:70:b3:3f:eb:01:e6:92:88:5c:1c:25:a1:82:
ab:b6:60:f4:95:ec:52:b9:18:50:14:fb:79:ea:c5:72:8e:20:
7b:d5:37:8a:d6:3e:8d:c4:38:93:2f:fb:92:8f:7e:8b:4b:5e:
9d:c8:df:60:7a:36:aa:2c:3a:be:e0:10:fa:ab:a1:5e:3e:3b:
26:34:ba:96:39:8c:1d:5a:ff:9a:1a:3e:f8:62:d3:50:70:be:
f5:5e:e4:0a:12:4b:95:b6:09:78:57:1c:9f:b8:24:34:2e:f4:
90:7a:07:56:1e:e9:1d:3f:7b:43:67:79:f8:f3:97:50:ee:c3:
88:fc:ba:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org