Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/k50IIXUhMtRc9_dfjqOIfwHN4nM.roa
File: k50IIXUhMtRc9_dfjqOIfwHN4nM.roa (raw, json)
Hash identifier: IpdnJK2Y7Fefhhhz3WpQpiDu41g/MgW9W86dcIc67+0=
Subject key identifier: 93:9D:08:21:75:21:32:D4:5C:F7:F7:5F:8E:A3:88:7F:01:CD:E2:73
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018450CD6A41AE10A0EAD36F7485A475474B
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/k50IIXUhMtRc9_dfjqOIfwHN4nM.roa
Signing time: Mon 07 Nov 2022 06:35:50 +0000
ROA not before: Mon 07 Nov 2022 06:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 62.182.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:50:cd:6a:41:ae:10:a0:ea:d3:6f:74:85:a4:75:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Nov 7 06:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=939d0821752132d45cf7f75f8ea3887f01cde273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:66:f6:7f:7e:b5:b2:6f:9e:f2:8c:cf:b6:
b6:2b:58:25:3e:e7:98:7e:ee:b5:04:1c:86:1b:2c:
7b:dd:6e:24:be:cc:43:05:2a:1d:e1:c6:45:e4:c8:
f0:6c:f7:df:ee:ec:f6:fa:e2:b3:18:9c:a9:2c:fe:
2a:b8:9e:b6:43:c5:a0:84:b7:e1:9d:34:dd:ab:16:
0c:f6:ba:36:de:c8:96:d3:8c:9d:c6:fd:d4:65:3b:
fd:2c:02:e7:02:1c:df:70:b6:1f:9b:d5:22:9b:47:
b4:58:8f:34:7d:6e:50:94:97:64:2d:8f:1a:42:f0:
c2:e6:9c:76:2a:89:7b:9c:37:62:8e:64:01:46:ff:
35:7b:fc:27:12:a0:69:43:48:e9:a3:e0:78:51:78:
00:8f:a4:69:4b:c7:36:fb:b6:7a:bb:98:ca:d8:3f:
19:4a:69:c1:37:d9:6a:26:20:d3:2f:dc:f5:46:02:
cb:71:0a:cf:10:8c:dc:18:8a:9f:a0:6a:94:59:28:
74:b4:5b:21:ca:14:35:8f:64:e6:70:f4:30:95:44:
87:74:7c:c3:de:74:c2:1b:b1:e9:b3:d1:71:c2:ce:
09:09:9b:64:75:28:ac:30:0b:6f:ed:80:2a:64:92:
8e:96:22:bc:b2:9b:36:be:6f:2b:5e:01:a6:1d:9c:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:08:21:75:21:32:D4:5C:F7:F7:5F:8E:A3:88:7F:01:CD:E2:73
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/k50IIXUhMtRc9_dfjqOIfwHN4nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:40:e3:a5:ce:e1:c6:f4:bb:e9:67:57:b8:70:35:79:6e:24:
13:7b:1a:29:1a:01:54:79:0d:33:9f:72:f2:98:d0:f9:b0:5c:
69:72:bf:ad:58:7b:db:42:71:29:75:c2:04:b4:17:61:5c:30:
0e:83:34:ed:72:a7:9d:dd:22:ab:3d:00:70:1e:48:0b:93:87:
e5:bb:2f:76:fc:c8:7b:25:78:d6:80:3f:78:d7:14:ab:59:0f:
33:48:26:cd:ef:8f:30:35:85:96:21:90:46:18:ba:9e:e6:96:
7f:e2:64:2b:dd:74:1a:fe:df:31:f8:d5:34:69:27:73:16:b6:
df:2d:46:53:d3:3a:8d:a5:5e:62:79:3f:54:58:88:f0:a4:e5:
88:09:6d:5d:4c:fd:ae:9e:84:d3:74:e1:30:fc:29:60:69:2d:
5e:17:14:f2:5b:83:e0:20:24:82:68:5d:ca:1c:28:13:40:c9:
de:b2:d8:dd:be:56:c1:94:7a:91:1f:c9:41:56:1d:3a:eb:59:
06:d1:7e:ad:3d:63:ca:c8:15:39:7a:7c:44:9e:44:e9:ab:6a:
59:d9:f6:67:6c:59:35:c6:9e:e9:2f:c0:07:72:26:7d:98:88:
65:1a:ea:05:70:66:c0:57:5c:d7:8c:cb:7a:ba:21:4b:81:89:
1f:7c:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:13 2023 by rpki-client on console-fra.rpki-client.org