Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/shT-k_jf4b4ZqJNhOQP3oG81nu4.roa
File: shT-k_jf4b4ZqJNhOQP3oG81nu4.roa (raw, json)
Hash identifier: 9Zdn9n/pxMcUmgdA6paSlyDr7kv3t8U7R5BMU2B20LQ=
Subject key identifier: B2:14:FE:93:F8:DF:E1:BE:19:A8:93:61:39:03:F7:A0:6F:35:9E:EE
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0184F107091925913BBC8817D56BF2377709
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/shT-k_jf4b4ZqJNhOQP3oG81nu4.roa
Signing time: Thu 08 Dec 2022 09:18:00 +0000
ROA not before: Thu 08 Dec 2022 09:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:07:09:19:25:91:3b:bc:88:17:d5:6b:f2:37:77:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Dec 8 09:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b214fe93f8dfe1be19a893613903f7a06f359eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:64:07:93:ca:8f:1f:8b:b0:a6:5a:7b:87:
48:96:1d:f9:ad:9f:a2:74:dc:ea:11:12:ef:7d:38:
aa:a7:78:8f:0c:12:69:65:37:d6:71:bc:81:40:e6:
22:44:04:79:93:86:2c:84:13:1c:5b:00:9a:04:af:
83:17:d4:5b:03:a7:b8:a5:36:95:d7:c8:8b:66:41:
ff:c7:ab:2a:3e:b3:54:1f:b6:02:3b:c9:04:43:e3:
4a:be:d4:85:23:0e:95:7a:01:ec:19:c0:8e:16:77:
03:92:e0:54:c3:18:be:1b:e9:cf:a5:69:34:70:cf:
e3:fb:13:57:3d:48:e0:c6:9c:4f:4f:95:51:a7:dc:
2c:e5:27:b1:a3:49:dd:eb:ac:e5:a7:d0:93:05:5f:
bd:7a:f0:2e:5f:28:b2:7c:15:d5:e7:fb:78:ed:80:
49:87:ac:ae:2b:2a:ef:9d:98:8f:0b:d4:ac:78:94:
22:19:25:2f:9c:1c:a3:2e:19:69:a4:3a:46:d1:e2:
49:65:7e:df:9b:c8:be:e4:8c:d8:35:bb:4d:8d:71:
e6:f4:0b:a1:37:7c:61:34:2f:c3:99:48:c5:76:c2:
7b:c8:10:86:9e:37:6c:e9:9e:81:6c:af:34:75:4b:
9b:15:a2:84:88:8f:8d:ab:1a:46:9d:92:4b:43:73:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:FE:93:F8:DF:E1:BE:19:A8:93:61:39:03:F7:A0:6F:35:9E:EE
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/shT-k_jf4b4ZqJNhOQP3oG81nu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
Signature Algorithm: sha256WithRSAEncryption
33:40:11:6e:33:60:e7:f8:81:28:2e:78:26:b8:d5:1b:8b:cd:
09:fa:ba:f0:56:7a:9e:0d:e1:49:05:38:a0:97:09:6a:d1:28:
d0:40:b9:34:32:5d:4a:f1:3e:fa:ba:93:95:bf:94:b4:58:b8:
30:f6:76:55:4a:fe:19:83:1b:0a:cf:46:f4:9b:dd:17:df:87:
76:47:ec:e9:01:8e:79:7d:ca:c9:55:00:1a:52:4a:69:1b:e8:
57:c7:ff:df:43:b4:b3:e0:c7:e7:02:ff:77:1e:e8:f7:0d:83:
05:0d:1d:c3:ab:97:d8:b0:f8:4e:fd:ab:13:1c:c6:ef:a3:41:
b3:d3:ae:a5:77:10:82:32:6a:45:1f:e9:60:7b:8d:ff:fe:5a:
6b:69:99:75:a7:8e:54:f6:85:7b:50:82:15:8a:0d:4d:2e:56:
04:d5:2e:ff:cf:39:96:b8:65:28:5f:b6:10:7b:0d:af:ce:e4:
af:df:12:f4:21:75:94:2a:4a:21:0d:11:f1:67:65:73:5e:3f:
de:3b:9c:6f:31:80:b8:00:3b:a7:5d:da:da:13:56:ab:58:ea:
cf:19:14:ef:98:80:54:12:e5:b4:6a:92:12:4f:42:84:fa:b1:
22:8a:9e:d1:0b:92:66:0e:0e:af:8d:4e:a5:92:7e:41:f7:be:
95:b0:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org