Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/FSIIxJ_fwtU2VicVGFWG-K9xMIM.roa
File: FSIIxJ_fwtU2VicVGFWG-K9xMIM.roa (raw, json)
Hash identifier: URUPxs3GQQOKX9/CIbCoSoBm35owG1xLfy9jDj3jAC0=
Subject key identifier: 15:22:08:C4:9F:DF:C2:D5:36:56:27:15:18:55:86:F8:AF:71:30:83
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 0183C5C529C154FCD4DBCF5B95AC2389B39E
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/FSIIxJ_fwtU2VicVGFWG-K9xMIM.roa
Signing time: Tue 11 Oct 2022 06:39:36 +0000
ROA not before: Tue 11 Oct 2022 06:39:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 62.202.152.0/21 maxlen: 24
62.202.174.0/23 maxlen: 24
2a02:1215:ffff::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:c5:29:c1:54:fc:d4:db:cf:5b:95:ac:23:89:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Oct 11 06:39:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=152208c49fdfc2d536562715185586f8af713083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:b3:25:24:9c:65:d7:6d:ce:5e:df:6d:f8:
ad:86:d1:34:f1:34:28:bc:e8:69:c3:57:1c:1c:1b:
5a:c2:17:77:ad:96:f4:43:28:3c:52:64:f8:d4:02:
85:c2:9d:6c:eb:08:33:39:2f:ae:0b:e2:04:f2:78:
b6:38:3b:ba:d0:e8:17:f5:10:08:c1:31:51:38:00:
40:89:ab:4f:7c:4f:c1:a8:55:43:5c:58:37:ba:dd:
34:06:6e:1c:db:0b:92:0a:c8:f3:2d:4e:8a:d1:36:
89:43:67:94:cf:b0:fa:fb:79:48:42:c6:4d:7b:a2:
0b:0c:b9:9e:65:67:e4:d5:de:6f:ba:e1:eb:e5:ff:
e3:a6:6c:77:16:8c:a1:22:46:50:75:ca:19:86:0b:
c6:f3:a1:e2:f7:eb:dd:4c:dc:75:11:5d:5d:03:18:
7c:39:c3:e9:38:7d:15:bc:54:55:fe:d4:e9:1b:d0:
5e:d2:a4:29:c5:2e:6e:ec:15:f6:0e:96:8e:5b:05:
53:24:a3:f8:db:51:11:f4:3d:f7:e7:21:78:41:ff:
0c:86:67:12:34:70:8f:bb:9a:0a:3f:3a:76:72:f2:
5d:80:21:ea:14:f6:4f:d5:92:79:de:e6:53:90:5c:
29:ab:65:14:6b:26:73:d7:8d:dd:bf:1f:e8:eb:fc:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:22:08:C4:9F:DF:C2:D5:36:56:27:15:18:55:86:F8:AF:71:30:83
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/FSIIxJ_fwtU2VicVGFWG-K9xMIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.152.0/21
62.202.174.0/23
IPv6:
2a02:1215:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
8a:2e:c5:c7:27:b9:25:21:ce:53:9a:c2:0e:27:6e:cc:46:bb:
40:81:fb:49:91:59:35:80:f6:79:2e:a8:32:a6:ca:32:28:8c:
4a:0e:60:3d:f2:8e:e4:a8:ea:cd:0a:e4:5f:9a:fb:7e:6a:79:
1c:a2:0b:d6:c2:96:6a:1c:bc:60:f2:66:10:13:06:f0:94:0c:
11:71:57:3c:67:5d:2d:fe:0d:89:0e:65:f5:0f:b6:2b:a1:5d:
5d:51:3c:df:6a:0d:7a:6d:76:e9:44:67:d2:b8:a2:d1:66:3f:
c7:ef:e5:ba:58:96:76:4b:92:3b:41:5c:c0:81:e3:85:e9:86:
be:ab:18:70:8d:72:2e:06:a0:93:84:86:f5:92:51:ea:2e:97:
e3:3c:72:e7:1a:49:06:5e:8d:e6:bc:32:b6:38:2b:98:3c:3a:
37:cc:65:d0:ab:50:f1:d4:ee:f3:6a:c2:f7:cb:cd:4d:63:de:
68:a7:8d:8d:46:28:10:73:4b:38:07:6d:9c:76:2c:b6:7e:c1:
92:e0:ea:b3:8b:33:39:dc:7c:d4:ef:1d:f1:bd:12:95:0a:84:
1b:df:2c:1a:e8:10:e9:13:24:77:87:a8:20:c4:98:56:23:1b:
4d:1d:9a:c8:3f:e9:bc:fe:44:33:8b:63:8d:0b:b8:97:ce:72:
bc:d0:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:12 2023 by rpki-client on console-ams.rpki-client.org