Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/UsztnwsfNwcK7pS4wiN-nr4V1wk.roa
File: UsztnwsfNwcK7pS4wiN-nr4V1wk.roa (raw, json)
Hash identifier: ZR0a1Rdddr/n7nYzPDAj7jFdiF+Jr8w8OzzwyTmEjAA=
Subject key identifier: 52:CC:ED:9F:0B:1F:37:07:0A:EE:94:B8:C2:23:7E:9E:BE:15:D7:09
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0AB0AA5A
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/UsztnwsfNwcK7pS4wiN-nr4V1wk.roa
Signing time: Sat 01 Jan 2022 08:57:47 +0000
ROA not before: Sat 01 Jan 2022 08:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197333
IP address blocks: 62.33.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179350106 (0xab0aa5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 08:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52cced9f0b1f37070aee94b8c2237e9ebe15d709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:13:c0:8c:af:21:0d:c2:da:a7:09:c8:54:
e9:a1:ec:d7:b4:fe:e2:5a:51:2d:27:f2:5d:79:28:
ee:23:20:b7:ad:f8:b1:14:28:62:fd:0b:6e:e6:9f:
dd:52:7c:6e:1c:f2:a7:f9:2e:c6:90:f1:56:f7:2c:
c4:f3:44:b4:9a:e0:ab:ad:43:09:02:5a:df:f9:e5:
6b:06:7b:7d:b0:ff:aa:93:5f:44:a0:22:88:93:de:
c0:6f:f0:ba:2c:c0:07:e0:4b:97:4f:68:27:67:84:
f6:db:e0:f0:0f:14:21:31:57:7f:8a:bb:d0:f4:d1:
1e:32:69:e7:d0:97:88:0d:31:23:4b:6d:14:55:e0:
24:6b:06:71:69:73:dd:78:57:83:a1:55:21:60:bc:
ba:b7:4a:d7:73:a6:78:d0:59:05:9f:09:db:25:95:
de:6e:cf:6b:c4:75:d2:66:2b:e5:12:e1:f6:fd:72:
1c:18:1b:51:e2:73:7c:25:76:73:b6:f2:ed:95:eb:
86:76:99:94:6e:1b:93:b2:c5:5c:9d:06:2c:6e:79:
c2:0f:9e:bd:45:97:c6:b4:e0:4f:1e:7d:3c:bc:d5:
fc:4c:63:49:9c:06:86:40:81:1f:61:92:af:10:24:
e8:94:bd:86:21:a7:95:a5:01:74:c0:99:74:04:74:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:ED:9F:0B:1F:37:07:0A:EE:94:B8:C2:23:7E:9E:BE:15:D7:09
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/UsztnwsfNwcK7pS4wiN-nr4V1wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.33.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:97:89:5a:94:8f:b7:b4:6e:ae:fc:19:16:a4:4d:e3:c2:6f:
4d:5e:cc:2a:27:8d:1f:ca:7d:16:35:3c:36:4b:16:b6:f8:90:
3f:16:b7:5b:b0:fb:cc:9e:38:3b:89:61:47:b6:f4:f6:9c:02:
e9:f1:30:13:b7:f1:df:6f:03:47:42:e0:e6:0b:0f:37:ca:27:
5a:ce:1b:49:34:fb:35:07:f4:43:b2:01:96:3b:c6:6f:a4:bc:
98:f1:83:44:e7:f9:5d:fb:ca:51:89:69:ab:4c:24:af:65:bc:
04:16:4a:b0:b9:b8:43:45:98:c6:de:fe:9b:9e:87:c6:34:d0:
27:2b:3f:32:85:be:b0:21:a5:48:a9:a8:2d:d7:ff:80:7c:0c:
47:3c:18:54:91:ed:b8:f3:1c:5f:3e:46:a7:e3:50:68:7f:f5:
b7:64:32:d7:b4:a0:8a:7e:b6:ad:51:7c:24:4d:96:c3:4a:01:
34:1b:8e:de:f6:b8:79:1f:ec:b1:c4:11:6b:0e:2b:33:f7:8c:
bf:94:45:74:27:69:93:48:eb:99:43:c5:cc:90:22:c7:c8:80:
3f:12:54:5b:53:24:54:82:09:15:3d:f7:a2:db:d6:4b:2f:b4:
1f:b8:50:4e:9f:01:05:56:86:66:6c:0e:9c:1d:42:21:5b:5e:
28:80:2d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org