Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/KqnVXHaHddcTA0TxaN-2-7ocGvw.roa
File: KqnVXHaHddcTA0TxaN-2-7ocGvw.roa (raw, json)
Hash identifier: XVatfygs//OONvQmQT2OfN1WJbGp+LqzqBr2AaGq5Vg=
Subject key identifier: 2A:A9:D5:5C:76:87:75:D7:13:03:44:F1:68:DF:B6:FB:BA:1C:1A:FC
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 056E435E
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/KqnVXHaHddcTA0TxaN-2-7ocGvw.roa
Signing time: Mon 20 Jun 2022 08:21:44 +0000
ROA not before: Mon 20 Jun 2022 08:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208700
IP address blocks: 62.192.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91112286 (0x56e435e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jun 20 08:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aa9d55c768775d7130344f168dfb6fbba1c1afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:6a:61:05:18:16:2f:f3:3d:50:c8:89:f2:
82:66:93:8d:03:4d:e7:f8:2f:f8:77:dd:0b:88:af:
d2:3a:f8:82:f4:50:5a:77:f4:8a:c7:6a:c6:30:ca:
48:a7:42:0b:db:74:ae:08:8b:a9:33:b9:45:13:62:
88:d8:05:91:d0:a4:c7:8c:13:16:1d:de:f2:e5:ba:
22:b5:48:0a:fa:ba:72:51:4e:74:cb:bd:f0:07:8a:
97:e4:aa:b9:17:e8:e4:17:4e:dc:0b:3e:95:e4:18:
45:b7:cb:7c:7c:d5:47:67:75:07:5b:cb:75:a1:56:
9b:b4:74:a3:dd:14:c9:47:ed:05:6e:eb:68:24:03:
63:a5:2e:10:ed:f4:7a:92:b0:15:2f:7b:93:68:49:
3c:53:a8:5a:97:fd:cc:09:2c:ca:20:a7:f6:f9:5d:
84:a2:f1:ce:b9:b9:64:57:90:b4:83:ae:22:d0:2b:
48:48:58:a1:3b:19:8a:14:10:ef:6c:77:33:55:85:
3e:e0:45:ca:1a:37:85:9f:03:5f:91:a6:31:7b:21:
3e:40:dc:08:8a:1c:67:83:e8:b9:ab:b4:1b:5f:5e:
ee:43:d8:56:28:02:cd:32:da:ee:55:00:a3:53:0a:
ec:a8:9f:b9:f7:fd:92:3b:b0:00:2e:69:f7:de:95:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A9:D5:5C:76:87:75:D7:13:03:44:F1:68:DF:B6:FB:BA:1C:1A:FC
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/KqnVXHaHddcTA0TxaN-2-7ocGvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:48:a6:3f:39:ac:95:46:94:d3:5d:e3:50:0c:08:34:99:69:
6d:9b:c0:2b:6a:97:b9:48:23:92:35:e0:e3:79:bd:52:f5:a2:
6d:60:a5:ff:5b:9f:53:ee:07:61:f1:f5:44:cb:a2:dd:1e:fc:
ac:18:d5:6d:fe:cc:56:2e:28:33:28:e4:0f:17:2e:ee:42:2a:
b4:a2:3f:0b:5a:e9:72:b4:7f:b6:87:48:d8:dc:74:fb:ec:81:
1d:82:8e:af:89:73:63:bc:66:43:f4:c5:aa:c8:ff:a3:f3:10:
bd:1b:e3:76:de:1e:c9:03:fe:ed:aa:91:64:55:65:97:a4:c2:
76:e3:11:73:b2:48:b5:8e:96:88:63:fe:5d:c0:a6:b8:c8:9b:
04:5b:0f:1a:69:92:c9:e8:7b:0b:84:44:17:2d:e3:66:04:54:
f2:45:81:1d:2e:3a:ea:b2:1f:86:32:cc:99:a0:9d:70:a7:94:
ed:d6:ce:46:58:1f:ae:ca:c2:d5:2b:fe:e3:33:0e:c8:4e:05:
09:24:1d:e0:40:3c:2f:86:99:89:ee:63:fa:96:17:72:7f:a3:
29:78:e7:7b:8b:cf:61:3f:0d:f2:b2:55:fe:57:79:4b:5b:8b:
69:d9:76:14:88:bc:10:65:b9:26:90:3e:71:ec:a7:dd:b5:64:
e1:09:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-fra.rpki-client.org