Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/czHOmCSR84qSMu-pVJOt-HsZE78.roa
File: czHOmCSR84qSMu-pVJOt-HsZE78.roa (raw, json)
Hash identifier: TUkwLAB9fRmNIqRROqOiV8zR8bPdfa0QdwHDw+2NO8g=
Subject key identifier: 73:31:CE:98:24:91:F3:8A:92:32:EF:A9:54:93:AD:F8:7B:19:13:BF
Certificate issuer: /CN=a2a65fafc2fd19f56e191e7b87d8079db45a229c
Certificate serial: B5E58A
Authority key identifier: A2:A6:5F:AF:C2:FD:19:F5:6E:19:1E:7B:87:D8:07:9D:B4:5A:22:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqZfr8L9GfVuGR57h9gHnbRaIpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/czHOmCSR84qSMu-pVJOt-HsZE78.roa
Signing time: Sat 01 Jan 2022 05:06:07 +0000
ROA not before: Sat 01 Jan 2022 05:06:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.204.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11920778 (0xb5e58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2a65fafc2fd19f56e191e7b87d8079db45a229c
Validity
Not Before: Jan 1 05:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7331ce982491f38a9232efa95493adf87b1913bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:66:a1:78:03:a6:b8:5e:57:0e:63:f9:06:d7:
85:9c:8e:bb:50:fb:28:0c:df:8c:cb:ee:be:e0:82:
78:ac:55:97:de:92:c5:d9:8e:d1:f9:90:a6:64:e4:
fb:de:64:be:a2:b0:4c:50:d4:ef:ca:d5:1d:35:2c:
21:39:0c:41:aa:8b:75:1c:1f:27:a4:95:8d:75:76:
81:fc:8b:ca:25:d7:e5:a3:c7:56:05:92:db:16:d0:
85:a6:53:9a:ba:ef:71:f7:83:c3:aa:ec:e0:ae:6a:
07:62:fa:f1:a4:24:a8:8b:ec:48:db:1f:e5:3a:24:
19:41:df:4e:99:f2:78:06:0f:0c:8f:7a:6a:a0:34:
b7:fa:90:31:77:a9:28:22:f6:5f:0c:08:12:a8:80:
78:bf:19:64:8c:99:9f:2d:70:41:7b:b7:49:e3:37:
93:d3:95:a7:a9:ae:61:41:b6:58:d5:24:b6:b4:34:
da:4d:d0:1c:06:3f:e7:4e:c8:f0:21:04:16:4d:21:
da:97:c1:42:5b:51:3f:3f:3c:1d:a0:31:ff:12:79:
8e:fd:1f:5c:2e:20:d9:b7:11:c4:2a:53:9b:32:bd:
c6:5c:ff:30:81:97:cb:c6:5c:4c:bd:10:01:77:55:
13:50:dd:51:12:1f:b5:f3:18:ac:16:6f:7e:4d:01:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:CE:98:24:91:F3:8A:92:32:EF:A9:54:93:AD:F8:7B:19:13:BF
X509v3 Authority Key Identifier:
keyid:A2:A6:5F:AF:C2:FD:19:F5:6E:19:1E:7B:87:D8:07:9D:B4:5A:22:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqZfr8L9GfVuGR57h9gHnbRaIpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/czHOmCSR84qSMu-pVJOt-HsZE78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/oqZfr8L9GfVuGR57h9gHnbRaIpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5d:a2:b3:56:64:ac:6d:83:17:4f:76:af:4e:16:e9:19:ac:
f8:94:8a:6b:7e:15:df:24:36:3d:78:a9:29:cc:de:56:2b:5c:
de:34:30:75:b8:27:71:be:86:0d:b7:c6:3c:a4:23:b9:e8:69:
0c:8f:42:91:14:b2:b0:2a:ee:b2:24:78:c0:ad:a5:6c:fb:63:
22:c5:16:2d:80:40:7a:47:89:62:6b:82:03:40:cc:7d:48:67:
9f:f4:83:10:ee:b4:e7:4e:08:b1:e4:ea:15:0d:87:5e:7b:43:
98:44:42:41:e6:a4:c0:0e:b4:78:c3:0d:df:8a:d3:d1:5b:14:
00:50:96:bc:36:7e:46:4b:79:e3:79:ec:e7:e8:50:08:3c:7f:
01:ad:14:06:5a:f1:b6:c3:ff:ca:bf:be:43:ea:6c:dc:6b:5a:
82:a6:22:64:4b:a1:94:54:c5:bb:9d:51:37:df:88:0f:87:b0:
ba:c6:a1:08:5b:b0:22:00:eb:49:49:30:1d:1e:c5:79:15:3c:
02:e3:52:1e:72:73:4b:29:2a:8e:f1:a5:87:01:1f:6a:63:9c:
f7:0a:d7:a3:2d:ae:b6:b5:fe:11:85:69:5a:95:be:18:d2:6a:
4d:fd:c9:56:7d:78:2b:d5:42:d9:ca:67:5d:0c:db:61:c6:8e:
93:ec:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:54 2023 by rpki-client on console-fra.rpki-client.org