Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/xtNosC_MGGbQaeSZ4mnAk5Q-HBQ.roa
File: xtNosC_MGGbQaeSZ4mnAk5Q-HBQ.roa (raw, json)
Hash identifier: TkyMiD828lz7lavHGAIcQbDtwMK8zCtHqBvhv3zWzp4=
Subject key identifier: C6:D3:68:B0:2F:CC:18:66:D0:69:E4:99:E2:69:C0:93:94:3E:1C:14
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 027980E3
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/xtNosC_MGGbQaeSZ4mnAk5Q-HBQ.roa
Signing time: Sat 01 Jan 2022 10:04:24 +0000
ROA not before: Sat 01 Jan 2022 10:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42504
IP address blocks: 62.122.64.0/24 maxlen: 24
62.122.64.0/21 maxlen: 21
62.122.68.0/24 maxlen: 24
91.192.152.0/22 maxlen: 22
62.122.67.0/24 maxlen: 24
62.122.70.0/24 maxlen: 24
62.122.66.0/24 maxlen: 24
62.122.69.0/24 maxlen: 24
62.122.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41517283 (0x27980e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Jan 1 10:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6d368b02fcc1866d069e499e269c093943e1c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:71:99:52:31:95:06:e0:67:c3:dc:79:42:
f3:fd:2a:89:a3:71:09:c4:18:4e:9d:7d:c8:25:5a:
75:5f:59:8e:a6:8b:71:db:da:0e:12:28:44:3d:91:
5a:fe:74:61:92:41:e3:9d:97:80:c3:27:42:32:35:
65:da:35:ad:57:e1:ca:42:a2:72:57:da:7c:7c:cd:
87:ef:f0:85:af:aa:d2:3a:25:16:80:a2:41:6d:fc:
52:aa:1d:6d:2b:79:04:9e:f7:71:e7:e4:9a:05:5e:
48:a4:b4:84:6f:51:95:06:af:c0:95:51:a8:ce:e2:
56:f9:9b:30:d4:0f:10:c7:aa:e6:90:c9:c2:1d:8a:
3b:28:3e:bd:da:56:a3:bf:9c:f3:48:38:76:f1:fe:
b4:d2:06:d6:06:93:87:fd:9f:fc:77:d8:09:dc:44:
71:34:b0:2b:8d:ba:46:24:dd:a3:8b:66:cf:0e:41:
fb:79:b4:62:6d:ad:4c:79:d3:e4:a7:b8:02:7d:f0:
2e:5a:ea:d8:7e:7d:6c:f7:85:17:07:07:c0:2d:eb:
88:98:8b:5e:fb:b1:01:27:bb:05:a1:86:22:b6:8e:
0f:dd:0d:1b:7c:d4:37:51:f6:ad:ff:83:20:d3:a5:
f8:39:82:e2:a0:29:15:61:37:6b:d8:33:fe:a0:98:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:68:B0:2F:CC:18:66:D0:69:E4:99:E2:69:C0:93:94:3E:1C:14
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/xtNosC_MGGbQaeSZ4mnAk5Q-HBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.64.0/21
91.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:86:2a:bb:91:57:3d:83:99:0c:25:27:0a:8c:08:dc:16:7d:
15:05:cd:ef:82:a1:95:e0:11:63:84:27:35:1c:0f:73:8d:86:
68:e2:c2:d2:4b:0f:d2:a0:fa:f2:85:49:e6:d1:ed:17:b5:6f:
cc:95:05:10:36:f8:73:02:41:9e:c1:57:64:40:b5:f3:71:f3:
90:36:08:ef:22:c4:c4:1b:92:75:6d:1e:cd:3d:f5:e4:a8:bf:
94:e2:b1:56:22:c2:0a:0c:16:8f:96:27:64:95:64:42:10:4b:
f7:46:ac:e6:fb:76:b7:79:a2:84:42:4f:cc:5a:57:9a:96:74:
b3:cc:4c:3e:85:c2:64:de:3d:98:36:fc:30:7e:28:31:8f:8f:
65:7f:c2:ee:6f:39:93:4d:a9:1c:d5:b1:fe:4d:c9:30:d6:d8:
5c:3b:9b:2f:7f:2f:ec:01:c8:75:04:ff:78:89:89:05:72:eb:
5a:ec:6c:71:f0:e0:06:06:8f:f0:78:6d:d5:b0:9d:b9:25:38:
fa:37:86:de:94:f1:50:aa:88:37:e4:a9:5b:6f:3c:5d:e6:78:
14:be:46:81:67:54:8d:64:22:17:71:8e:79:2b:28:d9:a4:d1:
ab:20:cb:24:0d:b4:3d:3b:83:68:25:44:5b:cc:65:0e:16:4c:
0c:73:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:14 2024 by rpki-client on console-ams.rpki-client.org