Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/9pehSEXyzZK4sRxufWaoidD6IKc.roa
File: 9pehSEXyzZK4sRxufWaoidD6IKc.roa (raw, json)
Hash identifier: CRIBn4U1Fin0Oz3i87X8pLx68yVyNtT0/alm/cNvg84=
Subject key identifier: F6:97:A1:48:45:F2:CD:92:B8:B1:1C:6E:7D:66:A8:89:D0:FA:20:A7
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01849EBB28F40FE84082BACED844F87A82C5
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/9pehSEXyzZK4sRxufWaoidD6IKc.roa
Signing time: Tue 22 Nov 2022 09:46:16 +0000
ROA not before: Tue 22 Nov 2022 09:46:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201444
IP address blocks: 62.228.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:bb:28:f4:0f:e8:40:82:ba:ce:d8:44:f8:7a:82:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Nov 22 09:46:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f697a14845f2cd92b8b11c6e7d66a889d0fa20a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:14:e2:35:a1:58:80:f4:b7:b9:87:ba:88:
cc:f1:1c:f1:da:25:1b:be:2f:6c:03:3a:2b:2d:67:
b1:ae:c9:c0:35:9a:a3:68:06:59:37:53:ed:b5:09:
6b:be:ac:6e:89:a1:28:c2:f3:e6:46:5a:08:2c:25:
40:ef:73:e0:c0:23:01:79:dd:b4:54:c7:9c:99:3a:
01:ae:aa:92:b4:25:a8:7f:15:11:0c:aa:7b:7f:14:
33:69:17:11:93:92:f0:a0:06:09:a5:5e:1b:72:39:
21:1d:e8:0a:f0:fc:58:e6:83:70:91:26:51:2f:76:
16:2f:a2:91:77:f1:e4:c4:ef:57:d7:fb:91:34:56:
c0:88:2a:07:84:14:17:00:d0:8a:22:8d:93:25:c6:
a5:f1:2b:7f:0a:20:f3:fd:73:97:97:a7:db:39:21:
97:7e:c0:ea:07:bf:50:b5:58:8f:c7:7e:0c:0c:07:
cf:80:15:1d:41:e3:2a:78:71:69:38:a9:ef:80:d8:
76:30:d6:62:3e:9a:2a:e1:44:fc:b8:1b:5d:30:93:
ad:01:e2:b3:74:43:04:7c:67:dc:ad:c2:c5:cf:86:
59:cb:7a:89:f3:7c:2f:db:85:dd:6b:ec:d8:bd:69:
41:5f:c8:45:f8:e2:3d:b6:8c:e4:6a:25:eb:87:11:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:A1:48:45:F2:CD:92:B8:B1:1C:6E:7D:66:A8:89:D0:FA:20:A7
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/9pehSEXyzZK4sRxufWaoidD6IKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c1:f9:d2:ed:60:7c:df:d5:de:1a:f5:61:d3:a0:df:54:ec:
83:3e:33:4e:a3:8a:e0:8d:70:13:b3:71:a5:08:9d:0e:f2:79:
34:69:07:12:be:4f:e3:f2:f8:37:e5:55:7a:5c:d7:57:a5:eb:
0f:ed:d3:07:d8:d5:7c:96:d8:2e:90:08:62:70:ff:15:50:8a:
6d:d4:fb:70:3d:b0:b7:02:db:10:6b:33:1f:1f:48:7e:01:7e:
b2:5b:72:51:42:12:9f:80:de:81:75:63:ef:37:d5:a5:50:92:
42:67:ef:8a:0e:f5:31:15:67:86:cc:ec:4e:48:46:cf:3f:22:
f9:2a:13:00:7e:73:ec:99:af:7d:65:6d:fb:9e:96:43:b1:19:
8a:67:e2:85:48:90:24:a6:2f:ef:f5:dd:6e:3c:ef:e2:e3:eb:
83:ef:1b:79:9c:77:20:0c:9c:12:75:7e:ce:49:95:0a:69:48:
4e:80:65:4b:a2:81:11:85:fc:15:02:3c:f7:6f:43:4f:4d:b2:
8c:38:55:ee:23:af:7b:db:f7:85:b3:b5:cd:65:41:49:db:27:
16:d2:2f:fe:9a:62:c4:98:a3:c4:16:e1:0e:9b:23:6c:b4:e4:
97:5c:54:6f:f8:49:c2:49:a6:e6:ec:2a:77:47:8b:a2:de:08:
e9:b8:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-ams.rpki-client.org