Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/K6flbkO1ko8keBDnZxMt0loIM3s.roa
File: K6flbkO1ko8keBDnZxMt0loIM3s.roa (raw, json)
Hash identifier: wmgVN0Rk7D8eu0j2lo1bV+pu5PyJz+LIQ+iMX1VB09g=
Subject key identifier: 2B:A7:E5:6E:43:B5:92:8F:24:78:10:E7:67:13:2D:D2:5A:08:33:7B
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 1769EF87
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/K6flbkO1ko8keBDnZxMt0loIM3s.roa
Signing time: Sat 01 Jan 2022 09:54:07 +0000
ROA not before: Sat 01 Jan 2022 09:54:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203206
IP address blocks: 62.228.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392818567 (0x1769ef87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 09:54:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ba7e56e43b5928f247810e767132dd25a08337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:96:83:26:48:bf:d8:49:83:9f:67:4b:ad:
91:2e:a4:1d:13:99:97:87:88:4a:55:32:f6:19:c5:
34:84:bf:62:e9:1c:d4:19:f2:df:ad:91:9b:14:c8:
9d:57:45:b7:29:9f:a8:ae:90:11:a2:94:49:40:8d:
e5:80:c2:9e:f5:42:e5:b1:a8:4a:6a:02:f0:77:96:
60:6c:a5:04:62:7e:41:0e:80:54:fb:5d:c5:7a:c9:
d2:42:50:81:89:8c:14:1a:69:de:e0:33:6d:20:e0:
98:a7:de:e0:54:2f:b7:a9:22:4d:59:2c:4b:d4:69:
44:72:6f:bb:2a:46:5b:3f:13:7a:eb:df:2d:d2:82:
d8:09:44:30:64:65:82:25:35:84:2a:eb:de:27:b3:
97:e4:c5:66:8e:2f:28:87:63:6b:2b:05:d7:23:2c:
eb:a5:ae:13:e7:a6:23:f8:70:1b:a9:f5:e9:ab:ad:
0b:de:43:fe:ff:6c:30:47:17:0f:0f:22:c5:33:19:
3f:c9:fa:7b:1f:2e:78:e2:5c:84:42:76:01:fc:bf:
15:78:65:38:29:85:4f:bb:99:e7:c0:c3:bc:ba:01:
de:38:6a:6c:28:80:28:ab:62:ea:10:82:be:6f:56:
83:a2:60:3d:a9:ae:37:5e:48:97:8b:4c:2e:5e:5e:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:E5:6E:43:B5:92:8F:24:78:10:E7:67:13:2D:D2:5A:08:33:7B
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/K6flbkO1ko8keBDnZxMt0loIM3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:af:49:6b:d7:87:49:01:ca:6f:00:df:2d:1e:18:3e:c2:4d:
c8:69:64:cc:8c:33:2b:9c:a5:79:f3:d9:f0:77:fb:d4:27:ef:
fc:f3:2b:03:79:e9:bf:7b:2f:23:7b:fd:2d:57:bb:37:1c:2d:
bc:89:32:c9:97:4b:c9:02:6d:3e:8f:eb:16:22:f6:71:15:7a:
9e:ec:d4:e9:5c:c9:63:bc:bb:1a:66:69:32:a8:9c:1e:24:75:
00:85:b1:ac:af:38:f8:6f:01:28:46:e1:fd:5f:d8:b2:97:bd:
7d:87:aa:6e:d4:27:0f:cb:35:8b:d1:05:f5:26:76:b0:48:2a:
4d:07:64:61:49:17:23:c3:51:5b:02:63:25:df:23:b5:d5:53:
42:8c:99:75:3e:19:fa:a0:de:cd:db:4b:41:3a:69:05:c8:cb:
55:50:8f:f6:3b:2b:45:3f:c9:cf:10:de:a7:bd:b9:15:43:5c:
1e:55:3a:09:6e:1f:3c:88:97:8b:73:01:00:69:4e:e9:d1:5d:
9f:9d:a8:f3:83:b0:ab:fc:6d:c3:af:5d:bb:64:0f:5c:22:6d:
9b:51:0b:35:0f:b2:80:9a:1b:99:a1:08:4d:73:48:ca:b0:e3:
0f:57:9e:cf:cf:c9:1c:b6:76:3e:fb:6b:38:93:fb:56:43:26:
72:32:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org