Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_9IxEFNItytuJD28F6ljGeBXf54.roa
File: _9IxEFNItytuJD28F6ljGeBXf54.roa (raw, json)
Hash identifier: LfZDDYUKYZk9e0RQOqsLSFjWbJHtwV85Vd+yonBO3l4=
Subject key identifier: FF:D2:31:10:53:48:B7:2B:6E:24:3D:BC:17:A9:63:19:E0:57:7F:9E
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 175ED7FF
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_9IxEFNItytuJD28F6ljGeBXf54.roa
Signing time: Sat 01 Jan 2022 09:54:00 +0000
ROA not before: Sat 01 Jan 2022 09:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31198
IP address blocks: 62.228.242.0/24 maxlen: 24
62.228.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392091647 (0x175ed7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 09:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffd231105348b72b6e243dbc17a96319e0577f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:fb:bb:06:80:be:37:7c:f8:b6:3c:b2:5e:
0a:dd:0f:08:81:3d:27:ac:d4:9f:c2:cf:33:3b:c3:
42:83:2e:12:85:82:43:33:3b:2c:c4:59:16:a1:8a:
89:92:af:bd:95:4f:53:90:e8:7c:69:88:a8:3b:5c:
78:80:40:73:2d:ed:64:11:31:05:f3:8e:47:ff:60:
4d:94:f7:f4:14:04:9e:1b:85:67:43:58:f6:5b:9b:
47:03:bd:d0:46:eb:e2:bc:a3:32:9e:c9:e4:4e:7e:
88:c4:27:b8:30:fb:18:0b:3e:da:c6:38:72:1a:73:
18:b5:db:95:e5:a1:c1:7a:29:ba:e4:40:23:25:29:
6d:c8:c1:b6:51:d3:3e:8a:4a:6a:4d:7a:64:23:76:
f5:90:16:ec:8c:c7:57:c3:86:d3:27:c9:5e:4e:7c:
7d:2e:78:7b:d2:35:d2:92:b7:ad:a9:bd:8c:b3:36:
6f:5d:d4:1b:d7:4c:2f:a2:ec:1e:97:7a:32:91:31:
21:03:02:2a:18:ed:e2:89:67:6d:6b:6c:a1:d5:41:
f6:bf:6e:db:c7:36:c2:bd:49:52:56:88:dd:17:dd:
21:d1:ff:01:2f:60:7a:4e:de:09:51:20:90:d9:42:
a1:42:6b:31:d6:23:b5:c6:51:72:ca:7d:c9:10:e8:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D2:31:10:53:48:B7:2B:6E:24:3D:BC:17:A9:63:19:E0:57:7F:9E
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_9IxEFNItytuJD28F6ljGeBXf54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.242.0/24
62.228.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ad:48:83:9f:90:33:0c:15:5f:1f:7b:cd:43:15:9a:9f:03:
9f:1e:64:5b:68:27:81:42:2b:79:a1:82:71:24:43:a6:67:a3:
b2:de:60:ab:18:d0:10:31:1f:6d:00:c3:d0:8d:c0:ea:60:dd:
43:eb:77:74:8f:f1:1d:2a:7a:01:30:22:09:5b:20:91:bb:0b:
a8:cf:dc:54:e2:ae:76:fc:45:96:83:08:a1:5c:52:9b:e7:4a:
f8:f6:67:a2:75:c8:52:ca:66:d1:ca:78:23:c4:98:c1:1f:a0:
20:62:04:be:d2:6d:b8:ee:6c:3a:d3:e7:39:0e:7c:14:34:99:
db:61:bd:a7:c8:6b:18:65:fc:6c:ba:b2:8d:e3:4a:8e:15:ff:
a6:09:b8:66:86:b1:bc:23:76:50:01:91:34:09:c3:a6:bb:95:
be:66:26:3d:d6:2d:7b:69:ad:df:89:1a:8f:0a:fa:45:58:cd:
6f:d5:cb:b2:43:5d:18:42:a9:9f:6e:d6:11:e7:c0:da:d5:0c:
71:c3:98:f0:82:a2:d8:7f:ad:0e:20:5b:35:33:f6:38:8d:49:
c2:0f:b1:e4:7b:14:23:82:aa:ab:21:c6:95:eb:ad:15:ee:5a:
bf:21:7e:d4:7e:23:18:08:4b:a8:d4:fc:f3:51:30:6d:30:28:
e6:18:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-ams.rpki-client.org