Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/u0YQRuANiFoDV2cY-0O8Ki1_fMc.roa
File: u0YQRuANiFoDV2cY-0O8Ki1_fMc.roa (raw, json)
Hash identifier: /Jicn8iwHh236BdFn9qHklZBJpGkO4HjMleDR7bfkzA=
Subject key identifier: BB:46:10:46:E0:0D:88:5A:03:57:67:18:FB:43:BC:2A:2D:7F:7C:C7
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 176CD788
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/u0YQRuANiFoDV2cY-0O8Ki1_fMc.roa
Signing time: Sat 01 Jan 2022 09:54:08 +0000
ROA not before: Sat 01 Jan 2022 09:54:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208601
IP address blocks: 62.228.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393009032 (0x176cd788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 09:54:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb461046e00d885a03576718fb43bc2a2d7f7cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:5f:4e:3a:19:36:9d:f4:a8:08:ec:5e:62:
b3:46:9e:c3:71:b4:51:af:6d:a4:49:d5:05:80:6d:
24:5b:b6:b8:13:cc:c8:5e:38:de:90:33:91:ee:1e:
e5:42:ff:39:36:12:ea:6e:df:67:9a:82:9f:b3:3c:
ab:7a:9b:41:15:c9:04:1b:d0:7e:a5:84:49:05:96:
11:6c:d1:64:ef:d3:ad:f4:34:4c:e4:21:f7:3d:94:
85:38:83:97:a1:fc:db:28:c7:f3:b3:1c:26:c6:3f:
fe:50:79:ac:d1:c9:1f:61:92:78:de:02:8e:73:8c:
ca:61:70:d5:b1:93:c9:36:65:fd:dd:45:da:e3:4f:
db:9b:41:0d:6e:cb:30:af:56:75:c7:d0:ba:c8:d8:
0d:53:83:94:93:74:e0:15:c8:bf:a4:3e:e2:21:46:
ea:75:dc:a7:5e:80:94:18:53:3a:80:04:bf:3c:ae:
62:79:d7:ff:52:93:88:6a:03:2e:6e:4e:ab:ae:3b:
4a:cb:68:05:43:00:e4:b0:15:4c:3b:88:68:1c:78:
eb:af:62:ff:d6:6a:1a:c1:b3:f1:67:62:63:65:ca:
fc:95:e6:1e:cf:42:c9:8b:45:bb:32:05:41:12:a7:
9a:ed:22:86:71:30:1b:47:8b:da:94:ce:c7:4d:6b:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:46:10:46:E0:0D:88:5A:03:57:67:18:FB:43:BC:2A:2D:7F:7C:C7
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/u0YQRuANiFoDV2cY-0O8Ki1_fMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.235.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fc:e2:47:a3:be:aa:a2:43:5f:cf:04:01:e0:e8:c4:d5:61:
d5:fd:16:17:f0:2f:06:20:0b:da:5a:93:59:bf:ca:8b:a5:29:
df:5e:08:03:c0:6e:c9:f9:ee:a8:17:e4:01:8b:69:8c:28:2a:
47:93:08:45:77:c7:b6:7d:43:23:16:ab:80:ac:d5:cb:4b:b1:
30:c6:32:96:df:db:35:55:db:0e:16:e4:e5:8b:91:c8:82:ff:
80:e8:9a:25:aa:92:ae:ee:43:18:c2:14:8f:08:37:73:40:58:
3a:7f:ec:3b:2d:b7:8b:be:fb:c6:1f:e3:f8:21:a3:df:9b:1f:
94:5e:b6:a3:95:e9:ee:2a:55:0a:a3:2c:5f:6b:f0:35:f7:80:
57:84:fd:19:86:87:e9:14:3d:59:c8:d1:bb:2f:b6:0f:3b:09:
d0:d6:c9:36:69:46:8d:59:8c:55:c6:ec:37:33:ee:b3:2b:e0:
35:3a:8a:a8:81:a9:05:d6:a9:eb:21:29:79:a5:9c:ff:d6:ff:
4c:25:13:92:a4:5f:5a:52:dd:b4:79:f4:0a:33:91:97:71:2b:
74:3f:ac:8d:36:53:05:ce:9b:f9:7f:8b:4f:98:a3:05:4b:d0:
89:ca:73:ba:e9:a7:ea:a3:47:8b:8d:14:14:e0:94:88:2b:3f:
15:79:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:35 2024 by rpki-client on console-fra.rpki-client.org