Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/82AszoT_1xajEsm9F0O6fGPaWFg.roa
File: 82AszoT_1xajEsm9F0O6fGPaWFg.roa (raw, json)
Hash identifier: dbzo/T6G9m6opZiMBo/JzK1P2hgkJGGuzxG8CPObx6o=
Subject key identifier: F3:60:2C:CE:84:FF:D7:16:A3:12:C9:BD:17:43:BA:7C:63:DA:58:58
Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial: 1280C88E
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/82AszoT_1xajEsm9F0O6fGPaWFg.roa
Signing time: Sat 01 Jan 2022 09:03:21 +0000
ROA not before: Sat 01 Jan 2022 09:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5511
IP address blocks: 62.229.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310429838 (0x1280c88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Validity
Not Before: Jan 1 09:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3602cce84ffd716a312c9bd1743ba7c63da5858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:4c:17:7a:bc:55:17:d2:ca:80:0c:cc:1b:
8f:8f:c1:f9:ce:f6:db:10:2a:6d:b5:2e:3c:7b:d7:
60:8b:db:37:54:42:b9:5b:a0:43:b2:09:a4:de:12:
e8:de:62:67:e6:78:1c:f3:0d:0b:d7:63:c7:e8:11:
61:a5:ce:be:98:fe:6f:bb:23:b8:b5:84:67:d8:f9:
01:2c:a0:ad:d1:3d:6c:da:51:eb:9a:81:68:ca:c9:
00:c7:c7:84:98:96:95:6d:cc:44:ad:c9:15:59:68:
ae:ab:bd:42:0b:95:4f:06:32:1c:a9:43:d7:de:e5:
02:77:4c:bd:b8:8a:58:60:a0:2a:4c:49:c8:33:07:
56:98:20:8d:b6:1c:13:ff:0d:d2:2b:0c:93:28:d8:
d4:96:eb:2e:00:17:0e:3e:ba:c7:2d:d5:80:9a:21:
0f:22:e0:d5:c4:52:bf:5e:ec:f2:40:8a:f3:86:14:
77:58:77:0c:49:91:22:e3:58:52:10:e7:bc:d0:24:
f5:ca:fa:d4:7d:a7:24:59:eb:fd:62:bb:87:50:b1:
6a:e1:c5:22:89:35:ef:ef:2f:79:ca:33:49:a4:12:
f2:de:c9:9b:d4:a8:1e:80:49:80:fb:2c:32:6b:60:
ab:75:d7:6e:14:92:e8:3d:65:a7:f0:7d:45:0f:6b:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:2C:CE:84:FF:D7:16:A3:12:C9:BD:17:43:BA:7C:63:DA:58:58
X509v3 Authority Key Identifier:
keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/82AszoT_1xajEsm9F0O6fGPaWFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:42:2e:aa:5a:49:d1:7e:ed:e9:b4:c1:d5:3e:4e:d8:71:67:
12:c2:26:a9:77:3f:f4:70:d3:a5:ff:9d:2b:13:f9:13:73:7e:
0e:95:11:96:5b:17:e3:34:4b:0b:c8:48:b7:54:b4:26:0b:11:
96:7d:41:f4:70:7f:51:63:98:ce:39:51:57:39:b1:69:ef:c7:
91:8c:1c:79:6b:16:e3:2a:50:87:01:87:9d:d0:21:c7:0e:8f:
83:18:e4:60:be:05:37:1a:51:1c:da:66:6b:fe:6c:18:5a:cf:
fa:34:31:91:2e:a0:70:8a:41:5a:cc:72:3f:f9:dd:ae:32:22:
f5:7d:45:fc:e2:b4:11:aa:f5:55:1f:3f:58:62:c3:e8:ed:a4:
c0:dd:1f:b8:de:de:86:b4:83:72:d0:50:5c:0f:ee:4e:d5:8f:
e4:83:2b:93:41:cf:7c:4e:2a:d9:48:81:66:f4:fa:6c:99:02:
e7:2b:91:58:04:ff:07:fd:a0:96:d8:78:39:05:09:06:7f:51:
05:b4:2e:ab:7a:57:af:3f:d9:ef:9d:c3:70:13:32:4f:e8:e0:
2a:df:f2:bf:18:ca:95:28:26:24:10:d0:f4:29:99:3a:b4:0e:
95:cf:22:8b:40:c1:5d:77:82:01:e1:9e:d0:a4:e5:7a:c5:7a:
7a:b6:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:58 2024 by rpki-client on console-fra.rpki-client.org