Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/ICkGwHlYRIxLTklDsGCWoKzMQCY.roa
File: ICkGwHlYRIxLTklDsGCWoKzMQCY.roa (raw, json)
Hash identifier: CvrGY2f9V1AcEJH+VvRDpV+W8OCGSHLNetJ8sxSCtPw=
Subject key identifier: 20:29:06:C0:79:58:44:8C:4B:4E:49:43:B0:60:96:A0:AC:CC:40:26
Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial: 137E2E35
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/ICkGwHlYRIxLTklDsGCWoKzMQCY.roa
Signing time: Thu 21 Apr 2022 12:11:13 +0000
ROA not before: Thu 21 Apr 2022 12:11:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51964
IP address blocks: 62.229.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327036469 (0x137e2e35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Validity
Not Before: Apr 21 12:11:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=202906c07958448c4b4e4943b06096a0accc4026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d8:2a:c6:aa:12:2f:1f:b3:2b:b5:e3:07:ce:
4d:24:f9:d3:ff:8f:49:c6:19:4f:f6:d2:7d:db:ee:
87:1a:c2:b1:25:13:05:a2:46:37:37:45:86:32:46:
fa:0f:e6:ed:a3:69:a0:9e:e3:34:7e:71:6c:1b:5d:
49:43:36:73:2e:56:7c:6b:37:4c:d2:6f:4e:d2:db:
aa:d3:b7:6e:3d:0e:90:be:f8:54:b7:e9:27:a2:27:
2f:87:28:be:cc:3d:75:cd:37:0e:67:55:a0:09:b4:
ab:db:f3:a9:1d:aa:8d:cc:4e:d7:6b:02:a4:b2:77:
ed:0e:6b:f9:25:cc:46:ff:80:a8:fe:cb:89:19:37:
0b:6f:70:f5:f1:70:27:7e:6d:2b:20:1e:de:b3:14:
47:9f:40:59:41:7a:2d:53:b7:67:6f:c6:ba:21:c5:
5d:e5:aa:ad:ce:f2:8f:33:c5:af:00:6a:53:e3:a7:
8b:7f:b1:f2:05:da:de:c2:74:6d:8c:59:bb:04:b2:
17:fd:29:4f:f0:58:f4:21:f2:c9:9f:8f:ea:3e:f3:
be:85:66:4d:22:e2:f3:60:75:4f:27:4e:76:c8:d0:
96:18:3b:27:57:c2:cc:93:8e:75:5a:5c:d3:d3:b5:
ec:78:eb:77:33:3d:d4:55:33:d4:19:4f:bd:38:65:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:29:06:C0:79:58:44:8C:4B:4E:49:43:B0:60:96:A0:AC:CC:40:26
X509v3 Authority Key Identifier:
keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/ICkGwHlYRIxLTklDsGCWoKzMQCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:90:f4:75:71:34:a3:06:d1:a0:b1:25:71:36:25:29:13:83:
c9:71:f9:cf:ec:ea:ea:b9:d9:f7:4d:e0:e0:2b:db:d5:0f:32:
3b:f3:1b:88:65:25:2e:6f:76:8d:a8:ca:da:b0:29:9e:d8:12:
18:15:5c:c2:77:cd:7b:25:5d:6c:de:cd:87:41:1c:67:39:25:
cd:20:73:09:0b:1a:7f:64:0e:50:2a:b2:f0:e7:e7:c6:08:d4:
72:bc:da:7f:78:28:5d:e0:ac:c3:4a:0b:54:96:47:eb:1a:f8:
00:7e:a3:32:e6:50:09:60:df:76:7d:26:ea:a9:d7:c9:6a:63:
a8:2d:fa:62:f1:5f:ab:4a:ba:60:f7:75:e5:23:d3:33:e2:4c:
84:28:c5:f9:29:5b:de:46:b2:26:60:e0:6e:aa:cb:e9:46:0a:
28:4b:9b:cc:62:85:31:c4:76:ee:5d:90:14:27:eb:12:c0:0f:
e7:77:d4:ea:93:bb:33:52:55:1e:b1:88:ef:78:43:35:7f:d7:
3b:31:6a:60:fe:48:60:b2:9e:df:fb:e8:b0:d2:19:92:72:b1:
74:69:8b:fd:7f:59:e9:c7:79:48:14:5e:71:7e:a6:f4:b9:97:
21:92:47:a1:78:ed:c4:08:e3:d0:80:9e:09:8f:b0:45:d2:d4:
44:dd:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:58 2024 by rpki-client on console-fra.rpki-client.org