Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/JFj-muI9AS0-zMBXSXs3nRssV7A.roa
File: JFj-muI9AS0-zMBXSXs3nRssV7A.roa (raw, json)
Hash identifier: 7O0rFiknXK1TV3mipgV88AZEjmqMR8IFmGIFgOyaGLc=
Subject key identifier: 24:58:FE:9A:E2:3D:01:2D:3E:CC:C0:57:49:7B:37:9D:1B:2C:57:B0
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 1BBF5DC7
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/JFj-muI9AS0-zMBXSXs3nRssV7A.roa
Signing time: Sat 01 Jan 2022 11:56:10 +0000
ROA not before: Sat 01 Jan 2022 11:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2116
IP address blocks: 62.176.192.0/19 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465526215 (0x1bbf5dc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jan 1 11:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2458fe9ae23d012d3eccc057497b379d1b2c57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:b3:52:a2:a1:52:b2:fd:19:26:3b:cc:ee:
ac:4d:62:d7:e7:f7:53:3e:e6:34:f7:92:d0:b1:2a:
03:07:ca:d4:5d:a6:5f:05:83:e6:c0:50:5e:ba:6c:
ee:6b:80:ea:f5:79:39:21:9a:ae:18:0b:e4:e1:14:
54:35:9f:93:6f:ba:f5:1b:e7:e7:da:20:ab:45:4f:
44:a1:1f:2a:07:49:c4:e3:76:0f:d7:4e:43:7e:6f:
9e:92:78:7f:ca:db:ce:45:d3:65:8f:53:8c:b0:22:
f3:ca:52:ec:ed:bc:0c:6e:a5:12:e9:98:64:0a:bb:
1e:cc:3b:a6:d3:ec:c5:65:31:45:b4:c9:a0:35:ee:
26:d5:6e:26:e3:f7:b2:4a:3e:3e:bc:0c:59:c1:cd:
d4:bb:03:10:81:67:cb:b3:da:cb:7c:f2:f1:41:82:
c5:fe:ba:38:1a:62:99:25:aa:70:86:1f:dd:07:31:
1f:13:74:24:20:72:fa:a3:b0:d2:60:ea:c1:be:20:
61:f1:2e:da:76:70:50:13:40:9b:7c:07:fa:f9:03:
61:a1:93:67:97:ba:4f:2b:1d:18:7a:11:58:ef:80:
0d:58:a7:78:f4:3b:5e:be:ea:e2:1b:86:2b:b0:85:
24:80:67:d0:a4:93:82:b1:94:bc:d8:96:b2:fa:83:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:FE:9A:E2:3D:01:2D:3E:CC:C0:57:49:7B:37:9D:1B:2C:57:B0
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/JFj-muI9AS0-zMBXSXs3nRssV7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:c7:a7:c0:55:38:db:95:e9:1e:f3:80:ff:e0:fe:3f:55:6b:
e5:63:ef:f3:03:72:70:92:77:0c:68:81:2d:a8:ab:19:ce:90:
83:73:8f:e9:5c:71:0a:b9:29:29:36:34:65:dc:4f:4a:d6:da:
25:48:1d:e4:30:d1:6b:75:b7:2b:3e:ba:73:e1:39:9d:27:e1:
a9:83:ba:60:51:6b:42:ce:5c:1c:08:1e:85:e8:38:67:2b:8f:
26:fb:45:b8:0a:ac:f1:74:f7:1a:1c:04:43:fe:a7:8c:28:5d:
9f:d7:30:6a:10:63:3f:df:62:df:c2:c5:b6:0d:f0:9c:ee:e3:
ed:a3:f7:ab:7a:c9:90:b3:dc:e1:3d:e7:68:97:4e:bc:8a:21:
48:cc:9e:88:71:81:2d:d4:99:65:02:5f:1a:5b:f6:35:dc:a6:
3c:8d:2f:9e:dd:f7:10:df:44:2a:3b:e6:83:ee:80:75:2a:20:
a5:97:38:53:be:5e:c9:ab:9b:c6:c6:7b:97:b6:91:00:d8:48:
35:0e:b7:7a:a9:21:57:2b:85:55:df:2a:08:e0:f6:07:c2:90:
c9:f9:47:ed:11:98:1b:6a:94:a4:78:d7:2e:14:51:8d:84:c6:
7a:4d:f7:5f:6b:60:94:fb:b6:9f:89:b7:53:fc:c3:13:6a:7c:
ef:b7:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:38 2024 by rpki-client on console-ams.rpki-client.org