Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/HSm0mxnHeEK1RtpUvxHtEibaPa8.roa
File: HSm0mxnHeEK1RtpUvxHtEibaPa8.roa (raw, json)
Hash identifier: 0CXWT4ngs35ORTuZBKXSBavze4/pn5/ljgbwni2u3n8=
Subject key identifier: 1D:29:B4:9B:19:C7:78:42:B5:46:DA:54:BF:11:ED:12:26:DA:3D:AF
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 065E21D5
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/HSm0mxnHeEK1RtpUvxHtEibaPa8.roa
Signing time: Sat 01 Jan 2022 07:58:15 +0000
ROA not before: Sat 01 Jan 2022 07:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61121
IP address blocks: 62.181.50.0/24 maxlen: 24
62.181.51.0/24 maxlen: 24
62.181.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106832341 (0x65e21d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 1 07:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d29b49b19c77842b546da54bf11ed1226da3daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:1d:22:20:79:b3:02:23:04:4c:9d:40:f2:
82:00:18:4f:69:b9:9a:93:10:34:be:a1:81:4d:82:
6b:25:a5:72:fc:f3:1b:67:da:16:d4:93:ba:bd:db:
b8:6f:1a:4a:d1:f8:db:4b:c5:3b:d7:14:4a:79:fe:
2d:45:68:4f:99:1b:bd:a1:64:6a:cf:cb:ac:2a:99:
5b:59:e2:d0:6d:dc:75:56:15:48:af:80:cc:ca:66:
b9:84:61:ea:15:6a:4b:ff:1e:06:8f:19:9c:cb:f4:
4d:b6:2a:51:0c:a9:c8:7f:c1:e1:54:24:f6:f4:83:
16:bf:2c:dd:40:51:1a:56:d2:25:9f:dc:73:b3:60:
84:cd:f5:f4:90:9d:34:74:01:60:0d:91:db:8f:1a:
24:74:07:fb:13:bc:b8:26:fb:73:5a:8d:13:95:de:
9c:ac:de:6f:3e:78:65:7b:38:b6:40:cc:90:ab:13:
65:1c:17:2a:40:03:f4:1f:1a:7d:66:a4:1c:e0:23:
c8:6d:eb:e4:d9:f1:9e:92:e3:1e:4d:81:16:93:82:
ad:54:39:e6:a0:18:1d:9b:cf:c1:87:c9:82:47:d3:
7c:0f:9b:c0:ad:3c:22:e6:a3:87:5e:2c:ae:7f:93:
cf:97:c5:b8:27:1c:10:9e:a4:29:2b:f5:80:4a:39:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:29:B4:9B:19:C7:78:42:B5:46:DA:54:BF:11:ED:12:26:DA:3D:AF
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/HSm0mxnHeEK1RtpUvxHtEibaPa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.50.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:6c:98:0d:4c:64:d7:0c:91:c4:71:3c:19:58:7f:87:9e:85:
16:50:1c:2d:13:16:bc:4a:8b:dc:70:48:ac:de:f2:fc:4f:60:
19:16:fa:b1:3e:0c:09:95:41:2b:5f:e9:2a:bb:41:26:ae:61:
f9:2f:f8:d7:a5:da:c0:0e:8c:e0:81:c7:18:a0:09:5e:ed:7e:
9a:f0:62:21:00:b0:f3:e2:db:4c:42:97:d2:a1:05:c6:87:ea:
75:ee:09:67:9b:bc:b3:2d:b1:fb:2a:1c:e1:1c:89:20:3b:b6:
65:f0:8b:00:bb:7d:eb:8e:6f:40:9d:fd:f4:e4:9e:e1:3d:2e:
78:34:a9:1a:56:f7:6b:b1:f2:0d:6c:14:0b:24:f5:6a:c4:60:
0f:1a:9b:bd:5e:75:7e:b8:2a:78:5b:f2:f0:4c:2b:54:7f:d0:
56:5f:03:fb:31:24:ec:70:13:24:48:bd:db:9e:86:0c:5a:c9:
73:64:17:42:97:be:b2:ae:61:54:b1:56:7b:90:26:d8:46:bf:
81:36:64:c5:5b:b0:00:cb:bf:7f:34:e9:3d:b4:d3:41:67:73:
43:47:d5:11:9a:f7:19:0c:29:12:87:d9:5c:50:b1:69:b4:8a:
52:72:3f:1f:1a:13:9c:f5:1f:e8:e1:ce:bc:b5:f2:f1:4e:b1:
f2:2f:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:02 2024 by rpki-client on console-ams.rpki-client.org