Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/pPwAfJ11rek4ffVRb0h32R6eeAY.roa
File: pPwAfJ11rek4ffVRb0h32R6eeAY.roa (raw, json)
Hash identifier: J8gYyResNcobHqHKITgEQ+cOsS1CcagW0lAUGq8z2DQ=
Subject key identifier: A4:FC:00:7C:9D:75:AD:E9:38:7D:F5:51:6F:48:77:D9:1E:9E:78:06
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 065F6826
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/pPwAfJ11rek4ffVRb0h32R6eeAY.roa
Signing time: Sat 01 Jan 2022 07:58:15 +0000
ROA not before: Sat 01 Jan 2022 07:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62046
IP address blocks: 212.59.104.0/24 maxlen: 24
62.181.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106915878 (0x65f6826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jan 1 07:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4fc007c9d75ade9387df5516f4877d91e9e7806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:82:f0:9c:48:7d:78:25:a7:b6:b9:fe:77:
61:20:c6:8d:92:9a:16:2a:88:71:8a:6e:57:66:61:
a3:ab:cf:73:14:ee:ff:49:f7:8d:46:37:bb:d7:f6:
f1:1d:ee:58:26:93:e7:5d:13:73:a8:98:af:d9:8d:
62:9a:99:b2:25:49:e6:0b:bd:89:67:1f:d6:76:cb:
d6:a9:a5:05:2b:0f:73:1f:6e:c7:5f:60:cd:5c:12:
bb:43:c3:42:63:11:e6:52:5d:42:a6:61:48:fb:85:
0d:a3:c0:8b:d3:68:c7:70:c8:c8:3b:8d:8e:03:94:
07:f9:ff:b8:4c:4c:93:6f:67:89:f8:63:69:5a:72:
f9:e9:b8:90:11:41:1d:7c:53:1f:29:9a:40:95:0a:
be:6b:9c:0f:ce:f8:93:75:ed:c7:90:5b:d4:92:df:
20:3f:42:9e:f1:da:b5:73:cc:60:c8:9c:37:4b:6a:
9b:a5:35:71:94:a6:a6:15:00:5b:62:59:ca:32:56:
f9:b2:fc:3f:4c:c4:01:4c:ec:97:41:8b:f0:09:21:
5f:fa:3a:7b:14:3a:bf:9e:ac:52:57:6e:0c:b9:86:
5b:58:02:4d:85:08:b1:00:8f:59:b4:42:a2:2a:b5:
46:bd:80:b4:7a:bb:d7:b5:71:b0:02:f0:2b:f6:3e:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FC:00:7C:9D:75:AD:E9:38:7D:F5:51:6F:48:77:D9:1E:9E:78:06
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/pPwAfJ11rek4ffVRb0h32R6eeAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.56.0/24
212.59.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1b:df:6c:2f:84:17:37:d8:1f:8e:7e:6e:6f:40:a0:fe:cf:
aa:40:dd:fd:d7:06:c5:fb:9c:9e:89:7d:db:38:9f:e0:fd:80:
e5:d2:dd:a3:d5:c2:35:1b:20:41:a3:16:55:d7:0e:15:7c:e3:
51:ae:b6:08:39:6f:44:4d:2f:25:91:cd:ea:71:de:7f:70:f0:
16:9e:c6:ad:5e:fa:1c:82:4c:0c:e1:ae:f9:23:48:97:af:c7:
c8:8d:0b:ce:a3:ba:66:48:2f:d1:17:5e:bb:28:53:a6:c3:d7:
10:50:d4:7f:92:1c:58:82:14:f0:a1:4b:c8:1b:9f:cf:aa:08:
49:96:3d:09:63:60:d5:da:09:54:b1:97:ab:59:26:c1:ef:48:
37:cd:0f:a4:95:c9:47:46:6c:b2:73:ee:fd:f9:bd:7b:42:83:
e6:39:73:ec:d1:0a:9f:44:a9:58:b9:cd:c7:82:60:b1:18:59:
8f:11:8f:6a:22:16:42:21:06:4c:61:54:50:3e:b6:23:29:dd:
da:77:9e:69:a7:58:75:01:e0:30:ce:1f:95:85:65:42:17:19:
f1:97:aa:d9:63:3d:ba:f9:b3:a3:0f:c3:93:e8:ac:33:24:ea:
e2:fc:72:fd:5e:3c:f5:7c:2d:2f:34:00:96:f3:64:6c:2d:a1:
23:bb:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:02 2024 by rpki-client on console-ams.rpki-client.org