Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/H9Tv59M0Wcr5Gp5fuWhz1gd3Xnk.roa
File: H9Tv59M0Wcr5Gp5fuWhz1gd3Xnk.roa (raw, json)
Hash identifier: ILWFxNc21J0yyYDY0VQ/Gzh7TPdXD18nH0MQYSnyjb8=
Subject key identifier: 1F:D4:EF:E7:D3:34:59:CA:F9:1A:9E:5F:B9:68:73:D6:07:77:5E:79
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17E475F8
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/H9Tv59M0Wcr5Gp5fuWhz1gd3Xnk.roa
Signing time: Sat 01 Jan 2022 03:59:53 +0000
ROA not before: Sat 01 Jan 2022 03:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29084
IP address blocks: 62.73.112.0/23 maxlen: 23
62.73.112.0/22 maxlen: 22
62.73.112.0/24 maxlen: 24
62.73.116.0/23 maxlen: 23
62.73.113.0/24 maxlen: 24
62.73.117.0/24 maxlen: 24
62.73.115.0/24 maxlen: 24
62.73.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400848376 (0x17e475f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 03:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fd4efe7d33459caf91a9e5fb96873d607775e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:f2:a9:a6:2a:8d:c2:ed:63:87:14:b3:97:
de:ca:40:f4:ab:0c:fd:dd:85:4e:99:43:87:99:22:
21:47:40:fb:67:81:9f:a5:fa:a8:a2:2b:d8:cd:fa:
b8:b0:d4:f0:60:ef:67:a9:12:ce:f2:44:00:ec:55:
28:57:b2:86:67:30:73:24:9a:a7:ef:c8:69:22:f4:
68:5b:ed:24:04:4d:1f:d0:fb:cb:79:8e:dc:eb:87:
07:ea:92:4f:3d:a3:23:16:0a:a3:62:c1:f1:68:ef:
a0:d3:2d:f5:33:88:d3:3b:2d:94:a3:4a:ac:22:3f:
1c:de:fb:5f:23:05:99:08:13:db:64:9d:33:99:ee:
89:3e:e6:9b:03:1b:c4:da:32:20:bd:47:ab:ec:d0:
e3:b9:b1:77:a3:3c:cc:c9:50:ab:ad:be:d8:84:a1:
ff:6c:50:bd:5e:89:48:24:79:f1:eb:dd:c8:7e:99:
f5:4f:9a:95:86:f9:1c:f1:3e:e9:5f:33:49:25:ee:
af:ab:dc:e1:17:36:0f:43:f1:5c:34:c9:30:bb:ce:
2f:c6:4c:28:a0:90:a9:dd:0b:89:5e:8a:c8:d4:32:
2c:a6:d0:4d:7a:9f:3d:fc:68:e8:f3:4d:0d:ef:2d:
13:83:4e:d0:69:da:7d:1f:cf:75:05:a3:b4:7b:5c:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:EF:E7:D3:34:59:CA:F9:1A:9E:5F:B9:68:73:D6:07:77:5E:79
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/H9Tv59M0Wcr5Gp5fuWhz1gd3Xnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.112.0-62.73.117.255
Signature Algorithm: sha256WithRSAEncryption
3e:c1:b8:da:6e:97:28:47:e5:96:b8:78:d9:c2:0e:2d:ae:31:
51:cd:4a:e4:cb:c1:ac:b2:04:79:86:32:e3:f5:2f:fe:2e:6e:
dd:c3:71:ea:04:eb:ba:f8:2d:aa:4b:66:b6:2f:19:e5:ec:b7:
93:c2:b1:b9:a4:f5:03:32:8e:ef:d5:e7:18:29:06:d6:3c:0f:
14:10:fe:d9:63:15:d5:e0:c3:42:c4:2e:0c:7a:24:ab:e6:f1:
84:3c:11:c7:61:99:24:d2:6d:ab:3b:28:b7:92:7b:ff:51:5a:
19:c1:38:5a:09:ad:00:bd:74:c8:8b:28:73:23:1f:e1:0b:15:
5a:e6:7d:c0:99:fe:8a:4a:97:da:d8:31:b1:df:a7:1e:57:71:
5f:71:a3:42:00:ae:9c:65:be:22:6a:09:10:58:08:49:bf:50:
00:ab:a5:a9:13:73:40:26:76:e6:d7:ad:15:a7:04:1e:47:1d:
66:fd:cd:5d:dc:8a:47:3d:da:5c:e3:e2:6d:44:10:4c:63:e3:
66:0b:ac:ff:e6:38:24:a7:49:11:f1:d7:70:69:a9:67:61:80:
11:3f:36:c3:ac:0d:a6:0b:a7:f1:77:95:e2:94:4f:6d:00:bc:
33:6d:59:a3:78:65:30:69:3d:94:52:9d:e9:e3:f1:d6:42:30:
2d:42:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org