Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/_DYX5lqQyEP3oH37F_sp0pPvTFo.roa
File: _DYX5lqQyEP3oH37F_sp0pPvTFo.roa (raw, json)
Hash identifier: QXvSc2hGbtUO7w4wPrY6I/rXiRuZM76FoG4IdFrwTgU=
Subject key identifier: FC:36:17:E6:5A:90:C8:43:F7:A0:7D:FB:17:FB:29:D2:93:EF:4C:5A
Certificate issuer: /CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Certificate serial: 0181D7DFF8F5EEE2BC3E8597A49588B3CD80
Authority key identifier: 02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/_DYX5lqQyEP3oH37F_sp0pPvTFo.roa
Signing time: Thu 07 Jul 2022 08:56:28 +0000
ROA not before: Thu 07 Jul 2022 08:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 62.106.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:df:f8:f5:ee:e2:bc:3e:85:97:a4:95:88:b3:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Validity
Not Before: Jul 7 08:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc3617e65a90c843f7a07dfb17fb29d293ef4c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:1c:ee:bf:f8:8e:82:39:7c:14:5e:7a:40:
a4:a4:72:fb:18:d7:cb:0f:02:61:79:1d:b7:82:e3:
f4:c1:cc:77:a3:b3:77:f8:b1:62:f3:04:9b:e9:83:
da:63:fd:78:31:97:99:e9:2c:6e:76:92:70:2c:46:
c1:bd:42:f2:c6:b9:ff:5b:9a:fd:ca:3a:81:56:aa:
b0:fb:0f:1a:36:c2:c2:24:e1:7b:74:f8:8c:30:d3:
60:72:70:22:8b:5f:df:98:33:ab:c6:37:3f:a4:fe:
ff:b4:2a:2b:1d:cf:b9:9b:98:b0:09:95:3d:7e:db:
57:02:35:9b:3e:af:07:05:98:50:af:8d:92:23:63:
67:7d:7d:f9:e5:89:48:aa:89:e0:6c:dc:e9:e9:70:
d8:19:cf:d7:38:31:7d:e0:c7:42:e3:d6:dc:26:f8:
7b:f7:8c:b2:e6:da:8b:fa:69:6a:40:2a:d6:12:c1:
bc:a6:c1:c8:22:6b:58:c2:dc:ad:1b:91:3d:8a:f0:
fa:d9:81:c5:ca:04:49:ae:82:7f:40:c7:5b:d1:1e:
4a:93:9a:71:7c:b8:6f:09:d0:ab:66:b4:13:10:e9:
a7:e5:af:c8:c3:24:6e:8d:a9:1f:fa:bc:64:98:e2:
87:be:8b:22:2d:16:d9:3e:23:33:ea:e1:21:4c:eb:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:36:17:E6:5A:90:C8:43:F7:A0:7D:FB:17:FB:29:D2:93:EF:4C:5A
X509v3 Authority Key Identifier:
keyid:02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/_DYX5lqQyEP3oH37F_sp0pPvTFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.83.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ae:58:eb:5f:2a:5e:55:f6:1c:92:7a:21:12:23:6a:11:57:
1e:bc:07:49:10:a3:26:d6:89:40:25:0b:52:c8:2a:62:15:f3:
9f:e0:81:a3:ff:98:39:44:c4:ee:68:d9:84:94:1e:af:43:18:
ba:e8:a5:f8:c1:f3:8d:b6:ce:3d:85:58:ba:27:87:42:de:87:
f7:d6:2e:a4:da:83:e4:c4:eb:c2:ac:8c:de:56:d4:ae:f0:39:
6a:bb:77:ae:31:b5:d5:02:37:98:b6:8e:9a:f3:6c:dd:6a:81:
87:9f:d2:5c:6a:e3:fc:a0:44:e3:4f:73:5d:43:5b:d5:a2:f9:
76:7d:21:10:40:61:a9:a6:a9:52:09:42:a2:c1:0f:7d:be:9a:
7f:cc:5c:97:28:4d:96:3d:e0:3c:88:49:20:f7:dc:16:39:36:
40:6b:e3:fa:5f:bc:9e:f2:9a:c7:e9:12:67:e5:39:ce:7e:b8:
14:25:72:93:9a:68:67:6e:86:3e:82:72:2e:43:98:79:b9:7f:
be:76:90:8f:00:f5:bf:c8:a5:30:62:2d:d9:e5:a4:42:0d:08:
7a:c0:a3:64:70:28:71:ea:10:df:ca:0d:18:54:dc:71:a1:06:
d8:79:86:0a:a6:d1:9d:21:0e:0a:bf:40:7a:be:49:91:2b:ee:
2f:29:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:43 2023 by rpki-client on console-fra.rpki-client.org