Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/N2yhC-z-zFNWQdBlYcRKl-uR9iQ.roa
File: N2yhC-z-zFNWQdBlYcRKl-uR9iQ.roa (raw, json)
Hash identifier: S/HuJo6x9CSA5ggm6zn7s9Pv6gJvWcFaponl54AEMCY=
Subject key identifier: 37:6C:A1:0B:EC:FE:CC:53:56:41:D0:65:61:C4:4A:97:EB:91:F6:24
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 09AAB07E
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/N2yhC-z-zFNWQdBlYcRKl-uR9iQ.roa
Signing time: Sat 01 Jan 2022 11:00:42 +0000
ROA not before: Sat 01 Jan 2022 11:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 5.62.35.0/24 maxlen: 24
5.62.34.0/24 maxlen: 24
5.62.33.0/24 maxlen: 24
5.62.21.0/24 maxlen: 24
5.62.23.0/24 maxlen: 24
5.62.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162181246 (0x9aab07e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 1 11:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=376ca10becfecc535641d06561c44a97eb91f624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:a7:9e:08:1b:a1:98:fc:d3:32:91:aa:63:
f8:7c:d9:bd:5b:40:47:74:2d:d7:90:5c:d0:36:b6:
ea:09:88:67:2c:0b:27:9a:b2:fa:a3:aa:c0:1c:ea:
a0:6e:66:46:42:01:fb:34:19:e4:de:13:4a:85:f6:
de:0b:d8:7d:f5:b9:5b:4d:2e:2f:6a:f7:0b:9c:38:
e7:d8:49:6d:77:b3:fe:f0:34:69:78:9f:f0:cf:54:
77:01:64:f4:dc:cb:e9:41:ac:63:3d:73:a2:3a:e1:
c4:57:61:9d:9c:42:31:61:9b:ed:1e:f7:9b:ed:45:
74:95:5e:d2:48:8e:99:b8:c0:7e:5c:30:16:75:1c:
cc:6c:e6:45:9c:61:55:95:ff:a4:c5:19:80:d3:14:
f7:5b:9c:86:dc:1b:65:ee:3e:2c:f5:02:35:65:94:
a7:63:ac:fb:93:b2:15:1c:fd:90:4e:0d:59:3f:3f:
6e:0f:46:da:92:7d:ad:f6:d8:49:af:17:f2:82:6e:
3d:81:95:04:8b:a8:37:11:7a:2d:4b:66:a6:cc:1e:
4b:41:68:6c:0a:22:cd:2c:d2:ce:b5:15:b3:31:62:
41:c4:d0:84:a1:96:26:4e:9e:65:cb:ac:f9:ef:14:
b6:5a:30:84:63:d2:dc:aa:6c:a4:7f:99:f8:03:71:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6C:A1:0B:EC:FE:CC:53:56:41:D0:65:61:C4:4A:97:EB:91:F6:24
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/N2yhC-z-zFNWQdBlYcRKl-uR9iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.21.0-5.62.23.255
5.62.33.0-5.62.35.255
Signature Algorithm: sha256WithRSAEncryption
06:61:aa:9a:df:e8:8d:b7:e7:9f:5b:cf:08:b3:dd:88:ce:2c:
57:04:54:21:46:d1:b1:2e:37:d1:11:f9:7e:39:e5:ea:24:67:
cb:23:1a:1b:6d:72:c8:7d:1b:6f:e3:a2:64:a2:49:e1:e1:41:
43:9f:49:22:1e:b0:32:39:9f:ac:83:fc:42:0d:31:58:f5:e7:
ac:52:11:2e:15:3b:a6:9d:85:b9:7a:33:89:2e:82:10:dc:24:
98:a3:b7:ef:41:74:d3:3f:cf:8e:a1:56:04:29:4d:9c:1d:eb:
7b:f6:0f:af:e9:ce:da:83:fd:e2:ff:87:44:72:bc:fa:24:a4:
cd:21:b9:b8:78:a1:99:d9:03:c1:a3:15:5a:a0:c3:2f:9a:25:
56:03:fe:c6:16:7e:af:f6:35:82:a2:01:e4:6d:59:11:67:70:
6b:5e:4d:68:c3:15:49:06:fe:65:26:0d:50:e1:f6:84:d4:bb:
b0:b6:df:6d:3b:80:cc:da:86:e7:03:4b:62:18:8b:ad:9e:99:
2c:ba:d1:3b:85:a6:d3:e5:f1:c7:14:7e:e4:22:73:f0:a6:4a:
53:28:bb:9c:e8:35:7b:0d:75:e9:f9:1b:90:af:94:25:7d:12:
a0:4b:71:22:73:8d:21:13:3c:a9:75:50:25:18:7e:a8:fe:cb:
a4:62:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:36 2024 by rpki-client on console-ams.rpki-client.org