Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/Mlmoc0zQY47LxGlCh8a27-GfZjQ.roa
File: Mlmoc0zQY47LxGlCh8a27-GfZjQ.roa (raw, json)
Hash identifier: YoGArJuty6+UzJr01R+X2GCY+DiqeZBA+nRqyLduvwE=
Subject key identifier: 32:59:A8:73:4C:D0:63:8E:CB:C4:69:42:87:C6:B6:EF:E1:9F:66:34
Certificate issuer: /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial: 697BC6
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/Mlmoc0zQY47LxGlCh8a27-GfZjQ.roa
Signing time: Sat 01 Jan 2022 01:54:41 +0000
ROA not before: Sat 01 Jan 2022 01:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47886
IP address blocks: 62.3.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6912966 (0x697bc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
Validity
Not Before: Jan 1 01:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3259a8734cd0638ecbc4694287c6b6efe19f6634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:7a:3a:3a:ab:b7:55:db:f8:b6:e5:43:d6:
c5:ae:59:c0:13:5f:46:d1:64:dd:4e:9d:f5:22:c3:
4a:2a:b8:2d:62:ea:c6:09:28:67:d1:78:1c:72:8d:
e5:f4:c0:9f:d8:43:f3:10:b4:2d:4b:9b:43:c0:e8:
3f:1e:81:73:bf:8a:ac:f5:0e:65:02:4f:54:77:20:
d4:6d:2a:0c:9f:11:fd:4b:af:88:72:82:dc:e1:5a:
3f:10:cf:10:ec:3b:7f:e6:0d:ab:35:01:cd:bb:92:
a1:53:c9:f9:8c:97:f8:cd:3e:92:58:b8:f3:35:8f:
fc:16:05:bf:ad:75:4c:d5:5e:e9:51:57:e1:2e:96:
79:4e:6a:20:e0:16:1f:fb:05:b9:04:fa:73:78:11:
e0:a0:c5:ce:20:30:ce:1a:7b:68:05:dc:68:32:8e:
f1:c3:c8:b9:3c:e0:84:1b:5d:e4:52:f6:8f:a0:80:
36:90:df:26:b1:0e:7d:b9:c7:3c:79:bd:12:e2:0b:
3b:c4:76:7d:61:49:76:fe:4c:61:0c:b9:c4:b6:25:
69:2c:d8:45:40:3c:1f:97:b6:4a:9d:c8:af:81:e2:
be:9a:e2:a8:55:3f:3a:58:c2:3f:d7:f9:a3:6c:e5:
af:d8:d8:c3:21:6c:16:1e:fb:a6:00:4b:53:8c:a5:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:A8:73:4C:D0:63:8E:CB:C4:69:42:87:C6:B6:EF:E1:9F:66:34
X509v3 Authority Key Identifier:
keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/Mlmoc0zQY47LxGlCh8a27-GfZjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.19.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2e:e9:b5:b9:dd:9b:25:42:86:17:9b:f9:43:37:dd:66:fa:
af:d2:aa:dc:e4:42:0e:ea:3c:55:77:02:0f:53:b0:a0:fe:19:
8f:7f:58:44:99:5f:ec:4a:2d:20:82:a1:ba:cb:7c:9a:46:6c:
73:38:21:bf:1f:71:52:c5:22:d5:24:a6:7f:6f:a2:b1:62:ae:
70:3b:63:96:4b:39:a1:ee:5f:5a:f6:c6:7c:76:21:d0:13:cd:
79:f6:5b:5b:3c:ea:ae:b6:66:d8:a5:24:ce:a4:83:a3:93:93:
94:c8:5c:c0:74:be:75:bd:4f:95:45:8f:8f:d7:d5:b0:fe:1a:
d7:d9:92:50:2d:56:e5:4d:7c:2b:80:11:65:4d:5e:8b:bf:15:
ac:03:b7:3a:b2:d8:f5:75:cd:43:57:9f:c7:33:7d:1b:c7:a1:
ee:6b:74:58:e4:6c:d2:5b:a8:f7:36:43:28:cc:5c:92:56:85:
ad:98:60:47:be:bd:0b:87:71:bb:79:16:c5:78:30:77:af:48:
c7:98:5a:4d:6c:b8:8b:aa:26:47:b6:0e:04:76:fe:82:5a:03:
3e:fe:ef:1f:dd:14:51:52:c9:41:e8:79:40:bf:35:c4:21:8d:
43:c4:0c:fc:55:43:74:03:89:46:32:3b:11:5a:a8:ea:32:5a:
42:6b:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:25 2023 by rpki-client on console-fra.rpki-client.org