Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Azzf-J1dGYjIGHJF6OCqVTvkrLo.roa
File: Azzf-J1dGYjIGHJF6OCqVTvkrLo.roa (raw, json)
Hash identifier: NWFSLLDZGOdRVkjxVQ5gqYMXTo5a287ZV9X1KFBeWxs=
Subject key identifier: 03:3C:DF:F8:9D:5D:19:88:C8:18:72:45:E8:E0:AA:55:3B:E4:AC:BA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018413E2FD30C47C53F0E5A3E82EEE879FB8
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Azzf-J1dGYjIGHJF6OCqVTvkrLo.roa
Signing time: Wed 26 Oct 2022 10:42:33 +0000
ROA not before: Wed 26 Oct 2022 10:42:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204271
IP address blocks: 62.89.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:e2:fd:30:c4:7c:53:f0:e5:a3:e8:2e:ee:87:9f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 10:42:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=033cdff89d5d1988c8187245e8e0aa553be4acba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:e7:06:0a:c4:5d:52:6d:84:9e:71:ff:27:
29:bb:56:17:d4:20:3e:97:2f:40:09:0e:7c:e5:65:
85:3c:70:71:74:d6:67:1e:dd:5c:7b:1a:61:10:ed:
7c:14:d1:6f:fa:8c:b5:c3:5e:83:a1:a3:40:3a:74:
6f:cd:92:85:19:18:23:79:41:7f:7a:61:97:a8:ab:
cd:a6:e7:1f:08:d1:b5:2e:d0:0b:9a:0e:7e:71:8b:
95:3e:21:17:cd:cd:ee:34:b0:6b:b1:7e:a3:f4:7e:
09:75:c5:40:f9:f2:9c:91:60:ba:9e:d8:3d:e6:93:
95:33:fa:71:1a:90:b9:2f:63:68:ff:4a:d0:75:0b:
fa:0d:a8:11:59:7b:4c:5f:09:7d:bb:73:90:99:61:
a9:37:8a:41:f7:6e:3c:7e:28:9d:a7:6e:00:8d:7f:
c5:5b:63:34:e0:2a:02:30:b9:63:e8:05:a2:bc:8e:
ab:c3:ad:69:19:93:e1:8e:00:30:0e:89:5a:72:fd:
d8:37:43:2f:da:0d:e0:d5:36:ab:be:be:a6:97:35:
94:39:ca:50:96:c0:c7:82:ab:cd:77:d5:d8:91:6b:
e2:3a:a1:be:c1:a4:f2:34:11:a6:93:93:a4:ed:5f:
25:07:63:04:9a:c6:2f:88:fe:a1:d3:2b:ca:15:da:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:DF:F8:9D:5D:19:88:C8:18:72:45:E8:E0:AA:55:3B:E4:AC:BA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Azzf-J1dGYjIGHJF6OCqVTvkrLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.193.0/24
Signature Algorithm: sha256WithRSAEncryption
99:79:71:36:80:0a:aa:c4:1a:80:9c:b5:67:39:2a:ff:f1:2f:
42:9b:61:84:37:a7:b9:1d:0e:4b:6c:82:54:4a:40:26:84:85:
e8:0f:71:cc:67:29:b5:2f:3f:9d:69:48:9d:68:86:45:09:54:
b5:58:96:ae:65:40:6f:e3:cc:c7:e6:2c:3e:c8:42:ee:dc:d9:
65:81:45:87:95:ab:af:33:cc:93:49:74:d7:78:fc:d8:ca:cb:
53:e7:ca:e5:06:ce:d1:fd:99:88:0b:35:31:03:04:d7:d1:1b:
8a:4a:0e:20:f9:15:4d:b1:47:bb:fd:82:4e:48:9b:19:6d:47:
d0:18:9f:c2:cd:d0:28:94:7b:95:11:53:42:04:50:d7:d4:7d:
6f:9c:3a:41:b6:12:3d:18:07:e2:a2:18:84:a1:49:83:b2:76:
66:67:4f:d6:14:69:d5:e7:a1:0a:0e:3f:84:46:bb:00:bb:c4:
85:97:0c:28:f6:9c:6c:b0:ff:7f:13:d8:a8:f4:64:88:a3:d7:
0c:a9:f5:cf:70:40:02:2b:a5:d9:b3:2d:47:c8:91:8d:da:b7:
16:a9:8e:83:d7:da:3c:6f:07:a8:dc:f8:45:51:0b:08:8a:a5:
1a:e8:03:40:5e:45:51:48:29:79:fc:41:79:96:6f:f0:9e:c4:
37:42:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org