Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/4wepzy97c7DJ-3XhyyQIiSBETv0.roa
File: 4wepzy97c7DJ-3XhyyQIiSBETv0.roa (raw, json)
Hash identifier: MdCcm6oTuWyYHW/m7kwnV61n8SaVYGoQp7vvQvzypvU=
Subject key identifier: E3:07:A9:CF:2F:7B:73:B0:C9:FB:75:E1:CB:24:08:89:20:44:4E:FD
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 0107FEBD
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/4wepzy97c7DJ-3XhyyQIiSBETv0.roa
Signing time: Tue 08 Feb 2022 14:16:28 +0000
ROA not before: Tue 08 Feb 2022 14:16:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 62.201.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17301181 (0x107febd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Feb 8 14:16:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e307a9cf2f7b73b0c9fb75e1cb24088920444efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:a7:4e:12:94:52:2e:a8:a2:c4:a3:8d:e0:
89:bc:93:fb:1b:fa:65:a3:a1:63:bc:e5:63:46:ee:
b7:d3:31:03:e3:1d:72:c2:60:4d:c4:cb:51:f8:80:
e3:03:72:8a:9a:23:a3:f6:15:aa:11:61:d8:77:dd:
60:3c:47:b6:8f:b1:32:f5:fd:96:0f:94:e8:cd:56:
35:b5:8b:f6:21:4f:53:52:7b:4e:1d:38:06:54:93:
d4:33:7c:ca:3d:a6:27:65:44:25:03:dc:da:7a:b9:
97:11:40:5f:ed:d1:09:82:2c:9c:81:a3:38:3a:0c:
78:07:e3:76:2d:62:7e:1d:cd:e3:cd:0b:84:ff:a4:
62:a1:01:1d:38:16:05:f5:ad:55:02:51:35:c3:fd:
b8:88:b9:fc:77:72:c1:b7:8a:26:95:f7:55:a4:50:
89:c6:c1:fd:6b:c9:16:45:e6:ed:71:b6:cb:6c:c4:
25:2d:8e:e6:b3:ae:ff:ea:6f:60:99:ba:68:3a:fe:
89:12:4c:e5:9d:8d:f4:89:2e:7f:20:01:9c:c5:1e:
9c:7b:ad:5d:e4:b0:2e:4b:02:bc:2b:2f:6d:54:91:
fa:63:55:19:3c:60:84:d9:e5:45:df:92:47:ef:60:
5f:ba:1d:2b:1b:08:62:a4:99:d2:e9:3c:df:77:97:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:07:A9:CF:2F:7B:73:B0:C9:FB:75:E1:CB:24:08:89:20:44:4E:FD
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/4wepzy97c7DJ-3XhyyQIiSBETv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.51.0/24
Signature Algorithm: sha256WithRSAEncryption
75:19:91:1b:16:aa:01:04:57:e7:21:8f:c8:11:a1:04:ce:7a:
7d:64:7e:c3:00:d6:1a:ad:78:a9:12:d8:a9:29:8b:ae:92:e2:
0f:ea:de:37:01:37:e2:d0:a8:74:01:0f:17:93:49:6b:74:b7:
17:da:cc:c6:cd:68:9e:07:ee:8b:99:e6:5c:27:59:52:a1:3e:
df:e2:18:9f:b2:3d:7a:45:0d:2f:3d:cf:75:a7:9e:87:86:8d:
13:a7:8f:87:1b:2c:3b:44:5f:2a:62:ef:4d:9f:06:0b:43:f6:
e1:54:9e:7c:44:d6:1f:82:7a:19:91:1b:20:6e:ed:05:22:81:
dc:e8:b0:ee:8d:f5:e6:e6:12:a2:58:4b:d9:33:e5:e9:fc:5a:
de:b9:a5:b2:a3:b4:33:d3:b2:17:c5:61:d7:d1:9c:f0:af:1f:
ce:1c:a4:0c:69:b2:4a:02:80:9d:61:69:04:fa:78:e9:ce:13:
50:0e:0a:f5:1c:c7:37:02:39:47:9f:3d:0d:3c:b5:2f:f9:7e:
cf:75:f6:a4:ca:e2:8d:e1:e2:29:2d:ad:e8:d8:cc:46:6e:71:
52:23:7c:88:b5:13:cb:7c:36:60:f8:aa:d9:d8:1b:da:b9:fd:
cf:eb:44:02:14:4e:d4:ec:1b:7f:ef:c6:b0:b6:14:83:11:5e:
41:f3:e1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:00 2024 by rpki-client on console-ams.rpki-client.org