Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/qAmmEGQnRpEL-N-sVdQ1p8PdaMU.roa
File: qAmmEGQnRpEL-N-sVdQ1p8PdaMU.roa (raw, json)
Hash identifier: tRssJ/5llqAtiH04tkqsMbKuTl3v2Sk4TSSacgNPZBA=
Subject key identifier: A8:09:A6:10:64:27:46:91:0B:F8:DF:AC:55:D4:35:A7:C3:DD:68:C5
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 01035B58
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/qAmmEGQnRpEL-N-sVdQ1p8PdaMU.roa
Signing time: Mon 07 Feb 2022 00:56:24 +0000
ROA not before: Mon 07 Feb 2022 00:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57208
IP address blocks: 62.201.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16997208 (0x1035b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Feb 7 00:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a809a610642746910bf8dfac55d435a7c3dd68c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:8c:3a:37:7b:60:36:d1:7a:6f:91:c1:6e:
87:fa:47:79:b6:b0:35:bb:f0:2e:11:a2:ed:1f:6b:
8d:93:e2:d3:f3:e0:61:28:cd:18:d1:c9:44:97:6b:
63:49:eb:e8:f5:a6:79:85:ac:1d:d0:19:91:da:09:
3c:4e:bf:60:20:c2:62:b2:a5:80:e9:9f:50:5f:4f:
fc:ca:84:cf:74:d5:65:5e:31:16:79:98:b7:ad:2f:
4a:4c:e9:c6:d8:28:98:2f:07:52:b5:a2:ed:6f:9a:
06:3d:b2:e6:94:96:9d:f2:d9:de:ca:b6:f1:25:27:
c5:52:81:ad:35:8e:59:9e:43:9e:91:c3:64:91:84:
4d:9f:60:c3:5a:e9:71:e1:23:8e:d1:8e:34:bb:9f:
b2:8b:30:d7:30:bd:61:95:da:8e:c2:8b:71:24:7c:
0a:cd:4c:71:af:4b:e8:59:75:14:0e:d4:4e:11:de:
e5:91:b1:f0:12:21:fa:05:ad:48:18:b1:a2:db:d9:
3d:b8:22:ba:90:8b:ff:0a:43:11:8f:f5:10:33:31:
10:cf:86:45:a1:03:21:88:86:7f:e9:c7:1b:ba:20:
bb:24:1a:6e:2e:6b:64:d3:a4:75:f4:d6:6b:fd:12:
67:e9:3b:82:9f:a2:6f:b5:5f:88:d7:93:d5:51:9f:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:A6:10:64:27:46:91:0B:F8:DF:AC:55:D4:35:A7:C3:DD:68:C5
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/qAmmEGQnRpEL-N-sVdQ1p8PdaMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7c:57:a8:d2:41:c5:43:ea:ff:ac:15:02:8a:d9:06:0c:eb:
bf:e6:df:d1:de:f6:8c:17:c5:c4:56:95:c0:fa:84:4c:ee:a5:
a5:7e:1d:06:fe:e4:42:14:c3:48:dd:63:03:94:d6:3f:b7:71:
d5:16:86:c8:38:a5:ba:f7:db:12:fb:8c:0e:8d:42:c5:da:b8:
e1:42:e2:51:87:c2:71:9e:9c:e4:7f:f3:d2:18:da:d3:fc:3f:
9e:b3:2b:7b:02:48:2d:c0:9f:72:b6:17:47:ff:cd:39:2d:b5:
a8:2a:fa:43:f3:31:94:a3:35:7a:a0:7e:7d:9e:c8:49:01:8d:
18:0f:13:53:3d:6e:85:03:5f:14:2f:67:7b:62:32:95:77:f8:
93:44:ca:4c:80:8e:9f:7d:99:c5:05:82:9d:aa:54:31:cf:10:
a4:83:d5:d9:0e:b1:87:cc:3f:01:03:fd:e0:6b:4f:b0:0e:5b:
fc:0e:da:04:1a:e4:cd:e1:93:f7:82:23:67:39:5a:ae:01:7d:
53:59:c4:5c:da:9c:1a:5f:91:65:b7:e9:a9:e2:cc:cd:b3:74:
0f:23:d5:62:33:f8:be:8f:7d:34:a3:67:e2:e9:4e:74:32:41:
e7:b8:c0:dc:93:9a:59:3d:11:48:71:53:ca:c8:2b:1a:a3:97:
b0:ee:81:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:02 2023 by rpki-client on console-fra.rpki-client.org