Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/8ZmBSOHJbVA0N5KLG8KGNmwObYw.roa
File: 8ZmBSOHJbVA0N5KLG8KGNmwObYw.roa (raw, json)
Hash identifier: yrYMhxe1rb+0NewswMEVQGNcdiYe3wGOZ1zqDISB5/E=
Subject key identifier: F1:99:81:48:E1:C9:6D:50:34:37:92:8B:1B:C2:86:36:6C:0E:6D:8C
Certificate issuer: /CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Certificate serial: BFF562
Authority key identifier: 16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/8ZmBSOHJbVA0N5KLG8KGNmwObYw.roa
Signing time: Thu 03 Feb 2022 06:27:04 +0000
ROA not before: Thu 03 Feb 2022 06:27:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 62.3.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12580194 (0xbff562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ba56cdc8c97662c1b57d901a1f86588adf2ae
Validity
Not Before: Feb 3 06:27:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1998148e1c96d503437928b1bc286366c0e6d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:00:a9:67:41:18:9e:96:18:da:54:10:20:73:
2a:b3:4f:4c:15:40:31:2f:5b:90:59:86:ac:ad:47:
e3:08:4b:0d:55:b6:05:92:82:e5:4a:ab:36:f7:8f:
24:db:2e:6f:c4:d1:d4:d5:42:8b:70:ec:4f:f2:f9:
7a:df:41:da:9a:f1:c5:ab:f6:56:a0:46:3a:96:06:
19:1c:6b:17:97:28:13:32:cc:ff:07:6d:a9:5c:c3:
b9:c3:d8:4d:4e:81:28:44:b2:7d:ae:7b:9c:dc:1e:
4c:c8:6a:b1:4b:e1:59:28:c6:98:15:1d:d9:6b:08:
37:db:47:ad:17:23:e1:de:5f:6e:e7:80:a9:54:8a:
f7:7d:a5:ca:9c:19:86:8a:b1:31:14:f4:27:66:f1:
ce:0f:d4:bc:da:9d:1b:77:78:02:10:5a:7e:16:d3:
44:de:47:d3:27:9b:d0:a8:a7:4a:26:1a:79:05:46:
ee:ac:b6:50:5e:df:ea:c4:45:e3:37:6c:c1:f1:08:
fd:14:a4:8b:83:36:90:f2:38:54:60:28:71:41:d0:
9b:c8:e2:89:dd:bd:0d:58:c7:bf:0c:b1:f3:36:2f:
fc:09:e7:16:dc:f7:22:e9:b7:d0:d4:dc:8b:70:04:
cc:07:52:a0:56:aa:ca:b0:e5:cc:e6:ce:79:58:f0:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:81:48:E1:C9:6D:50:34:37:92:8B:1B:C2:86:36:6C:0E:6D:8C
X509v3 Authority Key Identifier:
keyid:16:7B:A5:6C:DC:8C:97:66:2C:1B:57:D9:01:A1:F8:65:88:AD:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnulbNyMl2YsG1fZAaH4ZYit8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/8ZmBSOHJbVA0N5KLG8KGNmwObYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a1292-d0ae-4a4b-87bd-e4bb63636cba/1/FnulbNyMl2YsG1fZAaH4ZYit8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ec:30:00:8a:3e:11:49:4e:b7:36:19:3f:6c:df:0d:bb:14:
c1:d5:4f:ee:30:7a:ba:fd:71:71:62:ab:d0:04:29:50:ca:aa:
d0:53:39:ae:50:ca:c8:a3:36:29:8a:ad:3d:2f:cd:4f:5c:0b:
23:22:17:09:fd:5d:86:fd:41:84:da:23:ed:45:5f:0e:96:89:
b2:c3:e3:a3:ea:d4:32:ff:c0:37:c2:78:08:c4:1c:55:ca:68:
57:9f:3f:90:b0:40:e5:cb:17:ab:e7:85:5e:4c:dd:5a:bd:b1:
d7:9a:e4:42:bb:58:fc:1b:13:38:0a:dd:84:b3:80:fe:b7:d1:
02:42:e6:a6:4f:02:82:90:27:68:39:ad:90:56:b2:6f:02:d1:
2f:63:45:dc:0f:2f:57:13:80:58:59:53:37:c0:5a:32:00:63:
f8:c5:31:93:56:13:40:0d:64:83:0d:d2:af:8e:6b:6f:a5:7d:
92:49:41:16:bd:f6:5b:dc:36:a6:79:4c:1d:83:16:08:c3:e0:
1b:f4:a1:30:31:1c:1b:ef:fd:8c:63:dc:cb:8f:e7:03:7b:06:
8b:46:91:7c:21:ac:73:7b:c8:f3:c9:df:70:11:da:48:d7:89:
48:9d:45:4f:8e:87:0d:b3:7d:5e:ab:70:04:b3:04:60:e8:cb:
5b:fd:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org