Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/4IuVmElB5YHxj317Vna5qfHaICU.roa
File: 4IuVmElB5YHxj317Vna5qfHaICU.roa (raw, json)
Hash identifier: uXGqggEHApzvNdFzgIt16OGUa/Ts0160tZXS6P+E4Q4=
Subject key identifier: E0:8B:95:98:49:41:E5:81:F1:8F:7D:7B:56:76:B9:A9:F1:DA:20:25
Certificate issuer: /CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Certificate serial: B23B8C
Authority key identifier: 0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/4IuVmElB5YHxj317Vna5qfHaICU.roa
Signing time: Sat 01 Jan 2022 06:06:24 +0000
ROA not before: Sat 01 Jan 2022 06:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 62.204.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11680652 (0xb23b8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Validity
Not Before: Jan 1 06:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e08b95984941e581f18f7d7b5676b9a9f1da2025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:43:b9:a4:ba:3f:d4:d3:17:14:6c:e3:cb:
4d:82:dd:b8:5c:f7:67:ae:71:6d:2a:69:8f:9d:4d:
07:cb:44:dd:2c:12:94:33:4d:26:fc:69:84:76:a5:
a0:84:b6:4e:3f:00:87:f2:ac:1a:27:f1:6b:aa:3f:
6b:b7:dc:e8:b5:1b:2d:92:dd:70:b1:61:db:1e:32:
9d:e7:41:63:81:a3:98:0c:9c:f6:2c:d2:90:07:a7:
c8:bd:01:53:06:5f:80:80:b9:87:5b:aa:2e:f5:96:
22:9e:c4:62:42:b2:49:bc:f8:dc:ae:ed:bc:3b:19:
75:72:57:b8:3b:a0:f5:15:07:cc:68:21:24:99:a0:
83:00:4d:c8:da:9d:7f:da:fd:0e:ae:2d:91:39:04:
08:31:84:e2:32:5d:49:5f:24:ab:b2:41:d6:bc:68:
04:33:4a:17:61:6a:3b:3e:77:66:8e:41:95:9c:12:
a4:66:18:04:fb:d1:56:33:e1:db:ef:0c:99:4c:2c:
c6:d4:eb:2d:d5:6f:73:12:d1:cc:c7:95:f4:69:15:
56:1e:05:30:ff:78:d9:09:d2:fb:4f:30:26:51:9f:
4f:bf:e5:e2:59:4e:1b:d7:61:12:31:ed:f5:fe:e0:
07:65:be:ad:72:b2:46:51:e8:8b:f5:1f:93:12:bf:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:95:98:49:41:E5:81:F1:8F:7D:7B:56:76:B9:A9:F1:DA:20:25
X509v3 Authority Key Identifier:
keyid:0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/4IuVmElB5YHxj317Vna5qfHaICU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.36.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e0:0a:50:60:76:bd:0e:43:0b:ea:2b:cb:c5:58:b2:03:65:
a6:0d:21:03:e0:16:9e:85:ac:19:25:a1:de:62:5f:3e:8b:ab:
b2:43:6e:41:76:84:f6:be:ee:bf:67:c5:5a:c7:ef:77:ff:59:
4e:5b:63:cb:02:e4:16:fe:47:6b:72:c6:24:d7:6b:b2:0e:b2:
df:55:27:66:6b:5d:be:f5:a5:30:76:a1:22:98:b0:87:c9:42:
e6:50:02:b0:f3:3d:78:4c:3d:8a:ff:9b:be:14:7f:8b:3c:7e:
cf:ea:98:f2:3a:c7:fc:e2:8f:c2:6c:90:c4:18:26:37:db:8a:
ad:2b:61:de:fb:02:9e:e4:0b:ea:7a:f8:06:1a:7f:ad:84:72:
3b:90:4b:cc:cb:b7:bc:47:d3:8e:69:88:62:be:78:02:fb:ee:
b8:d1:6f:bf:e0:19:6a:94:30:12:9a:b6:7e:fa:40:fc:43:fb:
3d:b5:df:a8:00:3d:dc:d1:68:ed:93:bd:ab:32:de:85:e4:10:
d1:31:15:11:6c:08:78:d3:7d:70:2d:a7:46:5b:73:a3:7a:8d:
9d:37:ca:3b:39:db:0c:88:a2:1c:23:4b:d6:12:c5:de:c0:a9:
4e:f2:a6:5e:b5:3f:2c:33:10:04:44:95:b9:ff:ed:62:1d:5e:
2f:87:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org