Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/N39N3At7xhZSz7MPkJ94e__q2Ys.roa
File: N39N3At7xhZSz7MPkJ94e__q2Ys.roa (raw, json)
Hash identifier: rPQ8NQElM+EIznAeMkq0Z5bdzEXCpYCVOCvJ7RXIgG4=
Subject key identifier: 37:7F:4D:DC:0B:7B:C6:16:52:CF:B3:0F:90:9F:78:7B:FF:EA:D9:8B
Certificate issuer: /CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Certificate serial: 0181F465F97F5FCAC20E650A0C9AFF3D5A26
Authority key identifier: 0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/N39N3At7xhZSz7MPkJ94e__q2Ys.roa
Signing time: Tue 12 Jul 2022 21:52:12 +0000
ROA not before: Tue 12 Jul 2022 21:52:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 62.204.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:f9:7f:5f:ca:c2:0e:65:0a:0c:9a:ff:3d:5a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Validity
Not Before: Jul 12 21:52:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=377f4ddc0b7bc61652cfb30f909f787bffead98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:37:a8:5b:4f:67:a4:7f:38:d4:12:4d:73:
fa:2f:9a:51:d0:aa:49:48:d3:7e:55:c1:e8:6b:3f:
43:9a:40:21:94:d7:fb:08:97:89:eb:86:f0:98:13:
77:d5:0c:9e:69:ef:62:3d:50:b6:1f:c1:ce:f1:9f:
00:b8:d9:4d:d8:3c:75:e7:80:5d:2c:2a:19:c0:67:
d8:6f:21:0b:5f:5c:4f:57:29:d2:af:2b:03:88:35:
14:8e:98:52:52:ee:0e:22:ac:32:84:2d:c1:de:4c:
47:06:fd:40:8e:69:21:b3:c8:2a:10:67:81:8f:e3:
8f:93:8b:8b:ac:8d:08:cd:32:31:05:9b:c0:27:21:
52:1b:43:27:a0:53:43:64:60:2f:50:ea:93:6c:e8:
57:b2:07:15:14:52:a9:2a:3a:38:80:c1:65:5f:01:
14:41:3a:3c:b0:1f:fa:b1:dd:a7:4e:7b:43:d4:87:
49:46:f0:20:1a:7d:31:f7:e3:e3:92:36:a4:5f:77:
5a:98:9e:71:63:b4:7c:8a:46:dc:b7:c2:29:61:70:
aa:d9:2e:f6:a7:b0:15:09:2d:42:5b:3c:1e:8d:37:
d0:01:2b:6f:55:f8:f9:5b:2c:6e:dc:e9:a0:ee:0b:
5e:fa:b0:62:6d:9e:08:63:42:ff:0f:6e:9d:cc:2d:
8f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7F:4D:DC:0B:7B:C6:16:52:CF:B3:0F:90:9F:78:7B:FF:EA:D9:8B
X509v3 Authority Key Identifier:
keyid:0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/N39N3At7xhZSz7MPkJ94e__q2Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.36.0/24
Signature Algorithm: sha256WithRSAEncryption
64:8a:66:1e:8b:d4:71:10:3e:d5:81:1a:a6:1a:ea:36:3c:22:
5e:e1:e3:ee:61:be:09:c3:4d:21:ff:bd:90:ae:b6:75:48:96:
1a:ce:55:91:7d:28:93:66:c7:43:b5:35:39:c7:c6:88:e6:2d:
e9:14:c9:43:c9:c4:d4:28:6a:28:35:6d:80:61:d1:f4:ce:be:
52:6d:57:65:01:dd:d6:f3:eb:00:94:b3:a9:a0:ec:d7:5c:c8:
04:c9:e7:37:a1:e2:a5:2e:c9:a6:12:9f:9e:32:65:2c:cf:30:
9f:6d:03:cc:42:ab:53:66:a5:fd:b7:e0:65:f0:73:c1:ac:7e:
c6:81:23:97:db:61:0b:2a:03:39:52:5b:a8:b2:ac:ce:9e:40:
f2:90:91:6a:2d:f6:fd:76:7e:29:a3:84:8c:80:ca:ee:73:7e:
b9:39:ff:87:63:0f:69:16:42:22:67:5c:b7:1b:93:ff:3d:85:
cb:8f:2c:b8:f2:3b:38:7c:8d:3c:80:53:6b:af:fd:00:07:e0:
39:d8:88:02:b4:3b:f6:a1:fc:74:c5:36:5b:43:30:78:24:f5:
67:b8:f0:43:cc:6f:af:e3:2c:d3:ee:0f:d9:82:3d:9f:7c:45:
c1:69:9d:63:a3:a2:04:d7:19:32:cf:ad:75:f1:86:7c:cd:79:
17:55:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org