Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/CnfeHS8RjNNNj0c332agc-CT_Y4.roa
File: CnfeHS8RjNNNj0c332agc-CT_Y4.roa (raw, json)
Hash identifier: ekH+aL8AdpCNlWZ7QJhfQhj2R0M0Zf0wqV4ctBjHexU=
Subject key identifier: 0A:77:DE:1D:2F:11:8C:D3:4D:8F:47:37:DF:66:A0:73:E0:93:FD:8E
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 157DC2FC
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/CnfeHS8RjNNNj0c332agc-CT_Y4.roa
Signing time: Sat 01 Jan 2022 04:58:53 +0000
ROA not before: Sat 01 Jan 2022 04:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201847
IP address blocks: 185.62.48.0/22 maxlen: 22
185.62.48.0/24 maxlen: 24
185.62.51.0/24 maxlen: 24
185.62.50.0/24 maxlen: 24
185.62.49.0/24 maxlen: 24
2a04:efc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360563452 (0x157dc2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: Jan 1 04:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a77de1d2f118cd34d8f4737df66a073e093fd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:85:af:cd:b5:51:ea:ff:cb:4c:fa:8c:d3:
4c:15:f8:6e:8c:42:2a:4d:49:f7:44:c0:d4:20:b0:
5f:71:42:08:aa:ab:1a:5a:14:9b:0e:20:8a:d5:ca:
0c:3f:95:55:bd:37:cc:0c:e7:75:77:33:51:6c:11:
64:67:45:c0:5d:10:d8:dd:b2:5a:7b:9f:e4:7d:22:
e0:9b:71:4a:5d:89:eb:62:7e:fc:fa:b2:9b:38:0a:
f0:af:81:4f:c7:83:51:95:eb:bc:95:92:4c:0d:a6:
dc:5d:83:5a:10:5d:66:78:14:1f:62:d4:65:38:76:
1b:72:6a:14:43:0f:95:92:a5:b7:cb:87:f0:57:c6:
f5:33:f2:f5:1f:ac:18:ca:af:83:aa:78:9b:a2:f9:
2b:1b:09:1c:ec:87:a1:d0:67:b1:aa:ac:66:b7:15:
ff:cf:a5:0c:d7:9f:e2:4a:6f:68:4c:69:f7:1e:b4:
f0:6b:1e:03:4b:92:a5:9d:2a:29:dc:bf:e2:05:57:
f2:c3:5f:a2:58:c8:81:f9:14:0b:ef:de:fa:99:4e:
10:b4:36:45:ee:90:f0:19:6b:3e:db:6b:6d:01:00:
d5:bf:fa:e2:87:c8:39:72:b3:f0:52:af:9e:6a:ac:
5f:c9:67:5b:9d:ef:bf:1b:9e:cf:2f:55:9c:dc:43:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:77:DE:1D:2F:11:8C:D3:4D:8F:47:37:DF:66:A0:73:E0:93:FD:8E
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/CnfeHS8RjNNNj0c332agc-CT_Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.48.0/22
IPv6:
2a04:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
12:9a:70:e9:65:6a:6f:b6:e2:a2:8b:08:d6:38:b0:58:34:a7:
10:2c:eb:e8:0f:46:0f:ae:ed:a4:09:d7:90:fe:db:ce:32:aa:
95:b4:58:07:a8:2f:26:12:b8:5f:33:11:6a:a4:ce:7f:1e:6a:
f6:0e:46:65:9a:3e:67:64:ab:bf:28:58:bb:5b:c7:d8:42:53:
13:c1:88:33:25:02:d3:41:51:26:ea:79:6f:2b:3d:18:fa:2d:
c5:5c:f7:ef:f2:00:fd:98:fb:9c:20:4f:16:45:6c:e1:f0:46:
c4:e0:fa:d7:f6:64:b0:8d:f7:a9:74:75:98:6c:08:1b:d4:f9:
f9:f6:7b:93:9d:cb:ae:06:20:6e:cc:f7:e9:e8:ba:ee:88:fc:
2f:16:85:b4:81:e5:5b:14:46:c5:a5:42:6e:3c:06:d4:7a:2e:
7e:ee:47:c7:fa:b5:d6:2a:32:30:94:b7:53:eb:6b:e9:46:76:
10:9d:a6:ed:ae:3c:4d:41:ca:6a:1d:c3:aa:a5:49:ab:d6:90:
2e:f4:de:94:b4:24:b6:7e:cd:7c:09:e8:66:11:57:eb:a3:82:
1d:15:9d:2b:36:cb:be:ff:5e:e7:ef:2b:82:fb:18:56:0d:a6:
16:a4:da:f7:41:f2:0c:b5:da:0f:e7:77:71:39:58:15:33:7f:
70:a6:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:50 2024 by rpki-client on console-ams.rpki-client.org