Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/roWiuFK2Fm4t9ba4iS3gDukCnpM.roa
File: roWiuFK2Fm4t9ba4iS3gDukCnpM.roa (raw, json)
Hash identifier: +pgfvOK58Ns6r7TmJISqTKO9P0/27M50M1jnoS7vkhU=
Subject key identifier: AE:85:A2:B8:52:B6:16:6E:2D:F5:B6:B8:89:2D:E0:0E:E9:02:9E:93
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 01825FC997AD872A42F3BAFD80A9071A9F35
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/roWiuFK2Fm4t9ba4iS3gDukCnpM.roa
Signing time: Tue 02 Aug 2022 18:20:23 +0000
ROA not before: Tue 02 Aug 2022 18:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16262
IP address blocks: 192.35.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:c9:97:ad:87:2a:42:f3:ba:fd:80:a9:07:1a:9f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Aug 2 18:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae85a2b852b6166e2df5b6b8892de00ee9029e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:18:f5:15:17:f7:ab:44:04:b3:64:0f:ce:
ea:dd:16:1e:1e:b2:9e:6d:16:07:fc:05:30:e5:1f:
13:fc:03:f0:85:f4:76:d6:d5:20:10:be:d5:0a:13:
0d:79:ae:14:38:8e:7c:2d:d6:40:bf:a1:f3:60:04:
46:a0:78:94:42:a8:48:7f:28:a8:19:3f:ad:ce:fc:
d9:7e:89:71:d1:65:62:03:65:49:4a:17:6d:42:e4:
4a:6a:90:4f:1d:aa:fa:43:c7:28:bc:cb:ab:bb:56:
59:59:bc:b9:98:1d:c8:a6:88:4c:e6:b3:7f:02:f6:
81:3b:28:aa:62:6b:bb:3a:89:da:85:d8:2f:78:32:
dd:88:b1:15:08:55:7f:89:bc:2c:fe:15:df:56:40:
81:25:ba:ff:25:bd:95:d8:2f:75:f4:19:ac:31:51:
61:79:c2:72:02:36:c3:e9:06:71:31:79:5f:6d:49:
c7:2f:7f:fd:b2:19:6a:b0:38:48:b0:3f:05:e7:f2:
d1:2d:91:67:d1:9b:3c:ea:5c:c2:96:94:b2:65:9b:
5a:f5:eb:9b:4a:e8:30:f7:01:f1:6a:fa:d3:3e:fe:
d6:2f:54:9b:47:ab:2a:d1:af:59:1e:b1:a1:9b:df:
bb:31:15:51:4c:b3:42:f7:8f:12:9e:88:f0:30:c0:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:85:A2:B8:52:B6:16:6E:2D:F5:B6:B8:89:2D:E0:0E:E9:02:9E:93
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/roWiuFK2Fm4t9ba4iS3gDukCnpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.206.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ac:4f:89:df:7d:1d:e5:7e:68:2d:b2:92:ab:69:e4:f5:69:
96:43:33:1b:b3:e0:23:5e:6b:17:1b:5b:0d:f8:37:2a:e5:51:
52:24:42:77:67:73:44:ce:7a:ea:47:26:a7:d2:41:2b:70:f1:
15:fb:43:a1:62:27:76:33:9e:61:aa:80:16:69:2b:8b:4c:8e:
0c:6a:37:28:7a:04:a6:c4:4f:f7:49:8c:dd:70:fc:2f:00:52:
02:2d:ba:8f:86:40:ea:ae:ca:2b:60:ce:f9:dd:fa:9c:91:20:
83:a5:e6:34:67:95:27:a3:3a:5a:1d:bd:24:bf:bb:02:19:c7:
2c:bf:5f:1d:01:46:c2:f7:5b:07:8d:2a:b7:44:05:bd:61:a8:
56:a4:94:48:0d:4f:52:a3:ae:51:6b:6f:62:b7:c3:59:f9:4d:
1b:e1:10:a0:3d:fc:fe:86:ba:2a:ce:bd:34:5e:ff:5c:7b:12:
ac:70:17:8c:1f:30:39:3f:b2:3f:9e:1e:b7:1b:0b:3c:33:3e:
e1:4f:b5:1e:e8:5d:71:26:d0:ed:91:f0:1e:16:43:c5:4f:eb:
4e:e8:e4:79:e4:a5:66:e3:9e:28:fe:75:ee:d3:d8:aa:50:52:
b0:f4:48:c3:41:93:4f:7e:fc:62:de:d3:73:61:68:74:17:49:
d7:d5:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org