Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/7zxuLMHDug5dkyV5AK5WGRdS0pg.roa
File: 7zxuLMHDug5dkyV5AK5WGRdS0pg.roa (raw, json)
Hash identifier: hv3iQw+uNkKiDjlvIHT0W1yytdfIpNIFHi7hNt+3bG0=
Subject key identifier: EF:3C:6E:2C:C1:C3:BA:0E:5D:93:25:79:00:AE:56:19:17:52:D2:98
Certificate issuer: /CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
Certificate serial: BAB20A
Authority key identifier: 68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/7zxuLMHDug5dkyV5AK5WGRdS0pg.roa
Signing time: Sat 01 Jan 2022 01:00:36 +0000
ROA not before: Sat 01 Jan 2022 01:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.106.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12235274 (0xbab20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
Validity
Not Before: Jan 1 01:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef3c6e2cc1c3ba0e5d93257900ae56191752d298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:5c:f9:d0:4c:c3:2c:d9:5d:83:e1:db:de:
bd:ed:e9:47:37:bf:c8:c2:d0:cb:d6:e3:09:ae:58:
fa:a7:f4:35:6c:00:76:d7:f5:21:a5:29:7f:fe:75:
9a:51:69:31:7d:03:81:f9:b8:82:86:b8:f9:dc:0d:
ef:af:8a:85:eb:c1:a4:ce:32:0f:5f:37:8a:03:c0:
69:5f:2e:43:b7:02:83:87:30:45:90:98:e6:4a:5b:
2b:11:ab:ec:05:9b:82:96:e4:0c:21:66:c0:41:1c:
bc:67:fb:4c:e4:95:c8:4b:f3:a2:c8:c9:2a:89:fa:
bd:bb:f9:69:7a:5b:cd:5b:93:02:a7:d0:7b:da:a4:
c4:11:f1:51:89:c9:df:fb:85:44:de:1f:ec:10:28:
88:3c:9a:b3:d1:9f:f0:be:9d:88:26:0c:e4:23:86:
76:97:9c:ac:da:64:b8:e4:9e:75:dc:d3:a5:af:6d:
51:da:35:fd:0f:ca:af:5a:f8:dc:7b:a8:da:6c:7a:
34:1b:d1:26:2c:75:fe:30:a1:30:21:35:bd:66:b2:
58:75:7b:b6:1f:fc:41:b1:03:d7:98:a5:16:32:16:
96:56:5a:0a:d1:b0:a6:f5:dd:18:29:72:03:ba:b9:
aa:a9:63:5a:b3:5a:e3:0d:36:8e:b4:cc:3d:57:ae:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:6E:2C:C1:C3:BA:0E:5D:93:25:79:00:AE:56:19:17:52:D2:98
X509v3 Authority Key Identifier:
keyid:68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/7zxuLMHDug5dkyV5AK5WGRdS0pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.80.0/24
Signature Algorithm: sha256WithRSAEncryption
32:08:08:b8:d9:06:6c:88:c0:9d:67:b5:fa:1b:1c:b8:4a:2c:
61:c5:ed:9a:7b:30:a2:18:07:43:02:d7:4e:20:c2:44:14:fd:
32:5e:5c:ab:fe:dc:84:97:cd:3a:4c:ea:81:44:63:b9:b1:da:
b9:e1:29:d1:a2:c8:64:2d:9f:f9:d8:1d:e2:34:09:62:eb:20:
ee:58:ab:12:d9:9b:66:ec:05:9f:dc:c0:75:cd:a3:73:37:ce:
32:47:d6:ce:27:cb:a3:ce:8b:6f:ec:62:1b:72:6a:76:f2:eb:
01:c4:66:16:9d:3a:81:59:0b:fc:3a:a0:65:8c:c1:7e:b4:42:
e4:ae:8d:e9:84:d3:6e:42:87:e7:90:96:fa:c4:74:b9:b7:67:
5e:75:3a:5e:a7:37:0c:86:c4:81:ad:cf:46:e7:11:a4:b4:22:
95:38:74:20:b8:a8:d7:fe:b5:71:7e:21:c3:6a:9a:22:22:c8:
ae:00:41:8f:98:94:51:cb:dd:ec:3c:e4:e3:8e:91:16:63:03:
3c:66:02:e3:1f:9d:60:21:03:3b:59:0c:e3:43:3c:25:33:0e:
34:c5:f6:3a:a3:f3:8c:57:63:42:5b:6e:69:b4:68:79:c8:db:
30:41:22:9f:31:29:df:bb:26:61:16:20:1a:a8:b4:7a:8a:f9:
b4:55:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:10 2023 by rpki-client on console-ams.rpki-client.org