Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/adjxMnhk37DdlyhRAsYdtWPNCBQ.roa
File: adjxMnhk37DdlyhRAsYdtWPNCBQ.roa (raw, json)
Hash identifier: hXmLQ6h4t5jW0XEX3kwkW1y5EHpoKJyF40euK6tTsTs=
Subject key identifier: 69:D8:F1:32:78:64:DF:B0:DD:97:28:51:02:C6:1D:B5:63:CD:08:14
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 0278B6
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/adjxMnhk37DdlyhRAsYdtWPNCBQ.roa
Signing time: Mon 09 May 2022 20:55:13 +0000
ROA not before: Mon 09 May 2022 20:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 62.68.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161974 (0x278b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: May 9 20:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69d8f1327864dfb0dd97285102c61db563cd0814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:6e:fd:54:ab:0f:e9:a4:5b:e1:4d:3a:34:
79:38:2e:13:12:8e:9e:99:33:e8:e6:6c:6f:46:41:
e1:fc:90:7b:75:ff:c5:8c:38:5a:d3:af:37:0b:f2:
9c:f4:e6:8b:86:fa:26:3c:0d:f7:80:4b:33:e1:87:
f9:43:c0:cc:d8:0d:4b:43:f2:98:33:80:50:af:d9:
bc:af:d8:61:c1:95:b6:bc:65:98:46:c3:79:e0:a9:
ad:87:cc:41:3c:ac:71:6d:4a:04:55:c4:c0:d9:94:
12:b4:a7:1e:13:bc:49:b8:56:b1:c6:84:ae:76:2b:
0c:4a:eb:c7:ab:50:e2:df:d9:c5:57:64:6d:c8:73:
80:51:90:80:67:08:dc:45:57:63:fd:b6:f5:7e:f0:
c3:6a:44:07:9f:87:95:c7:0a:9f:f3:1a:70:24:e9:
f1:6d:c4:fb:0b:a7:c6:76:e9:d0:5a:4b:b6:e4:b0:
8a:5b:20:03:e7:12:38:45:66:70:e4:ab:6b:7e:2a:
ea:d3:8b:42:82:c1:e7:4b:c2:5d:55:96:e4:e0:77:
b4:29:2a:5d:cb:ae:40:a5:04:4d:81:d6:a5:23:9d:
62:eb:3a:9f:d6:65:4e:47:08:72:1b:3e:c9:6a:7b:
ae:bf:38:88:d4:f3:62:01:f7:85:6a:bf:80:ad:48:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D8:F1:32:78:64:DF:B0:DD:97:28:51:02:C6:1D:B5:63:CD:08:14
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/adjxMnhk37DdlyhRAsYdtWPNCBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.75.0/24
Signature Algorithm: sha256WithRSAEncryption
65:59:dd:3b:e3:b2:a1:66:2a:9a:da:24:0d:5c:5e:9f:e2:cb:
a4:e9:fc:e3:ab:f9:bd:35:b2:66:23:7e:39:24:66:e7:e3:31:
70:e4:3b:ac:07:5b:bb:a3:23:ce:2e:0e:ac:58:7e:84:dd:b7:
75:5f:8b:34:a5:a7:56:59:00:dc:7f:9b:69:1c:aa:e5:98:3f:
28:18:4e:a9:dd:d3:da:45:dc:08:92:9c:23:2a:c5:8f:ea:ec:
bd:98:f0:e2:d0:ca:96:51:24:9a:76:16:71:aa:8b:7d:2a:88:
a3:d7:51:d7:4e:a9:0f:9c:ac:c0:ea:d6:55:19:96:99:87:6e:
84:55:5a:d9:82:f4:ca:ba:17:ea:bc:5f:d1:7f:88:85:00:1e:
96:9b:7d:00:d0:94:3c:32:79:15:ee:ea:ac:d4:55:12:c0:df:
74:a6:82:4a:8f:d8:03:7f:ce:70:c1:47:ec:0c:48:58:72:55:
29:23:4a:34:9e:78:f7:da:56:4e:f9:87:1c:06:19:05:3c:2a:
ad:39:9a:b2:e4:1f:a8:68:42:c1:8b:ff:8e:af:04:7c:75:10:
be:1a:8a:b6:ea:e6:73:f9:88:b1:9a:9c:fa:7a:ce:48:6d:25:
01:e1:7e:7c:2b:3b:e9:2e:0e:4d:0f:09:87:e9:60:8e:1f:8f:
6e:f0:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:29 2024 by rpki-client on console-fra.rpki-client.org