Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/q58YiJHrIL3mhTigIjGsQWCM8Ww.roa
File: q58YiJHrIL3mhTigIjGsQWCM8Ww.roa (raw, json)
Hash identifier: LWRGuFAIhytZaliQyzaBo8k3c0tckP7euFCTcxvDiDk=
Subject key identifier: AB:9F:18:88:91:EB:20:BD:E6:85:38:A0:22:31:AC:41:60:8C:F1:6C
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 013E9C6B
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/q58YiJHrIL3mhTigIjGsQWCM8Ww.roa
Signing time: Sat 01 Jan 2022 11:59:36 +0000
ROA not before: Sat 01 Jan 2022 11:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201708
IP address blocks: 185.62.172.0/23 maxlen: 23
185.62.172.0/24 maxlen: 24
185.62.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20880491 (0x13e9c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jan 1 11:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab9f188891eb20bde68538a02231ac41608cf16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:03:83:f4:ed:56:d6:64:b0:7c:b6:24:63:
c7:02:cc:39:ad:75:da:bd:f3:d2:5a:85:a8:8d:5a:
34:66:82:b3:01:32:bb:2e:2b:84:31:16:7d:e8:9f:
16:61:76:36:63:5e:52:80:39:46:4e:90:6d:50:70:
df:af:11:e5:3c:b9:b7:34:33:48:c0:b3:7d:7b:bc:
0d:a1:95:2c:2e:f4:8c:b8:7e:7f:c1:7e:f3:a1:3c:
cf:8b:d0:ea:31:74:08:fb:94:f5:cb:9a:8a:f4:1e:
b5:d8:3d:d7:68:ab:57:3e:2e:2f:4a:8c:d1:35:68:
74:f2:02:76:f1:62:66:0b:8d:2f:b5:cb:04:0b:ce:
10:29:05:ad:e7:be:c0:64:65:41:68:d9:98:98:ac:
2f:af:ea:68:00:07:e2:a4:9f:b9:64:e2:d8:80:ca:
83:84:e8:de:e2:f6:d8:c3:0f:22:10:d4:32:d3:a7:
b9:4a:4f:c8:0f:d4:0a:8c:3f:70:81:e5:ce:e4:0d:
9d:2b:d7:03:23:d5:28:78:73:d7:3b:b4:41:cd:3d:
df:f6:4c:e9:f7:56:e9:3d:a0:5c:9a:f6:67:d3:1c:
04:e1:a2:87:64:0e:75:9c:ad:2e:86:77:7f:31:c4:
72:23:ab:02:8a:eb:cd:f7:54:b6:62:b5:1d:76:44:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:18:88:91:EB:20:BD:E6:85:38:A0:22:31:AC:41:60:8C:F1:6C
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/q58YiJHrIL3mhTigIjGsQWCM8Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.172.0/23
Signature Algorithm: sha256WithRSAEncryption
41:1e:2d:8d:45:bd:da:74:49:97:2d:9c:0a:d9:0c:4b:47:1e:
5f:c6:52:42:f3:a2:c5:5c:f2:30:46:86:44:07:27:0f:82:56:
9e:18:78:05:5a:fb:3a:06:83:cd:33:84:15:f9:82:f1:41:74:
b3:9a:a3:93:9c:19:53:8d:a0:3e:b2:81:e2:3b:b4:fd:4b:64:
00:74:ff:d7:c7:ff:63:0a:b3:06:1f:d8:0f:ae:de:50:b5:ae:
ce:2d:3d:c1:7a:6d:9d:8a:3e:40:fc:a8:82:3c:7e:82:48:3c:
9a:7e:0b:ac:56:50:fe:05:b2:9a:ea:a4:48:58:5b:88:60:24:
b7:04:bd:c1:23:9f:5f:c3:ff:8e:a2:45:6d:28:e1:a4:b6:ff:
fa:96:28:58:7b:fd:b8:fa:27:07:db:38:09:ab:bc:b8:da:91:
9b:3e:20:29:2e:21:c3:6d:39:3f:b9:29:42:d1:b0:61:d8:3d:
3a:12:9f:fc:ae:1d:7e:88:3f:75:4d:50:df:dc:9d:86:8d:ec:
b2:1e:a3:fa:91:c6:0c:76:b0:53:90:c6:06:07:c9:e7:18:dd:
ea:7b:ba:39:3b:5e:cf:f8:eb:e2:04:f8:00:47:2d:62:a5:12:
fd:87:82:de:3a:63:d2:6a:4a:7b:70:b9:cf:f2:b9:15:cd:ab:
ce:96:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:23 2023 by rpki-client on console-ams.rpki-client.org