Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/HSUcr7BrFBmF9kfBh7d2WNjZEVg.roa
File: HSUcr7BrFBmF9kfBh7d2WNjZEVg.roa (raw, json)
Hash identifier: yhKvL3OwEHR+p21v/YY9smYizi0JUHgPSyAIkEv//VM=
Subject key identifier: 1D:25:1C:AF:B0:6B:14:19:85:F6:47:C1:87:B7:76:58:D8:D9:11:58
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 1C9D2050
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/HSUcr7BrFBmF9kfBh7d2WNjZEVg.roa
Signing time: Sat 01 Jan 2022 13:56:05 +0000
ROA not before: Sat 01 Jan 2022 13:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202012
IP address blocks: 62.40.101.0/24 maxlen: 24
62.40.105.0/24 maxlen: 24
62.40.111.0/24 maxlen: 24
62.40.112.0/24 maxlen: 24
2001:799::/32 maxlen: 32
2001:798:dd:1::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480059472 (0x1c9d2050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jan 1 13:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d251cafb06b141985f647c187b77658d8d91158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:ce:2c:36:02:0d:2b:6e:bf:a7:f1:90:5e:
ca:77:53:e4:8c:7b:4f:d2:33:bf:9d:e4:ea:40:23:
7e:91:a0:ec:8f:2b:26:19:e1:ec:7e:ba:1c:89:8a:
6d:ee:c9:91:99:4e:06:2e:2e:5b:69:0a:59:1e:3e:
ea:cd:54:b0:d9:1c:7f:02:f1:c4:c7:a4:52:54:52:
18:87:74:88:32:49:51:ba:c0:ed:57:98:91:46:e5:
e7:1e:91:65:41:92:fb:8e:3a:ed:5c:5c:fe:e8:e0:
f1:8a:a4:5c:d2:03:5f:6f:51:c1:87:68:03:fc:43:
75:02:df:c8:ad:45:01:e3:f7:36:4f:ef:38:5b:4b:
a7:da:ef:b2:53:14:e9:cb:a8:db:35:1c:74:7b:4d:
d0:fd:7e:b3:c1:50:58:cc:27:49:8d:61:9e:f7:02:
e2:6d:c6:1e:80:06:0e:b6:20:7c:42:b6:12:15:c2:
22:fa:c3:44:c0:38:2d:28:bb:97:a8:e3:4e:e9:5a:
fd:35:57:2c:30:a3:31:75:23:d0:08:a1:09:fe:78:
22:1f:0a:0c:f7:8e:24:10:bf:1b:b5:44:81:57:d5:
d5:f9:53:d7:cb:18:6b:97:f0:ca:c1:72:15:6e:50:
11:6f:8f:83:e9:3b:dc:50:92:6c:4d:7b:8a:fc:87:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:1C:AF:B0:6B:14:19:85:F6:47:C1:87:B7:76:58:D8:D9:11:58
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/HSUcr7BrFBmF9kfBh7d2WNjZEVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.40.101.0/24
62.40.105.0/24
62.40.111.0-62.40.112.255
IPv6:
2001:798:dd:1::/64
2001:799::/32
Signature Algorithm: sha256WithRSAEncryption
71:57:82:32:14:ec:ae:34:f6:d6:7a:5b:84:ec:cb:5a:e8:62:
bc:4b:33:dc:8b:b1:a1:63:81:88:5e:f7:d9:3d:7d:64:31:ee:
76:f4:ee:7b:b1:3a:81:55:9d:e1:2a:31:e9:b7:91:7f:80:87:
e0:2b:0f:8f:c3:1d:38:50:19:cc:87:68:43:5d:fa:88:bd:b7:
dd:a0:a2:db:5d:01:1f:9a:e7:04:65:96:33:29:17:76:90:92:
db:44:89:fe:a9:6d:2a:c1:14:39:35:ab:08:6f:68:df:de:4d:
98:29:9f:ab:09:9d:32:32:4d:54:9a:34:f1:4f:58:e6:43:a1:
e7:d9:43:c4:0b:a9:b2:66:b6:05:c4:ef:e0:3a:9a:26:1a:9c:
d5:03:2b:94:44:b8:5c:38:df:34:b8:ca:19:2c:cd:44:59:c7:
7c:46:ad:60:03:db:a7:96:de:d1:ce:49:61:00:b3:ff:f6:70:
ca:f5:66:02:38:ca:03:0d:a8:ff:8f:0c:2d:5c:73:bc:3d:81:
f6:cf:1d:0f:31:3c:c1:18:14:81:aa:be:f5:f3:fd:7f:de:79:
56:05:3c:15:88:d2:4d:83:3f:3e:1b:d3:ca:85:a4:2b:7d:95:
1d:be:83:af:75:48:9f:e4:92:1f:ab:fc:61:dd:a5:cd:c7:38:
26:ca:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:01 2024 by rpki-client on console-ams.rpki-client.org