Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/jv2HUw6R6ZVI2sOwempRk-9_VGk.roa
File: jv2HUw6R6ZVI2sOwempRk-9_VGk.roa (raw, json)
Hash identifier: 4wKjHa0Kq8dQTVnGdeMqFChiNUCgMkjRA6s6xAFIX6w=
Subject key identifier: 8E:FD:87:53:0E:91:E9:95:48:DA:C3:B0:7A:6A:51:93:EF:7F:54:69
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36860691
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/jv2HUw6R6ZVI2sOwempRk-9_VGk.roa
Signing time: Wed 04 May 2022 05:46:46 +0000
ROA not before: Wed 04 May 2022 05:46:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60675
IP address blocks: 62.174.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914753169 (0x36860691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 4 05:46:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8efd87530e91e99548dac3b07a6a5193ef7f5469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:c9:fc:a7:20:06:84:47:df:15:4d:51:a1:
2d:83:12:49:49:d4:63:8e:ec:2c:3a:5e:b2:42:c7:
fb:aa:a4:28:c4:89:80:a7:a3:84:67:f9:7c:ab:01:
92:ca:ac:80:6a:bb:11:75:e4:6b:1c:6e:50:bf:6a:
5e:67:6a:e0:1a:c2:6e:96:20:b4:be:2e:a1:be:70:
a4:c8:cb:8d:f6:44:3e:46:50:9b:d6:78:4f:cc:0a:
7e:31:c2:91:2b:8d:b6:5f:aa:09:bf:f8:a1:1b:78:
5a:d1:21:7f:bf:ed:38:77:4b:1d:33:93:4e:18:c7:
db:4a:69:f3:6f:68:2c:01:cd:da:fc:2d:ef:14:48:
20:98:44:7f:0d:b7:b1:46:5d:01:51:71:9c:41:0f:
a1:bb:7a:d6:bc:be:59:4f:e0:e2:c3:ed:31:eb:a9:
61:87:a3:92:e8:e1:8d:74:d6:65:d8:c2:df:c9:25:
21:17:f4:bb:13:df:94:07:5c:6b:72:17:ab:fa:17:
05:7d:ee:97:5a:c8:e9:3c:bf:18:e5:55:fa:74:f9:
16:58:98:ad:db:8d:4e:a5:c2:33:fe:46:30:c8:99:
9b:df:69:b2:05:c6:52:b2:d2:b9:46:47:94:72:f6:
dc:e3:9d:83:b7:31:0b:a2:1a:5d:5e:f3:c8:b6:5a:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:87:53:0E:91:E9:95:48:DA:C3:B0:7A:6A:51:93:EF:7F:54:69
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/jv2HUw6R6ZVI2sOwempRk-9_VGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.174.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1d:27:79:84:75:a7:78:b4:49:03:2a:db:07:b7:f7:99:c0:
e3:6b:ef:de:32:e1:60:28:18:15:f1:22:67:a3:74:23:0c:a1:
13:19:37:f4:8b:88:35:06:53:fb:79:aa:57:27:7c:a7:d2:c1:
6f:4a:5f:3f:ce:fe:ad:96:81:e5:6d:bd:29:71:6a:72:c3:64:
56:82:f5:92:40:0a:63:ec:f5:0a:d4:f7:6f:90:e2:e5:f0:e0:
a7:ed:17:1a:06:6d:52:e2:93:b2:d2:1d:e6:4f:da:38:14:71:
d7:43:a5:bf:47:a1:12:13:e4:68:ee:34:ff:d4:30:58:ec:d9:
61:13:58:2b:25:da:d3:5e:54:6c:32:5c:cb:a7:b5:e2:1c:23:
72:2e:84:8e:53:6e:c3:b5:c1:58:2f:79:3f:04:f8:5b:b4:ed:
37:51:f9:45:70:c1:c3:7b:1d:73:f1:d0:0e:81:5c:ef:f2:fc:
a4:61:98:63:00:37:25:fa:a1:00:74:fb:78:8e:a0:e5:dc:28:
14:ef:e4:2d:b7:3b:a5:d3:48:00:fa:04:5b:f7:19:da:48:34:
99:96:eb:f6:ed:cc:e7:d5:c4:b3:49:f0:32:8b:0d:93:4a:ec:
37:5e:36:36:22:4e:fa:9d:f8:0a:26:0a:65:26:59:ba:9c:48:
3c:e0:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-fra.rpki-client.org