Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/wLKtVL6_C6I9UJRsJIq9Zw1UBhQ.roa
File: wLKtVL6_C6I9UJRsJIq9Zw1UBhQ.roa (raw, json)
Hash identifier: AOS1TGRs3UybYL8MQG1/TonRtE60nzMUxVf4uaGdYlU=
Subject key identifier: C0:B2:AD:54:BE:BF:0B:A2:3D:50:94:6C:24:8A:BD:67:0D:54:06:14
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36BEA0F1
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/wLKtVL6_C6I9UJRsJIq9Zw1UBhQ.roa
Signing time: Mon 23 May 2022 08:02:29 +0000
ROA not before: Mon 23 May 2022 08:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 62.43.252.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918462705 (0x36bea0f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 23 08:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0b2ad54bebf0ba23d50946c248abd670d540614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:a2:eb:9b:4f:bf:bf:a8:9f:97:1c:0b:32:
16:f6:5e:e4:2a:8e:9e:6a:9a:4a:8e:5e:5e:62:7f:
19:77:cd:80:39:89:0d:d0:66:7a:d5:61:fc:59:7f:
a0:6d:1c:06:db:76:a5:2e:de:b5:3d:9d:90:39:5c:
27:d5:ea:12:b6:b6:76:5f:dd:77:5d:1d:20:45:6c:
e1:d6:9b:31:a5:6e:fc:0e:07:df:5f:63:58:47:57:
59:7f:c6:dc:97:10:d5:49:04:16:82:d4:72:fa:47:
66:1e:0d:d4:0a:b9:3e:dc:a1:45:d2:61:32:88:2d:
f5:69:e2:5d:c8:e5:7c:a6:0b:44:c2:1d:3c:fc:db:
ce:15:95:1c:1a:60:a0:05:3f:66:81:2b:ea:a1:d3:
d9:2b:6b:58:d9:b3:ad:3e:29:8f:c8:de:05:43:cc:
61:1e:8f:21:aa:49:37:f9:48:3b:7f:d5:84:c5:e5:
28:32:95:2a:29:98:cd:c1:44:50:25:46:17:40:2a:
4b:fc:74:f4:d1:f4:6c:bd:93:15:36:58:fc:20:25:
27:29:e8:4b:fe:8a:1a:04:37:ed:ae:f8:70:57:db:
f7:78:1b:f0:11:8c:80:64:2e:f0:2c:06:9f:bf:14:
dc:7b:92:9e:e4:ba:e6:2d:31:bd:73:28:7e:76:4c:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:AD:54:BE:BF:0B:A2:3D:50:94:6C:24:8A:BD:67:0D:54:06:14
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/wLKtVL6_C6I9UJRsJIq9Zw1UBhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.43.252.0/23
Signature Algorithm: sha256WithRSAEncryption
99:67:91:64:15:e3:64:f0:15:23:db:7d:45:79:8b:2f:59:9a:
89:e8:09:99:6c:b1:68:c3:f3:78:c8:3a:52:7f:12:1a:03:d3:
06:87:70:6f:ed:0f:da:df:49:2a:21:77:77:b5:fa:51:29:46:
8e:0b:fd:aa:6f:e9:58:06:71:6c:bf:18:d3:8c:ce:eb:b3:62:
b5:7d:ad:3b:01:80:83:ac:d4:88:70:08:fe:bb:45:e9:dd:3e:
10:f9:23:13:da:96:3e:48:b5:ec:5b:97:88:46:5c:77:9f:a4:
48:bb:dd:72:68:59:e8:89:d3:f8:1e:51:04:df:cd:ee:06:a3:
b0:b3:a1:cc:94:29:a9:eb:63:8c:7b:4d:ae:fb:cf:d8:e3:78:
58:7a:4a:b2:d5:8a:dc:94:6e:50:d6:cc:eb:53:43:81:d3:a5:
7a:34:60:61:27:c0:1d:18:e8:65:74:01:0d:e5:40:95:ba:16:
73:42:ae:36:a9:17:d4:d9:d4:28:3c:e3:19:50:97:a5:7c:4f:
36:b7:08:ea:d3:cb:05:ec:3f:ef:44:2a:9c:25:a3:57:e2:28:
14:a9:8b:fa:72:d2:6d:4f:9f:24:96:13:05:1a:8a:31:fc:af:
6d:49:32:9e:e8:34:53:4e:13:de:28:80:06:0c:aa:d5:57:b9:
54:48:fc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-fra.rpki-client.org