Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/88WCx7RBmg0Mfy9jE6Rf17ats4o.roa
File: 88WCx7RBmg0Mfy9jE6Rf17ats4o.roa (raw, json)
Hash identifier: YgRHHJ+sKXUJowxgzcsYSVkvomiY6kRkzEABRO0Y5G0=
Subject key identifier: F3:C5:82:C7:B4:41:9A:0D:0C:7F:2F:63:13:A4:5F:D7:B6:AD:B3:8A
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018427A4EC30F038AE14E552000B24ACE7D4
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/88WCx7RBmg0Mfy9jE6Rf17ats4o.roa
Signing time: Sun 30 Oct 2022 06:47:10 +0000
ROA not before: Sun 30 Oct 2022 06:47:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62091
IP address blocks: 192.162.64.0/24 maxlen: 24
192.162.64.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:27:a4:ec:30:f0:38:ae:14:e5:52:00:0b:24:ac:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Oct 30 06:47:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3c582c7b4419a0d0c7f2f6313a45fd7b6adb38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:14:84:03:fc:38:66:6e:8c:f0:b6:6f:90:
9b:da:b4:97:6d:8e:48:53:22:cf:a9:cb:45:38:6f:
15:d8:cd:5f:6b:14:cf:b7:3f:b8:e9:c5:05:9a:e8:
a4:b3:a5:7f:af:ba:51:fd:f0:86:9f:61:ba:00:2b:
70:ae:a5:e5:72:a5:21:aa:a3:00:58:ef:60:1a:45:
11:52:af:4d:88:e3:39:9a:68:01:b0:d5:40:37:61:
a3:c7:67:4c:87:3f:fb:7a:ec:ca:48:63:62:c1:36:
68:f1:c6:7e:85:9f:97:fc:bb:4d:0d:2a:ea:85:6b:
d9:2e:4d:ee:3f:b6:e5:76:ec:c6:19:c6:5d:74:08:
5b:e3:84:61:3d:c9:0e:60:dc:cb:a0:74:3b:bd:23:
3d:f2:12:69:e7:a6:28:ba:c0:37:1f:e8:9b:a8:ed:
f8:69:a8:7f:10:0c:61:65:eb:2e:cc:a6:92:d9:b4:
2f:7a:0d:46:ba:7c:ce:e5:79:5f:13:1f:c2:18:e3:
2b:f7:d2:c0:71:6f:3b:39:9b:2a:d8:6f:f2:28:1f:
13:e6:a4:63:18:b8:6b:84:3e:be:b1:48:1e:31:50:
93:e5:b3:0d:b0:09:7c:51:da:15:dc:77:bb:17:f5:
1e:e5:2b:d3:a0:00:b9:95:b0:fa:bf:db:ef:a2:d5:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:82:C7:B4:41:9A:0D:0C:7F:2F:63:13:A4:5F:D7:B6:AD:B3:8A
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/88WCx7RBmg0Mfy9jE6Rf17ats4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.64.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:bf:4b:44:eb:ce:52:9a:04:c0:29:25:45:d8:84:ad:1e:d3:
ed:10:c6:1d:d7:78:62:fd:a5:6f:03:ef:a7:35:38:7b:1e:c7:
11:33:02:22:90:ce:42:2b:ca:07:bc:71:25:d1:68:33:01:54:
74:55:24:0c:1d:3a:33:ba:16:37:ef:cd:0e:36:ea:ca:4a:1a:
cc:74:e9:72:25:7a:b5:af:b4:ad:95:cc:22:c8:ee:9a:2c:4b:
1a:d1:7e:7d:21:bf:e4:bd:ab:a5:fa:19:96:42:f6:6a:9d:32:
5b:2c:57:93:95:43:b6:de:9e:8c:00:68:55:98:65:71:61:42:
d3:61:2c:76:00:4c:60:82:14:71:ee:27:68:f4:b8:7a:79:1c:
b2:98:99:d7:2b:79:04:0b:f9:3f:45:72:ea:da:e0:5f:45:99:
d3:24:65:91:68:14:8c:d8:28:cf:29:8f:fe:eb:8d:6b:86:7a:
8c:d0:01:ad:b7:80:9d:61:8b:e0:bb:f8:88:6c:0b:01:63:25:
ab:a2:93:d2:e1:0f:c4:7e:0b:f9:fb:f8:cc:10:06:96:47:e6:
8c:2b:d7:1d:9f:77:63:bc:a7:cc:11:bb:b8:e7:24:68:8e:75:
82:82:69:39:2e:01:bc:07:cf:ea:20:0e:8a:64:95:41:ff:c8:
86:90:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:01 2024 by rpki-client on console-fra.rpki-client.org