Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62579.roa
File: AS62579.roa (raw, json)
Hash identifier: W8StMlMjs12OmvjPGbx+utqtbRQ5cEfpEYotL3YlM8A=
Subject key identifier: 14:31:5A:D5:94:3C:48:87:E9:0C:B0:48:95:5A:B4:56:7B:53:E5:FE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7550BF1989B72A373B8C25B636C22CA37A00B3EA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62579.roa
Signing time: Tue 31 Oct 2023 00:00:06 +0000
ROA not before: Mon 30 Oct 2023 23:55:06 +0000
ROA not after: Tue 29 Oct 2024 00:00:06 +0000
asID: 62579
IP address blocks: 191.96.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:50:bf:19:89:b7:2a:37:3b:8c:25:b6:36:c2:2c:a3:7a:00:b3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 30 23:55:06 2023 GMT
Not After : Oct 29 00:00:06 2024 GMT
Subject: CN=14315AD5943C4887E90CB048955AB4567B53E5FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:2e:e6:6d:98:68:f6:1f:f9:0f:dc:10:3c:
1a:5c:6e:36:e7:90:70:ad:9a:fb:4e:98:75:5d:70:
fe:c9:3a:fd:8b:b5:ea:c8:8c:4e:e4:b9:53:ea:27:
96:09:a5:de:59:c3:17:7f:57:34:59:a5:56:62:bc:
2c:25:8f:1a:0c:aa:86:00:fe:5b:6a:4b:fd:78:c6:
f4:c6:1b:45:e6:ac:71:a5:87:e8:69:8e:83:81:ab:
76:d8:56:c4:69:49:c5:c5:91:48:8a:61:9e:3c:c1:
8a:d7:b0:1a:6b:36:ad:bd:0f:1e:77:e0:dc:f9:9f:
b9:73:97:7f:14:99:32:0a:d0:e5:c3:8e:f4:5b:74:
08:b8:54:78:eb:e5:85:dc:48:78:90:59:39:1d:13:
bd:8d:64:ce:ff:75:f3:c6:45:a6:cc:84:cc:1d:0d:
be:7e:01:e7:ee:f4:ac:cb:e2:dd:66:69:a3:04:68:
1d:0e:81:46:e3:13:bd:e6:8b:cf:49:f2:f7:d1:0f:
14:3f:d5:1f:e3:eb:41:ef:4c:c7:eb:4f:fb:bb:ae:
b5:46:cf:0a:0d:aa:3e:de:0c:cc:76:31:08:4e:7f:
cd:6a:46:a4:33:e8:54:9a:40:8f:57:5e:5b:78:83:
21:fd:f1:6f:6a:dd:6f:81:69:7e:95:9d:74:e3:78:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:31:5A:D5:94:3C:48:87:E9:0C:B0:48:95:5A:B4:56:7B:53:E5:FE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62579.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.207.0/24
Signature Algorithm: sha256WithRSAEncryption
28:14:38:39:78:e4:3b:92:1f:f4:c9:cc:f0:15:13:ec:77:a0:
5d:57:1b:c6:ec:3b:a4:45:ea:63:c7:23:a8:d5:98:6b:ce:8d:
30:87:2b:59:72:15:47:04:84:1c:d5:8f:a3:6f:46:7e:4d:02:
58:1a:f4:23:d6:d9:be:9a:48:7f:f3:67:1b:4a:7a:c9:fb:70:
da:f3:e7:e7:11:3f:3e:e7:8a:6d:40:f4:ea:74:be:04:f2:49:
df:71:57:53:24:f2:d4:34:e7:fc:fb:76:e8:0c:aa:d6:f7:1e:
d7:57:ee:70:c2:c7:d3:12:2d:df:9a:80:f8:52:9f:f9:fa:0e:
7f:5f:61:3d:72:e0:c8:e7:ca:b0:66:07:6a:2c:77:05:3a:fe:
33:f1:72:9e:8d:bb:db:6d:69:f5:80:6a:78:06:7a:5e:66:2d:
27:c6:dc:0f:f6:47:bb:24:29:3e:ea:49:56:46:a3:5d:d8:e4:
47:44:8e:17:f5:b9:a9:b0:a1:61:6f:56:62:db:5e:30:e8:a5:
5c:49:b1:0c:6e:97:d9:ff:85:fb:05:b8:98:36:47:57:0e:3f:
06:84:53:e1:cb:68:a8:c7:16:37:bc:b2:f7:be:ca:b7:2a:a6:
ec:f5:2f:31:ad:2f:97:a2:af:7b:e9:27:d6:f4:67:a7:bb:04:
c0:97:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:32 2025 by rpki-client