Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/K28lMekvv-4pBMtPsH5OXcfUabs.roa
File: K28lMekvv-4pBMtPsH5OXcfUabs.roa (raw, json)
Hash identifier: JoGtQ/gZV6nrC53g9nRavyP9Q8UQu7T6URCv+kLzXqc=
Subject key identifier: 2B:6F:25:31:E9:2F:BF:EE:29:04:CB:4F:B0:7E:4E:5D:C7:D4:69:BB
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 01834BDA1743F0A9DBE04E829D4084C2BF71
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/K28lMekvv-4pBMtPsH5OXcfUabs.roa
Signing time: Sat 17 Sep 2022 14:28:47 +0000
ROA not before: Sat 17 Sep 2022 14:28:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202756
IP address blocks: 62.4.112.0/24 maxlen: 24
62.4.109.0/24 maxlen: 24
62.4.110.0/24 maxlen: 24
62.4.111.0/24 maxlen: 24
62.4.113.0/24 maxlen: 24
62.4.114.0/24 maxlen: 24
62.4.115.0/24 maxlen: 24
62.4.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4b:da:17:43:f0:a9:db:e0:4e:82:9d:40:84:c2:bf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Sep 17 14:28:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b6f2531e92fbfee2904cb4fb07e4e5dc7d469bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:a4:7f:de:5f:be:6a:0f:78:b4:17:0d:c4:
7b:7c:4d:e8:3c:3e:0f:79:80:07:19:64:57:db:50:
81:a2:5c:ad:fc:fb:be:a2:31:d9:a2:65:e9:9b:6e:
cb:62:5d:b6:c1:cc:49:4c:d5:e5:3b:81:ca:9e:36:
67:2b:a5:04:4e:3c:6b:46:67:59:73:a9:02:c4:b5:
88:3a:f0:b9:a7:3c:35:5d:46:09:a2:a0:c4:dc:15:
83:e0:71:16:6e:1d:d0:a8:28:e8:5d:54:7c:b6:02:
c5:7e:07:48:1e:f1:59:9b:aa:2c:b0:2f:a7:76:c5:
29:cd:0a:da:9a:f9:36:fb:fa:97:27:7f:3a:ca:84:
c2:cc:07:ab:e2:01:16:6f:a3:f9:5d:7b:81:f3:d0:
37:c5:c2:65:f8:7f:10:a8:6f:aa:a1:af:e1:0a:83:
46:12:65:36:26:a0:a1:d2:99:1d:9d:80:7f:3f:d8:
2e:19:3e:8e:a9:36:e4:8c:26:aa:bb:32:e0:40:d3:
59:53:c3:6b:82:63:28:e6:84:7a:a9:2d:61:b7:25:
e5:eb:d8:c1:db:bf:a9:53:e7:75:de:42:54:62:bc:
05:76:37:75:54:a1:70:6f:3e:29:67:e9:1a:60:fb:
b0:59:1f:78:a5:b0:c2:d3:7a:1c:d9:f9:18:e2:54:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:25:31:E9:2F:BF:EE:29:04:CB:4F:B0:7E:4E:5D:C7:D4:69:BB
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/K28lMekvv-4pBMtPsH5OXcfUabs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.109.0-62.4.115.255
62.4.117.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e3:f5:5a:b7:57:20:f3:c4:b9:62:44:d9:d8:2f:67:94:0d:
94:b8:b1:8f:1b:15:a8:af:4e:7d:67:83:ea:54:11:b4:b2:59:
17:fb:bd:8c:48:fc:05:e1:6b:40:ef:46:2a:a3:b2:01:3f:1f:
a3:c1:88:99:07:e9:dd:bf:7c:e4:82:8d:1b:0e:53:57:82:76:
38:42:38:55:4f:89:95:1c:d3:e0:64:bd:77:9a:2a:9e:ef:ac:
c1:80:ed:39:c9:a4:df:14:c1:be:ee:2f:aa:3d:ac:0d:4b:4e:
79:c0:62:3e:52:e3:5e:15:06:4b:b0:c6:4c:7a:d2:13:0b:99:
33:62:1e:a5:42:03:19:59:20:ef:a5:04:5c:75:4f:74:80:89:
9f:c5:c2:c2:37:9f:62:9d:a3:53:ec:04:15:a5:98:99:bc:55:
07:89:5d:88:95:fc:d7:01:20:09:03:4a:e4:a6:b9:94:3f:5a:
8c:5a:37:c2:19:43:07:6a:ca:8f:c3:be:8e:9b:7f:60:9e:49:
fc:42:f6:1c:4e:fa:05:c3:83:e0:d1:e8:ec:e4:31:05:83:14:
41:58:52:a2:2a:67:99:66:b6:08:f7:ea:7e:ef:fa:c2:e4:7b:
e3:e9:83:c7:d5:2a:f0:64:af:b1:9a:6b:1d:ab:2a:3e:62:e3:
1d:05:b4:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-fra.rpki-client.org