Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/62YDxMzTQWxPUndJzLyUnCG9i10.roa
File: 62YDxMzTQWxPUndJzLyUnCG9i10.roa (raw, json)
Hash identifier: CsWMOXFBU3zbDOWQlMqmUO8RqGndUlXavy7blbzvBnA=
Subject key identifier: EB:66:03:C4:CC:D3:41:6C:4F:52:77:49:CC:BC:94:9C:21:BD:8B:5D
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 018458966C11A36035628DE69E895AEEF107
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/62YDxMzTQWxPUndJzLyUnCG9i10.roa
Signing time: Tue 08 Nov 2022 18:52:43 +0000
ROA not before: Tue 08 Nov 2022 18:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 185.103.4.0/24 maxlen: 24
185.103.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:58:96:6c:11:a3:60:35:62:8d:e6:9e:89:5a:ee:f1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Nov 8 18:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb6603c4ccd3416c4f527749ccbc949c21bd8b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fb:b0:61:79:ee:32:79:0c:71:57:a1:be:de:
a0:f0:f6:b2:ee:e2:08:57:21:da:a4:c5:db:2b:9a:
f0:2e:c0:e3:22:63:a0:f1:87:f0:40:a5:ea:97:46:
d7:55:1d:9c:06:13:c2:97:fa:e1:a0:da:ce:7e:d1:
f3:58:30:2c:9c:42:b1:1c:50:00:d3:79:0e:4b:b7:
ea:d2:96:c7:5f:6d:7a:7b:17:91:b0:31:61:5f:58:
78:79:0b:c2:94:73:31:42:46:c3:e7:08:75:3b:25:
1b:e9:f2:1a:30:4f:50:26:43:5a:c8:0b:d6:c1:0b:
bb:7f:5e:b4:99:a5:88:e6:37:0f:1e:c8:82:04:fb:
fe:1c:c1:7c:d6:da:d8:c9:26:cb:7b:65:f1:b4:89:
28:18:f4:4a:22:64:d1:42:57:9c:37:4f:97:5e:20:
43:b2:f1:4c:1a:15:e1:94:1d:e5:0d:e8:24:4c:75:
59:55:9e:5e:64:ed:ef:07:a2:39:be:6d:24:92:84:
0f:e9:66:c8:73:e8:08:d6:dd:1f:55:8d:f0:22:89:
9c:8b:3a:00:40:28:66:ff:85:af:5c:b7:2d:4f:a6:
59:b7:26:bf:66:a7:33:6d:1b:c1:c0:f5:e4:d1:4c:
e9:72:60:a2:bc:d8:8c:31:a8:72:c2:9d:81:73:b0:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:66:03:C4:CC:D3:41:6C:4F:52:77:49:CC:BC:94:9C:21:BD:8B:5D
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/62YDxMzTQWxPUndJzLyUnCG9i10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/24
185.103.6.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:ac:04:4f:5d:aa:a7:03:56:45:0c:27:f9:e8:ba:fb:fd:ce:
d4:79:a6:7c:3e:92:d8:34:1c:b2:ae:b4:17:d3:d4:5e:3b:c4:
cb:8e:a5:f7:13:ba:98:dd:8a:97:d1:ca:ce:7d:6b:30:26:10:
c6:59:a3:bf:d2:53:c0:b0:2e:ce:2b:79:b3:7b:00:b8:50:f9:
b0:4c:48:8a:63:29:55:db:76:3e:7c:a9:39:0c:92:b7:d7:b6:
0c:de:eb:4c:f5:25:01:0f:28:c5:8f:9d:f2:e1:e5:2a:6d:fb:
02:65:ca:b4:b3:41:a0:18:5d:23:42:6d:a7:be:3d:1c:c5:e3:
09:51:2f:81:b1:c6:66:c0:b8:ed:50:39:da:5b:dc:cf:a2:d1:
d4:1e:29:62:fd:6f:be:ac:42:e2:f6:ff:7d:d3:c0:3a:99:31:
ae:0a:0a:88:7a:ae:7b:94:d8:91:2e:b1:08:39:16:20:08:4f:
71:fe:27:f2:66:10:f6:90:96:05:d5:d8:cc:f8:7a:3e:3e:39:
9e:b4:0f:d8:d1:25:c0:1e:b3:0e:0e:ec:ce:37:ee:26:30:ab:
74:f3:e9:c6:06:92:33:81:36:86:9c:38:32:fb:f2:3b:3a:79:
17:5d:c4:05:cb:23:d8:dd:e7:6c:fb:fb:98:9f:5b:ff:af:8a:
cc:74:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org