Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/oCZOMXdJhAmo86Ju5rEofUdaxCQ.roa
File: oCZOMXdJhAmo86Ju5rEofUdaxCQ.roa (raw, json)
Hash identifier: cBERMFtxocV1FlYT4CkpVU8bqgT60VmShIlN+oLQlRE=
Subject key identifier: A0:26:4E:31:77:49:84:09:A8:F3:A2:6E:E6:B1:28:7D:47:5A:C4:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 03C8AFC3
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/oCZOMXdJhAmo86Ju5rEofUdaxCQ.roa
Signing time: Sat 01 Jan 2022 04:52:29 +0000
ROA not before: Sat 01 Jan 2022 04:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15541
IP address blocks: 62.121.128.0/24 maxlen: 24
62.121.130.0/24 maxlen: 24
62.121.129.0/24 maxlen: 24
62.121.131.0/24 maxlen: 24
62.121.132.0/24 maxlen: 24
62.121.135.0/24 maxlen: 24
62.121.136.0/24 maxlen: 24
62.121.138.0/24 maxlen: 24
62.121.133.0/24 maxlen: 24
62.121.142.0/24 maxlen: 24
62.121.141.0/24 maxlen: 24
62.121.143.0/24 maxlen: 24
62.121.145.0/24 maxlen: 24
62.121.144.0/24 maxlen: 24
62.121.148.0/24 maxlen: 24
62.121.150.0/24 maxlen: 24
62.121.152.0/24 maxlen: 24
62.121.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63483843 (0x3c8afc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Jan 1 04:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0264e3177498409a8f3a26ee6b1287d475ac424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:3f:ca:c3:aa:0a:78:d2:4c:bc:c9:e8:73:
58:03:f6:af:63:a1:d1:85:01:81:d0:8c:5f:d2:1f:
9c:35:1d:eb:f6:cb:24:22:5f:f0:67:9e:6e:e1:62:
8d:6d:aa:6f:f7:f1:ca:11:92:30:cc:64:6a:04:90:
b3:e9:ef:c6:22:17:61:91:cc:0c:b6:c4:e1:1a:6e:
af:cd:a6:7c:d6:ec:6c:12:a8:9d:95:11:02:38:96:
5c:44:65:c8:41:90:24:ca:d9:b3:7d:8d:e5:a2:df:
7b:f5:ff:d2:d4:65:d6:61:ed:59:aa:e3:0b:b3:0c:
b5:f5:09:e0:0b:fb:a4:30:45:5a:e9:fc:52:b1:07:
6a:11:83:08:7c:05:c6:5f:40:ef:8e:83:89:45:6f:
c5:06:a4:a0:0e:4e:10:fb:e9:55:93:11:a1:d8:cd:
1d:18:4c:a5:65:75:c8:c3:2d:80:8a:9e:c7:5d:97:
30:7a:74:69:71:3f:30:4f:6c:e5:79:ea:b1:bb:2e:
68:dc:80:a2:e2:ac:55:9d:c0:99:5f:75:bd:d6:a0:
05:5b:71:80:c5:fa:19:10:1b:e1:23:da:24:c3:35:
e9:0b:0a:37:a1:85:20:38:17:7b:fd:5d:d2:0b:09:
d7:5a:58:93:e4:08:22:ec:4d:55:db:7e:b7:0d:1c:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:4E:31:77:49:84:09:A8:F3:A2:6E:E6:B1:28:7D:47:5A:C4:24
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/oCZOMXdJhAmo86Ju5rEofUdaxCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.121.128.0-62.121.133.255
62.121.135.0-62.121.136.255
62.121.138.0/24
62.121.141.0-62.121.146.255
62.121.148.0/24
62.121.150.0/24
62.121.152.0/24
Signature Algorithm: sha256WithRSAEncryption
42:73:2d:98:e6:0c:a0:c2:90:92:9f:95:8b:67:73:4b:ae:ae:
2b:b3:ec:b3:fc:4f:af:25:20:d3:a0:f9:5c:a0:9c:2f:2a:b3:
7b:d1:e9:39:88:da:a4:4a:fd:6c:8f:6d:6d:7c:da:3d:30:e1:
bd:1c:5e:7a:f7:4a:b1:36:eb:70:4e:0a:0b:2d:d4:7c:d9:5f:
9f:35:00:ea:11:71:67:23:24:aa:1e:03:d8:08:74:2e:d9:a6:
cd:90:e3:ec:b1:7a:5e:42:a9:1a:44:60:83:4f:6b:03:c7:ee:
e9:a4:65:75:b6:08:d8:22:96:7c:77:67:db:ed:33:2b:f7:3e:
b7:be:2c:d1:41:bb:c5:6c:62:b1:ae:9e:99:06:d8:50:45:c6:
7d:45:26:12:84:08:2a:61:69:12:f7:bb:58:b1:15:18:2c:c1:
69:f6:01:de:6b:e3:03:1d:bb:c3:ae:0d:f6:94:d6:02:68:61:
7c:1f:45:99:dc:80:9d:d7:c3:e1:af:ab:23:fa:d8:5f:ea:06:
3c:49:88:70:fb:da:8c:2a:4f:99:13:52:59:74:76:1b:59:4b:
b6:b0:6f:04:b6:67:d2:74:d1:5d:fa:9d:7f:85:53:fe:32:45:
ad:59:f6:00:8a:ce:0f:f0:af:32:fa:c1:17:54:7b:11:cc:06:
da:90:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:56 2025 by rpki-client