Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DqZm8SukQNrTr3k677QD7sWncuE.roa
File: DqZm8SukQNrTr3k677QD7sWncuE.roa (raw, json)
Hash identifier: UPHm7TmCHSQU+o2DDopfkNWiBtCFX5yJfGdVXrFEwhw=
Subject key identifier: 0E:A6:66:F1:2B:A4:40:DA:D3:AF:79:3A:EF:B4:03:EE:C5:A7:72:E1
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018780527B5879BA8D28B0EF13D808D0B40D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DqZm8SukQNrTr3k677QD7sWncuE.roa
Signing time: Fri 14 Apr 2023 15:11:41 +0000
ROA not before: Fri 14 Apr 2023 15:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25038
IP address blocks: 62.132.115.0/24 maxlen: 24
194.45.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:52:7b:58:79:ba:8d:28:b0:ef:13:d8:08:d0:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 14 15:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ea666f12ba440dad3af793aefb403eec5a772e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:83:74:5a:55:9c:93:4a:e2:d1:8a:ea:a7:
d2:18:fd:e0:7b:42:d8:44:e0:a7:96:7e:27:75:f0:
a3:28:29:87:a2:43:f1:71:4b:73:79:b4:9a:d2:33:
4d:e6:0a:b6:17:81:d3:7b:b2:84:05:ea:9b:59:87:
d7:39:5a:46:42:b8:73:1f:69:8f:11:34:db:1e:51:
ec:5e:2e:f6:8c:1e:32:f1:dd:32:f8:c0:f6:5f:9c:
e2:58:28:74:25:c7:e5:48:1a:be:d5:76:32:35:09:
41:32:c3:03:ad:60:4f:8a:5d:b0:58:d2:97:98:2e:
7e:39:19:9a:b4:ab:e0:c9:99:11:4d:49:c5:57:fb:
f3:0b:a0:79:ff:f3:75:5d:d8:f8:3f:c9:f6:cc:c4:
31:58:2f:7f:fe:2c:85:6f:7a:d8:2e:5b:a7:ff:73:
90:43:6b:7a:9b:fb:42:b9:37:68:6c:4a:d1:41:a4:
36:4d:eb:72:20:14:fd:b9:00:8f:95:db:e9:14:6d:
f2:0f:27:91:db:8f:00:e0:8c:15:56:01:20:7f:2e:
7a:44:1b:35:cf:51:a0:26:61:0a:27:c9:7d:46:34:
b4:39:3f:b5:08:7e:ca:42:6f:b9:ac:ff:7f:71:ac:
42:c1:29:18:ab:b3:1a:6c:89:df:46:35:32:dc:70:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:66:F1:2B:A4:40:DA:D3:AF:79:3A:EF:B4:03:EE:C5:A7:72:E1
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DqZm8SukQNrTr3k677QD7sWncuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.115.0/24
194.45.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:56:e5:2c:05:4d:1f:db:d1:a8:46:79:e9:55:09:71:d5:0b:
1e:17:b3:66:cf:b8:e7:6b:f3:72:d6:7f:3f:7e:2f:ef:3a:43:
21:ea:66:4b:60:16:62:d5:ac:5c:0b:10:48:14:50:14:8e:80:
a4:66:8d:8c:99:08:27:4e:f9:59:2c:fc:cc:7f:ea:6e:08:e4:
bb:47:e1:ec:04:50:17:9d:5d:dc:fe:f7:c2:4f:a8:61:31:36:
5e:ce:84:7f:3f:5b:01:3d:d3:a6:b3:87:26:23:15:a5:7c:9a:
f3:0c:b1:5e:a8:22:fe:7c:6e:c6:6c:47:e4:82:12:83:47:19:
72:3e:f2:ef:10:75:19:33:0e:cb:2b:18:20:96:99:fe:23:6d:
8a:c1:b6:b6:72:79:05:b1:ed:e7:01:c9:b9:20:6c:54:c5:44:
e6:94:d1:42:43:95:92:02:c4:14:6f:e6:51:9e:2f:33:77:f8:
59:51:d6:60:b9:d5:cc:d9:0f:49:98:50:25:2a:8e:71:05:bf:
b3:9b:76:03:c7:41:56:05:29:45:58:af:f9:6e:64:97:e0:f8:
b1:96:41:a1:af:c6:04:36:79:14:02:64:75:35:b8:0f:6c:cc:
a1:dc:25:ea:17:d6:4e:ac:b3:16:76:60:39:f9:99:91:15:31:
d9:5e:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:10 2025 by rpki-client