Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/gCpFNMbVKtsRPqqjrBehz8T3dfQ.roa
File: gCpFNMbVKtsRPqqjrBehz8T3dfQ.roa (raw, json)
Hash identifier: 7M2FygACAp3SxwL09r/w/rHoq1MY2VGO8sNklgOpDpw=
Subject key identifier: 80:2A:45:34:C6:D5:2A:DB:11:3E:AA:A3:AC:17:A1:CF:C4:F7:75:F4
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01852F5D5DF27E84E1408C84A1D36C6376F2
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/gCpFNMbVKtsRPqqjrBehz8T3dfQ.roa
Signing time: Tue 20 Dec 2022 11:48:46 +0000
ROA not before: Tue 20 Dec 2022 11:48:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 86.62.31.0/24 maxlen: 24
185.81.126.0/24 maxlen: 24
194.107.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:5d:5d:f2:7e:84:e1:40:8c:84:a1:d3:6c:63:76:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Dec 20 11:48:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=802a4534c6d52adb113eaaa3ac17a1cfc4f775f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:9c:43:38:ff:f3:e5:0b:46:a9:56:05:3b:
ea:d6:e2:03:7f:1e:c8:d3:4a:3b:36:b2:c6:19:a5:
c9:49:45:36:b9:3e:ea:f3:f9:08:21:ed:83:2f:5e:
1c:78:ba:36:30:c9:b5:6d:1a:f4:2d:ab:27:da:07:
11:f3:16:0f:45:9f:62:cd:fa:fa:8b:5e:7b:e1:18:
24:de:97:64:2f:5a:81:17:80:06:ef:80:8c:68:7e:
b4:42:62:f7:7f:c0:b2:c0:e4:6e:d1:54:bc:f7:b4:
f9:14:18:b0:04:25:0e:23:b5:50:d5:de:58:27:ab:
9a:55:7c:e2:19:30:03:fe:96:9d:40:b0:45:41:a4:
b6:bc:09:4d:3f:ef:b1:02:29:b9:b9:b5:68:c3:1e:
c1:8f:02:36:e5:63:99:dd:18:f1:9b:a3:aa:de:66:
d5:82:74:7e:4d:1f:21:09:31:1f:44:59:74:d2:d0:
20:fc:f8:f4:5b:c5:75:43:c1:fb:13:a4:66:64:4e:
50:94:d2:fc:1e:c1:67:1e:47:2d:f3:e8:55:4d:92:
9a:8c:78:4a:95:b1:2e:64:1e:26:a3:4a:9f:97:37:
b4:ec:b6:0f:a7:b0:04:46:d7:67:35:0d:20:e6:8b:
13:b0:01:16:6a:49:ea:32:b0:da:96:7b:c1:3d:a6:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:45:34:C6:D5:2A:DB:11:3E:AA:A3:AC:17:A1:CF:C4:F7:75:F4
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/gCpFNMbVKtsRPqqjrBehz8T3dfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.31.0/24
185.81.126.0/24
194.107.163.0/24
Signature Algorithm: sha256WithRSAEncryption
79:54:72:7b:ed:40:34:bd:57:c8:a2:35:57:52:e5:07:af:32:
04:01:b0:23:7d:9e:14:2d:52:16:53:90:53:ba:0a:8f:57:da:
a6:57:57:7c:46:f0:e9:24:58:2e:61:53:56:45:06:c7:f2:ee:
4f:72:6b:c0:ae:68:3c:87:c3:e6:5d:7b:22:a1:43:48:31:3e:
65:a9:28:14:00:35:5c:ca:1f:8e:27:3c:d2:bc:fe:cd:06:3c:
7c:18:49:88:40:d7:e5:bc:1b:d8:8d:0b:f1:2d:ad:a4:a3:6f:
77:9e:7c:bb:f7:3e:ec:c4:03:0b:9e:d1:19:44:3c:95:37:f4:
90:c7:3c:c8:62:f5:52:54:a8:b9:5c:45:32:0a:78:db:12:f0:
65:c2:58:5f:e3:9d:95:b6:03:3c:e6:c8:76:ef:01:4f:72:7d:
4e:66:14:4e:fa:21:4c:0c:94:95:63:c7:d5:56:17:b8:cb:b8:
bb:24:af:7e:14:31:98:ab:0f:ca:43:4c:f0:03:81:29:e7:0d:
57:06:8b:b9:79:88:0e:1a:d4:17:fe:11:52:ce:9a:94:f1:d7:
8f:44:d5:99:e9:c1:dc:79:1c:a0:1b:a8:ca:d3:c0:f4:64:b3:
98:1a:17:0f:5b:4f:81:2c:29:43:eb:78:8e:8c:c0:a1:db:72:
54:77:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:50 2023 by rpki-client on console-ams.rpki-client.org