Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/okpE6qzZEGPCvYz6EmKu02DZ458.roa
File: okpE6qzZEGPCvYz6EmKu02DZ458.roa (raw, json)
Hash identifier: vL+5YaLkEv0VdZmUS1vUkwLTIXFzZ3jmCdkrXrY7piI=
Subject key identifier: A2:4A:44:EA:AC:D9:10:63:C2:BD:8C:FA:12:62:AE:D3:60:D9:E3:9F
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01850BBF6F91AB9585C88305C8BC15404E03
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/okpE6qzZEGPCvYz6EmKu02DZ458.roa
Signing time: Tue 13 Dec 2022 13:49:33 +0000
ROA not before: Tue 13 Dec 2022 13:49:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199820
IP address blocks: 194.124.38.0/24 maxlen: 24
212.22.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:bf:6f:91:ab:95:85:c8:83:05:c8:bc:15:40:4e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Dec 13 13:49:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a24a44eaacd91063c2bd8cfa1262aed360d9e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:22:db:af:79:82:ce:ef:27:fd:16:51:98:
7f:eb:81:66:4f:e8:20:94:7f:9e:8c:bf:37:89:66:
7c:54:7e:7a:6e:ae:bd:93:2c:8d:90:78:21:b8:56:
3d:f1:b5:35:15:93:83:91:bb:f0:97:d0:d6:ee:7e:
65:4a:13:35:43:69:63:7a:82:dd:f6:22:2c:d7:9c:
29:a4:75:22:c4:dc:64:b8:22:b6:39:f3:df:37:5e:
31:3c:43:13:5e:d1:19:10:c5:fd:f4:71:1c:03:da:
ef:dc:a1:50:63:84:c8:ff:01:2e:aa:5e:10:8b:16:
ba:c5:bb:75:66:5f:0f:42:77:20:c3:42:27:59:ce:
b8:5c:01:bd:0a:bf:c4:da:52:05:b4:10:33:7a:d5:
c7:19:11:12:7d:f0:bd:91:97:22:a5:4e:6f:a5:02:
08:26:0c:6d:2d:5b:43:d5:d1:c0:ee:7e:3d:8c:86:
90:f8:fb:21:39:36:b1:4c:d4:79:cc:01:32:33:2e:
ed:00:87:40:f1:d3:fd:4a:b0:d6:db:a7:01:03:02:
31:5e:1d:30:e3:bc:bc:8c:a7:9f:96:f6:e1:53:8d:
93:ca:8c:59:0a:28:d3:fe:23:8c:c5:41:77:9f:f1:
6d:e2:17:15:91:19:64:2d:fc:ed:0f:25:a3:c3:5d:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:44:EA:AC:D9:10:63:C2:BD:8C:FA:12:62:AE:D3:60:D9:E3:9F
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/okpE6qzZEGPCvYz6EmKu02DZ458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.38.0/24
212.22.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ca:a7:b1:b5:94:8d:f4:8b:31:13:34:44:bd:c0:2f:53:1d:
09:24:09:b8:76:1d:fe:67:87:16:cb:be:0b:f0:dd:84:72:12:
01:09:f6:96:5f:6a:e6:c6:f2:3c:2f:f8:8c:ad:7e:c2:29:57:
7c:4f:3f:78:f8:fa:ed:25:9c:b2:38:48:9c:67:03:97:56:31:
dc:ac:52:16:18:e8:f2:b4:04:ed:9f:7c:4b:29:7d:ac:e1:97:
47:2e:9f:9c:e9:5b:77:d8:8a:0b:f5:d2:db:f2:cb:f0:d2:d5:
d5:75:81:ec:89:4a:46:66:e6:d4:3d:25:4b:55:87:b8:50:b4:
dd:1d:cc:46:62:69:9c:8b:82:6f:bb:7d:6d:8b:2f:49:08:e7:
67:4d:a6:7a:0a:a1:4d:de:5b:d1:33:8a:f5:52:bf:a1:a8:94:
17:97:21:2c:9a:95:82:73:d9:04:fc:2b:25:31:74:f0:f7:a5:
af:c5:ef:ab:bd:d3:36:c7:1c:05:a7:96:22:ca:d9:ac:b9:9a:
18:a5:c3:bd:01:ea:b9:7e:4e:15:7e:3f:8f:01:4f:de:f1:83:
7f:fc:87:d0:79:3b:48:4d:b7:d8:04:b1:89:52:e3:04:f3:9c:
75:8a:d5:6c:eb:b1:57:b0:34:66:ad:2c:c0:60:0c:03:cc:f3:
a1:4e:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org