Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/KJ4T4Q-dsCnVRfcxjZ-41YsQHWE.roa
File: KJ4T4Q-dsCnVRfcxjZ-41YsQHWE.roa (raw, json)
Hash identifier: RlrEpjXQFRs1uJs/u7NC2hHlxG16iGPD3aidMa+8HN8=
Subject key identifier: 28:9E:13:E1:0F:9D:B0:29:D5:45:F7:31:8D:9F:B8:D5:8B:10:1D:61
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 01825D42E3777774FE7F2701A470E19B2AF6
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/KJ4T4Q-dsCnVRfcxjZ-41YsQHWE.roa
Signing time: Tue 02 Aug 2022 06:34:00 +0000
ROA not before: Tue 02 Aug 2022 06:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15412
IP address blocks: 85.95.24.0/22 maxlen: 24
80.77.0.0/20 maxlen: 24
62.216.128.0/19 maxlen: 24
2001:1a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:42:e3:77:77:74:fe:7f:27:01:a4:70:e1:9b:2a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Aug 2 06:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=289e13e10f9db029d545f7318d9fb8d58b101d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:e6:bf:a3:b4:1a:12:a0:18:f9:f1:7d:49:
4b:56:74:dd:0d:2a:dd:66:08:34:40:cd:b8:1f:1e:
1d:c4:f1:14:b9:32:f4:62:6e:fa:e1:69:fa:7c:3b:
db:dc:59:81:fc:fa:06:f0:ba:3e:51:29:04:e5:56:
b9:9a:76:80:fd:bf:0e:7e:11:e4:22:79:f2:51:77:
78:ce:90:6d:ce:fd:3a:8a:52:04:54:9a:30:54:ae:
5b:cc:17:b0:ad:d5:33:18:8e:e6:33:91:e9:37:6d:
dd:f0:84:74:9c:5d:c7:e7:6f:2e:43:ec:ac:44:bd:
51:35:32:e7:9d:28:94:cf:c1:2f:a9:ef:37:d6:17:
ca:02:42:07:2e:4b:e9:52:fb:f8:f4:27:7c:9f:22:
26:08:07:cc:08:11:e6:12:4d:d1:f8:32:25:2c:ed:
16:74:cb:fb:59:79:c4:fd:42:63:45:cd:10:4b:9c:
63:87:53:f6:41:0c:79:0b:10:2b:31:0d:b2:8f:32:
b2:76:8d:8d:8f:d2:da:40:3a:ba:70:b1:33:99:67:
8b:9d:e9:68:d5:ad:cf:4e:d7:d3:b1:31:62:2e:e2:
1c:9a:1d:f4:ef:bd:84:01:45:b4:58:1e:5f:72:cf:
f5:b7:65:e3:24:73:5c:dc:51:0d:3a:07:2c:da:ad:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9E:13:E1:0F:9D:B0:29:D5:45:F7:31:8D:9F:B8:D5:8B:10:1D:61
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/KJ4T4Q-dsCnVRfcxjZ-41YsQHWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.128.0/19
80.77.0.0/20
85.95.24.0/22
IPv6:
2001:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
6d:ea:3d:aa:96:6f:06:6d:a3:d4:7e:a7:a5:7b:e3:a0:c4:8c:
7b:b1:54:d1:13:10:00:cd:f6:27:85:44:2b:b5:32:25:17:cb:
67:7f:57:0d:af:b4:3b:2b:e4:1a:1c:ae:5e:58:3a:39:e7:5f:
1c:50:80:3a:13:71:81:e1:43:48:f2:23:dd:50:fb:48:d4:01:
79:37:a4:87:6f:90:79:36:93:1b:1b:8d:4c:24:c5:a0:30:24:
24:07:7f:19:3d:28:81:9c:63:8b:bf:8c:ee:cc:74:f7:ee:da:
e7:6d:3a:79:41:19:f8:a0:f7:35:d4:99:c7:c7:f4:6c:52:50:
78:68:5d:b8:08:52:62:35:90:8d:86:e1:6c:07:4d:8e:9b:99:
1d:40:e1:5f:7d:47:88:37:aa:63:b1:5c:5c:66:38:59:2e:27:
15:08:39:4e:91:84:60:20:e1:97:16:7d:3b:8b:6b:56:95:63:
bc:06:33:aa:66:52:7d:1e:21:c0:20:1d:b5:b4:d8:bb:f2:a5:
01:03:ec:b5:76:a4:98:5a:61:87:55:a6:a7:72:3d:ba:b5:6b:
79:b2:c7:52:09:00:26:7a:1a:a9:14:b9:18:00:fc:81:ae:1f:
38:fb:ad:97:00:d0:aa:b8:97:33:ec:cc:1e:80:f7:d0:99:e4:
d7:95:61:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:56 2023 by rpki-client on console-fra.rpki-client.org