Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/8qEzeaTlfHzL2dpKmaZUZFSTSy8.roa
File: 8qEzeaTlfHzL2dpKmaZUZFSTSy8.roa (raw, json)
Hash identifier: AAqn2n1DDvwD93AfZVmTQaqR+SH+UrDe+GHp5VXuyfA=
Subject key identifier: F2:A1:33:79:A4:E5:7C:7C:CB:D9:DA:4A:99:A6:54:64:54:93:4B:2F
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 11DCA381
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/8qEzeaTlfHzL2dpKmaZUZFSTSy8.roa
Signing time: Sat 01 Jan 2022 09:59:19 +0000
ROA not before: Sat 01 Jan 2022 09:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26114
IP address blocks: 62.140.11.0/24 maxlen: 24
213.244.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299672449 (0x11dca381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 1 09:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2a13379a4e57c7ccbd9da4a99a6546454934b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:de:56:b1:3f:46:6d:f2:99:b2:bf:e2:6c:
bb:5a:11:a7:47:c8:d3:53:93:57:aa:48:aa:78:5c:
8f:2a:84:74:c5:2c:60:30:ed:24:95:8b:e6:68:5f:
09:5d:bd:96:80:24:2b:5f:b9:d2:ac:47:30:9e:6c:
e4:01:15:4d:a1:e7:9d:64:57:f1:0d:c3:3d:27:93:
ac:3a:78:2a:44:5c:d0:55:b9:0f:69:9a:5d:9f:ed:
cc:3d:a5:72:42:cb:d6:f5:47:f7:66:db:3a:1c:c6:
aa:95:d6:06:8a:20:eb:23:23:20:6c:59:c6:7b:78:
bc:45:d1:3e:56:a7:82:73:9f:87:b1:51:ac:ea:a0:
ea:fd:23:e1:b7:6a:34:4c:8b:13:64:86:82:ca:bd:
41:77:f9:df:c5:af:f8:8a:eb:4f:4f:05:f5:6f:e7:
99:78:90:f6:62:2f:c3:38:e0:cb:ed:a8:17:89:ca:
1e:2b:52:fd:d5:f0:b0:14:81:68:88:a0:63:ee:5f:
9b:74:4f:9f:1c:22:99:e1:9d:78:da:85:2d:ec:03:
e0:bc:f3:7a:40:bc:73:3d:d2:25:f7:04:fa:96:af:
c0:91:2c:15:df:c1:9d:48:d5:29:82:35:53:bf:20:
09:2d:7d:00:c9:32:b9:85:b8:c5:49:01:f4:61:af:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A1:33:79:A4:E5:7C:7C:CB:D9:DA:4A:99:A6:54:64:54:93:4B:2F
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/8qEzeaTlfHzL2dpKmaZUZFSTSy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.11.0/24
213.244.141.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c0:4f:b5:c9:e2:0a:53:9e:71:eb:a2:4c:55:58:e5:1b:7d:
d0:ab:06:67:8d:ee:6a:9a:1f:e1:10:af:00:d6:85:5d:9d:b8:
ec:78:1a:b6:02:4b:ab:4b:28:f1:5b:55:72:fa:77:4d:5e:57:
ba:8c:16:39:e2:1f:c2:52:5e:45:2e:59:58:5c:98:78:80:96:
0e:99:8d:80:07:0c:ee:12:ce:dd:b7:a6:46:ae:20:ae:48:8a:
bb:ff:3f:26:77:b2:34:ca:c4:ea:72:b9:e6:38:b9:64:80:9e:
d9:6d:19:c0:79:0d:68:95:8c:cc:b7:95:ec:3c:bf:dc:a8:d5:
43:98:e3:38:c7:a7:93:f3:75:a9:3e:c0:03:22:1b:04:3f:34:
c4:f1:7d:56:dd:e8:86:f5:88:09:81:33:a1:f2:33:76:42:42:
6e:78:f2:a8:68:49:ad:a1:dc:4c:4a:0f:13:d2:9b:4c:8c:57:
5e:5b:b5:9b:b0:8f:a8:da:3e:93:44:38:a0:92:61:94:42:54:
8b:72:6f:72:ea:e6:29:c3:0b:6f:2f:e1:30:77:6f:24:6e:2d:
0d:69:ff:8c:94:92:d0:d0:f2:d9:4c:f6:31:4f:b9:e0:f7:35:
3f:53:80:f0:a7:7e:9a:c6:d6:8e:b0:c4:fe:c9:df:c1:ef:87:
36:36:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org