Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/oQHamPEFg1trhQ02Y6juCah0i6A.roa
File: oQHamPEFg1trhQ02Y6juCah0i6A.roa (raw, json)
Hash identifier: 6qNgm6KLQjcirwk442hCoaGS4et3cceR2z66Ta5Y7f0=
Subject key identifier: A1:01:DA:98:F1:05:83:5B:6B:85:0D:36:63:A8:EE:09:A8:74:8B:A0
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 1352E135
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/oQHamPEFg1trhQ02Y6juCah0i6A.roa
Signing time: Wed 15 Jun 2022 15:03:44 +0000
ROA not before: Wed 15 Jun 2022 15:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26114
IP address blocks: 62.67.43.0/24 maxlen: 24
62.140.11.0/24 maxlen: 24
213.244.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324198709 (0x1352e135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jun 15 15:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a101da98f105835b6b850d3663a8ee09a8748ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:3d:ae:2e:53:89:d4:9c:2e:ba:87:57:8e:
33:e1:a9:69:25:14:6b:aa:e0:52:48:96:9f:0f:b8:
29:1a:a5:f2:a3:ea:b2:a0:1e:10:2e:ef:be:f7:d5:
7c:cd:40:6d:89:c4:aa:18:1c:43:c2:dc:d7:bd:7a:
b5:43:65:bf:ef:44:12:92:9f:05:23:1e:98:83:06:
41:a7:b6:35:b8:b7:54:a1:06:d6:9c:29:61:2b:6e:
2c:ec:17:13:7e:eb:13:ce:d6:5e:d8:66:96:93:ca:
9b:7b:f5:4f:e5:91:00:a3:ce:3e:8a:8d:4b:22:07:
bd:89:31:7b:0c:22:dd:ce:e7:08:b9:b3:28:17:95:
37:4d:ff:4c:62:d7:11:de:f9:64:af:cf:6e:04:0f:
dd:68:e3:b6:b0:c9:3f:e2:f9:73:25:e3:cd:cb:b0:
33:3e:04:68:51:21:5e:06:19:23:a2:d5:92:9f:20:
83:de:d9:46:df:ae:c3:51:db:aa:8b:af:ad:da:99:
68:fc:54:b1:c8:f1:0c:a8:a0:7a:ba:9f:b4:a9:6e:
f1:51:98:a3:11:ac:a6:04:7b:0f:14:e8:27:88:6c:
63:8d:51:a9:7f:15:a6:b7:6a:55:4c:2b:15:fe:88:
9c:41:b7:b0:5c:8d:c1:15:c3:cb:87:1e:c3:c9:2c:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:01:DA:98:F1:05:83:5B:6B:85:0D:36:63:A8:EE:09:A8:74:8B:A0
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/oQHamPEFg1trhQ02Y6juCah0i6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.67.43.0/24
62.140.11.0/24
213.244.141.0/24
Signature Algorithm: sha256WithRSAEncryption
67:17:61:42:01:b7:ec:c6:cb:ef:4c:38:df:88:8f:e8:38:f3:
33:4e:0c:d5:6e:e6:db:aa:a9:24:5f:a9:2d:5c:37:95:1c:fd:
e3:6b:8a:33:de:09:17:c7:86:cd:b1:36:99:4d:d6:f1:f1:d3:
9c:d6:c5:69:d1:10:19:f4:ec:13:b9:de:22:12:3c:cb:e2:ce:
3e:06:85:84:33:4c:38:25:ec:76:a2:cd:ab:8c:86:73:5d:ea:
96:05:b3:ff:91:88:aa:60:6b:b8:3d:02:f7:53:b1:c2:bf:4f:
b7:93:e9:1b:cf:bc:1c:9d:c0:ad:dc:18:59:57:4a:2d:ed:a7:
8b:e0:ac:f3:ca:71:34:72:84:c9:3c:57:1b:b1:db:da:a3:d8:
a8:17:b6:6b:3e:b0:22:84:1b:6a:2f:1c:34:d5:fe:3b:08:1e:
5e:b6:0a:6b:30:a8:1e:b3:3b:ba:5f:e7:a2:f2:d3:9c:5f:3f:
05:c8:02:f4:a3:86:73:1a:97:96:29:66:63:d8:3e:8c:1a:62:
1e:3d:3f:7c:e6:31:30:07:1b:63:d5:15:d7:53:1d:bf:12:9e:
ad:da:1f:4a:d3:f0:46:21:0c:55:dd:56:b7:3c:1a:03:1f:c9:
35:b1:0d:18:9e:70:3b:b6:17:97:04:53:ed:ef:e6:25:50:2e:
3c:b1:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org