Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/v7xJ0hsuFdso3UkIW88Pf58YjmU.roa
File: v7xJ0hsuFdso3UkIW88Pf58YjmU.roa (raw, json)
Hash identifier: xhJyOs/cD2JBgjPAhLFiKjBwiVxq+FeDblicIo1nLK8=
Subject key identifier: BF:BC:49:D2:1B:2E:15:DB:28:DD:49:08:5B:CF:0F:7F:9F:18:8E:65
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 136983A1
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/v7xJ0hsuFdso3UkIW88Pf58YjmU.roa
Signing time: Sat 25 Jun 2022 21:31:41 +0000
ROA not before: Sat 25 Jun 2022 21:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26114
IP address blocks: 62.67.43.0/24 maxlen: 24
62.140.11.0/24 maxlen: 24
213.244.141.0/24 maxlen: 24
213.244.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325682081 (0x136983a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jun 25 21:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfbc49d21b2e15db28dd49085bcf0f7f9f188e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:f5:cc:e8:15:d7:f3:67:d3:d4:14:92:d4:
8c:60:72:ec:23:d7:b5:c6:fa:d0:4f:8e:fb:e3:bf:
eb:a2:2a:2f:77:b3:c6:a7:00:cc:4f:b3:13:77:a1:
73:e2:f1:75:6a:49:8d:e0:3b:93:eb:47:68:1e:3c:
27:e1:49:17:96:63:cc:33:ed:44:55:58:2a:a1:1a:
8f:b1:9b:71:df:8e:42:3d:00:31:94:56:1c:86:e0:
25:1f:4a:c2:4d:51:3a:30:f4:46:61:1c:76:d6:5e:
b5:9c:2a:2a:9a:f1:63:4a:70:68:8b:58:ea:7f:44:
a9:34:c0:c3:bc:b2:58:2d:d0:69:9e:39:72:a3:8e:
a3:b4:f3:cb:3a:c4:00:53:41:9d:e3:3d:96:18:1c:
2d:ee:c4:d2:9a:e2:79:69:b1:70:92:5a:d0:81:fa:
cb:8b:2a:26:a9:b4:72:e8:91:a2:b4:04:b9:c3:9c:
c8:84:cf:03:8b:00:6e:e7:a8:8d:e9:5c:ec:84:ad:
40:f6:fd:6d:c4:bc:f7:b9:79:62:6f:a9:95:47:eb:
5e:9e:13:60:e2:1d:33:eb:5e:ca:52:04:e1:7b:d8:
dd:0d:3a:d6:7d:35:af:87:7a:5f:1f:d2:34:f2:25:
38:47:97:14:b0:3f:42:c8:1e:c9:fe:3d:c6:41:25:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BC:49:D2:1B:2E:15:DB:28:DD:49:08:5B:CF:0F:7F:9F:18:8E:65
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/v7xJ0hsuFdso3UkIW88Pf58YjmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.67.43.0/24
62.140.11.0/24
213.244.141.0/24
213.244.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6e:d0:ec:65:6b:c2:a4:64:c8:ea:f8:16:eb:54:ee:f9:fc:
ca:72:dd:f0:76:ff:8f:c4:da:24:31:38:e2:93:0b:f9:f9:c2:
83:6c:61:12:08:67:40:5d:b7:9f:45:3d:b7:0d:d2:71:bc:14:
89:38:83:64:81:2f:b8:86:b7:86:9f:48:23:06:fc:40:cb:e0:
dc:c2:7d:6a:89:3f:26:71:93:20:10:dc:07:29:5d:57:ce:79:
47:49:5b:b6:ee:ce:63:a6:27:46:f8:92:13:0e:56:77:fe:65:
f5:67:d3:c6:08:ec:dd:bb:0a:b6:3a:97:7e:ae:f3:7a:00:4d:
44:c6:fb:e5:2b:17:7d:08:1e:1e:df:1c:a4:4a:cc:d9:d1:bb:
4c:c5:ff:35:75:38:c3:2d:cd:df:c8:43:fa:38:f0:95:95:83:
33:11:8a:0d:5f:c9:88:d1:91:eb:42:d4:7a:b9:4b:b5:ad:2b:
70:0b:a6:0c:b1:32:55:af:35:ed:75:e3:25:df:33:d2:d9:f5:
a3:33:af:f0:e2:bd:b9:42:17:03:f1:26:32:66:56:10:3c:a6:
28:3a:ad:4f:10:05:80:79:7f:de:94:28:f6:c7:b6:30:9c:73:
1c:d7:3b:3e:1c:5a:2b:d2:68:4a:e2:9f:06:3e:56:f4:1d:d1:
42:9d:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org