Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/OZDUOY-IwbG62KQ88uSoksfFAoQ.roa
File: OZDUOY-IwbG62KQ88uSoksfFAoQ.roa (raw, json)
Hash identifier: ccTJHwq91mOxS0CLwZgnCwBfsPISZsHY1D6Dqe5d2S0=
Subject key identifier: 39:90:D4:39:8F:88:C1:B1:BA:D8:A4:3C:F2:E4:A8:92:C7:C5:02:84
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 084A801C
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/OZDUOY-IwbG62KQ88uSoksfFAoQ.roa
Signing time: Sat 01 Jan 2022 16:04:05 +0000
ROA not before: Sat 01 Jan 2022 16:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207582
IP address blocks: 185.28.63.0/24 maxlen: 24
185.28.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139100188 (0x84a801c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jan 1 16:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3990d4398f88c1b1bad8a43cf2e4a892c7c50284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:55:45:95:0e:9c:7b:bd:93:f4:8e:2f:58:
41:23:65:9e:2a:0b:79:5f:1c:94:f2:16:4a:0f:c5:
b7:90:a3:83:9c:4d:45:9c:f0:2a:61:62:fa:7f:ad:
ad:dd:58:c9:1f:73:88:f6:12:cc:b2:7b:3d:a6:05:
a4:15:64:a6:fd:47:df:9d:0b:e6:cb:38:a2:3c:37:
8e:49:1d:10:b1:cc:5e:78:a4:a3:b3:46:2c:a9:cf:
ef:34:d5:7a:dc:f5:52:be:04:16:0c:42:6d:02:a4:
59:0d:dd:d9:7d:b7:dd:9f:96:3b:9d:a9:0b:4e:a0:
99:99:00:6a:70:cf:0c:ff:c7:6e:7f:54:07:85:d8:
ac:a2:09:b8:c1:a1:74:32:1c:18:b4:b2:61:8f:36:
6d:05:f8:4b:f6:ae:77:76:50:83:6a:83:cf:27:f0:
f4:41:5b:d5:6d:65:c5:24:f4:72:a4:ad:27:d7:3a:
b5:84:52:75:46:c7:de:77:39:d0:02:7c:5a:ea:2f:
1b:96:48:07:ae:7e:be:22:54:e3:26:eb:81:40:a9:
ae:1d:3c:18:5d:05:50:44:73:9a:33:53:a1:6c:81:
89:89:ab:16:47:bf:eb:8e:b2:69:dc:28:84:f5:1a:
98:eb:c2:b4:44:60:8d:de:7e:dd:50:4e:71:93:64:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:D4:39:8F:88:C1:B1:BA:D8:A4:3C:F2:E4:A8:92:C7:C5:02:84
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/OZDUOY-IwbG62KQ88uSoksfFAoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.62.0/23
Signature Algorithm: sha256WithRSAEncryption
78:c9:82:ce:0c:88:ea:bd:23:77:0d:7e:07:8c:9a:9e:0a:22:
ac:18:aa:72:d4:62:30:d7:03:18:4f:99:fb:02:af:bc:c5:f2:
86:47:0c:fc:b3:87:c0:31:37:bb:4d:5f:0d:97:a1:94:a3:f1:
d1:84:76:f9:73:06:cb:43:72:55:8e:05:c1:45:03:49:94:c0:
c1:d4:58:68:7f:73:6c:ba:80:59:c0:46:88:90:4b:1a:16:5e:
64:7d:22:50:ba:d9:fc:26:88:b5:1f:3f:aa:c9:05:6b:fd:05:
54:3b:c1:aa:1c:fd:fc:74:81:f6:a8:ce:22:fd:36:cd:ef:07:
af:21:7b:46:64:9d:df:92:fd:c7:81:6f:40:93:df:f5:d9:c8:
e9:72:e5:06:7f:20:1b:29:f2:d8:85:b6:ea:5e:3c:c3:06:f3:
85:bb:ce:93:7a:15:e8:c9:e7:01:59:d6:17:20:19:a4:e8:50:
d2:24:f5:54:9f:89:1b:ca:a3:d2:fd:7f:99:8c:f4:0f:81:e3:
bd:14:81:c7:7a:27:5c:9a:31:6f:62:8c:7f:a7:5e:52:52:b4:
5b:2a:f1:77:d1:24:71:0b:6e:fb:b6:e5:58:be:42:f2:d4:14:
55:7f:03:38:23:54:38:17:20:b2:3a:90:b3:54:c9:c1:5d:0c:
e6:c1:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org