Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/i63e1u-zW8TCRqZ3MM7kEwf10bI.roa
File: i63e1u-zW8TCRqZ3MM7kEwf10bI.roa (raw, json)
Hash identifier: CUfuacvmdKGttd2poEJk2kXtLtHGZ/Hn5ibG1iBw958=
Subject key identifier: 8B:AD:DE:D6:EF:B3:5B:C4:C2:46:A6:77:30:CE:E4:13:07:F5:D1:B2
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 0184C3D0A218665A85A1E34F04691FD89226
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/i63e1u-zW8TCRqZ3MM7kEwf10bI.roa
Signing time: Tue 29 Nov 2022 14:35:40 +0000
ROA not before: Tue 29 Nov 2022 14:35:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39719
IP address blocks: 62.177.24.0/21 maxlen: 21
62.177.24.0/24 maxlen: 24
62.177.30.0/24 maxlen: 24
62.177.29.0/24 maxlen: 24
62.177.25.0/24 maxlen: 24
62.177.31.0/24 maxlen: 24
62.177.26.0/24 maxlen: 24
62.177.28.0/24 maxlen: 24
62.177.27.0/24 maxlen: 24
81.23.92.0/22 maxlen: 22
81.23.80.0/20 maxlen: 22
81.23.84.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
81.23.88.0/22 maxlen: 22
2a12:1d40:1::/48 maxlen: 48
2a12:1d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:d0:a2:18:66:5a:85:a1:e3:4f:04:69:1f:d8:92:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Nov 29 14:35:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8badded6efb35bc4c246a67730cee41307f5d1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:81:4c:0a:a6:48:4f:dd:4d:aa:c2:fd:c4:
85:f9:19:c2:d6:7f:c2:68:5e:c2:4e:0f:0f:8e:90:
4c:45:e5:51:89:32:f9:fe:bf:47:17:5f:ba:59:64:
16:f7:f1:d5:36:7a:02:3e:6c:66:10:5d:5a:f2:33:
e3:9b:c1:40:91:4d:85:7a:26:18:38:bd:cf:e8:10:
a0:ed:2e:1a:13:c1:17:aa:b0:71:c0:ca:f5:d1:82:
d9:b0:74:23:81:9c:7c:31:02:82:11:78:14:5c:f4:
14:c2:cb:97:a7:e2:79:ca:1b:81:fc:19:b4:71:39:
b8:50:f2:51:43:45:98:1c:1c:20:a6:66:91:1c:e0:
f1:93:4f:3c:23:ec:aa:b8:75:bb:85:e8:58:bc:c3:
3c:34:34:bf:ea:48:b2:72:38:9c:ff:0d:cb:3d:95:
4a:72:e4:11:08:7d:b6:f1:54:f9:18:bc:2e:65:6f:
13:16:d2:4c:bb:08:f3:77:cf:f8:10:72:26:24:12:
9d:59:50:b5:17:41:36:ad:0e:9c:5a:2c:c1:80:5f:
95:67:1f:18:95:ee:0c:aa:40:c0:e5:ce:84:be:5a:
20:8b:40:c3:c0:97:b6:e8:08:97:63:b9:e6:01:af:
b6:f3:2c:77:22:75:3a:93:25:6e:32:37:ce:ef:fd:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:DE:D6:EF:B3:5B:C4:C2:46:A6:77:30:CE:E4:13:07:F5:D1:B2
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/i63e1u-zW8TCRqZ3MM7kEwf10bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.177.24.0/21
81.23.80.0/20
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
c2:b4:96:f8:94:9e:ce:a5:fe:fc:30:af:1b:b9:c4:e8:96:9a:
87:f9:9d:c2:bd:e3:38:96:91:c2:e5:22:61:73:8c:e2:32:e0:
7a:01:cc:b9:ca:84:68:e3:6e:8c:92:fa:09:74:55:73:e8:71:
b4:ba:dc:4a:ba:6a:2e:88:0d:bc:16:bf:fa:c9:de:ed:7d:8d:
6f:15:5e:c8:ae:e2:0b:79:71:3f:d2:13:13:ea:81:cc:87:0f:
ba:9d:57:ef:44:35:09:7b:9e:64:03:cf:72:27:da:b0:3d:1e:
b1:cf:54:de:3e:e9:f2:3a:16:eb:b4:84:5d:29:cd:16:76:07:
d8:ae:f5:27:09:9d:d5:67:5b:69:c7:02:70:e7:e8:85:c5:f8:
2b:f8:67:a7:21:17:7a:a9:7b:0b:90:83:df:6c:7a:16:e2:26:
be:68:41:ce:5e:98:4d:b4:51:ac:ba:c2:2b:0a:c8:b2:42:d8:
29:59:9d:28:7f:7e:4d:95:07:e2:00:be:fd:8b:8a:5c:f6:55:
09:40:6b:60:eb:02:5a:5b:42:1f:d6:3e:13:52:07:97:a2:d1:
02:fc:18:e0:c2:67:6b:35:98:e8:7f:62:21:a7:c3:18:f5:ff:
94:20:e3:ac:83:b0:7c:7c:3b:cc:23:72:68:68:38:c0:46:1a:
c2:67:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:55 2024 by rpki-client on console-ams.rpki-client.org