Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/Sa95EeZozAwt_HfzsNESLbCCC4c.roa
File: Sa95EeZozAwt_HfzsNESLbCCC4c.roa (raw, json)
Hash identifier: xM0dfm6E4dXh6vpmnIxvEscClB/qphXEhElO552mx58=
Subject key identifier: 49:AF:79:11:E6:68:CC:0C:2D:FC:77:F3:B0:D1:12:2D:B0:82:0B:87
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01843D161DAA57737B35BC974E55AED9E689
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/Sa95EeZozAwt_HfzsNESLbCCC4c.roa
Signing time: Thu 03 Nov 2022 10:42:50 +0000
ROA not before: Thu 03 Nov 2022 10:42:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3254
IP address blocks: 62.244.0.0/18 maxlen: 18
62.244.48.0/22 maxlen: 22
193.193.192.0/19 maxlen: 19
193.193.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:16:1d:aa:57:73:7b:35:bc:97:4e:55:ae:d9:e6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Nov 3 10:42:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49af7911e668cc0c2dfc77f3b0d1122db0820b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:fe:37:8c:a8:2f:cf:5c:36:80:03:c2:4a:
17:f8:36:5c:72:cf:9b:d2:7e:75:35:77:a9:c5:10:
47:c2:d7:fb:10:07:1e:72:a3:ae:a2:55:70:66:a5:
f9:75:6f:1d:a0:e2:61:46:1f:04:6f:f8:0a:13:ad:
1c:ab:86:a7:c8:ba:68:c9:d9:71:4d:25:c5:74:1b:
67:b5:32:7b:5e:ec:4c:68:48:db:5c:fc:34:1f:5f:
e5:bb:76:a0:64:95:f6:c9:dc:f3:c6:d9:5e:d7:4e:
15:e9:b3:72:10:f7:2c:35:dc:c2:72:69:ce:18:68:
88:28:a9:c8:b9:c4:11:ff:dd:5a:de:63:12:b9:89:
c4:3a:d0:aa:b3:96:ea:be:28:0b:9a:8b:99:19:86:
b8:a5:1f:50:3c:74:80:68:6b:f9:43:f1:8e:1a:30:
d0:ff:7a:46:27:13:1b:0e:f4:b2:c0:0c:2f:78:ac:
b4:19:3e:cd:fc:8c:80:a6:10:34:fd:45:1c:0c:86:
30:a5:34:f6:b4:7b:f8:0f:ac:3f:24:e6:0e:d0:b1:
ca:70:2f:e1:d5:e4:33:a4:30:89:f8:5b:5b:14:28:
62:02:0f:8a:27:c4:2c:91:2f:fd:a4:8e:49:d1:5d:
44:0d:36:07:26:27:06:34:d6:1d:3d:4c:ad:88:a9:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:79:11:E6:68:CC:0C:2D:FC:77:F3:B0:D1:12:2D:B0:82:0B:87
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/Sa95EeZozAwt_HfzsNESLbCCC4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.0.0/18
193.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
89:2d:52:ff:70:c1:f9:58:97:5e:bf:70:dc:59:98:43:a8:a6:
0d:6b:f8:cb:4e:10:39:4a:27:dc:31:ba:d8:57:d9:a1:57:df:
2f:9b:7b:8c:fd:92:08:2a:79:f0:67:d7:a6:7a:f2:3c:2a:8f:
89:4e:6d:7a:11:73:a6:b0:ab:5f:55:57:1e:71:f7:87:79:fa:
8b:9b:e9:a8:4f:a1:07:d6:ed:08:88:b0:c0:3e:3f:46:1c:5a:
fa:36:2c:ad:6e:c2:9d:b9:d9:b2:f1:3e:28:f4:e6:90:de:d5:
58:53:ac:a9:69:be:cc:e9:9e:78:3e:82:03:0e:20:76:97:91:
fb:38:da:f1:28:d8:16:b6:d5:fd:62:14:01:9a:b9:1b:eb:70:
e6:ba:25:fb:81:f2:19:4e:67:ef:5f:d7:b3:84:a2:49:a7:81:
4e:83:95:ff:35:b0:4b:2e:1c:14:ae:bb:57:0a:b5:16:16:10:
69:0a:bc:79:39:d7:9c:30:cf:72:b8:d2:12:5e:26:ef:0b:85:
23:f0:3d:71:44:f9:6c:3f:eb:44:68:d2:ff:fa:7f:9e:4c:9c:
c3:91:b1:70:b3:6c:e5:26:9e:22:b9:32:63:b4:0e:bd:b0:39:
07:7d:41:c9:de:0e:55:81:ca:e5:9b:2f:b2:cc:f7:40:f7:78:
b0:a9:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:23 2023 by rpki-client on console-fra.rpki-client.org