Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/EhUkmQETpJ3jeKIsUtAkISvBS0U.roa
File: EhUkmQETpJ3jeKIsUtAkISvBS0U.roa (raw, json)
Hash identifier: iEenglfvaup5ujleFJQHwJpsNwWZrAcYMSIqkSHqvXE=
Subject key identifier: 12:15:24:99:01:13:A4:9D:E3:78:A2:2C:52:D0:24:21:2B:C1:4B:45
Certificate issuer: /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial: 010E583E
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/EhUkmQETpJ3jeKIsUtAkISvBS0U.roa
Signing time: Tue 08 Feb 2022 15:43:17 +0000
ROA not before: Tue 08 Feb 2022 15:43:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 62.201.43.0/24 maxlen: 24
62.201.44.0/22 maxlen: 22
62.201.48.0/20 maxlen: 20
62.201.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17717310 (0x10e583e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Validity
Not Before: Feb 8 15:43:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=121524990113a49de378a22c52d024212bc14b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:bc:98:71:b6:ec:4f:f1:75:91:c0:10:bd:
48:7e:68:01:67:cd:de:27:5e:49:e9:45:ba:df:11:
dc:34:62:e6:17:37:aa:b0:4b:7b:a4:f0:ad:b5:cb:
7c:fe:b5:9a:84:7e:02:6f:89:01:fb:90:43:fc:4a:
81:42:0f:a4:83:4f:1c:77:ea:4e:b8:f8:71:e9:49:
e8:f1:1e:fe:7c:82:30:b0:91:31:e4:66:7a:37:55:
b9:7b:73:0f:2a:05:39:41:50:91:c3:b5:7c:60:df:
18:4a:8d:47:13:86:15:e7:cd:d3:14:14:8c:d6:36:
2d:d9:9c:8d:72:6e:f0:bc:f7:8a:03:89:bd:8d:0d:
43:e1:79:7a:2a:0e:0e:69:7b:86:ae:b3:ac:ea:8f:
9b:99:8e:6d:9c:03:25:41:86:3b:1c:48:74:76:2e:
6d:37:65:b9:4b:7a:38:e8:cb:6c:fb:7c:3e:fb:65:
30:b1:37:67:e3:8a:39:bb:00:87:95:38:17:f4:69:
a2:89:b7:04:1c:fb:b2:a8:d2:8c:83:31:0a:d7:82:
5b:1c:48:de:79:db:f2:1c:19:ec:59:ee:85:bf:fa:
44:92:30:f9:1b:09:1f:35:f3:41:98:7b:68:fe:2c:
f1:43:ba:88:65:31:63:09:48:5d:8c:ea:0e:0f:ca:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:24:99:01:13:A4:9D:E3:78:A2:2C:52:D0:24:21:2B:C1:4B:45
X509v3 Authority Key Identifier:
keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/EhUkmQETpJ3jeKIsUtAkISvBS0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.43.0-62.201.63.255
Signature Algorithm: sha256WithRSAEncryption
41:9c:e4:ed:e9:f0:2e:cb:c9:91:d4:22:61:eb:c4:4e:58:51:
a3:f0:8a:52:b3:13:47:1c:cc:52:05:cb:38:dc:48:37:24:69:
a5:af:08:2f:d3:bf:c2:82:c0:8e:a9:41:ca:32:b3:52:02:ff:
58:f6:fd:81:06:9a:17:78:82:93:10:1e:e2:3f:17:7e:e0:a3:
69:f1:fc:20:3c:5b:b9:e4:f5:9a:74:59:70:4a:e8:6e:cb:46:
9d:09:f7:2c:21:41:2f:d5:9c:b9:03:ac:07:db:0a:13:4f:9d:
d5:5d:95:29:2d:17:c3:2c:cb:33:96:92:56:93:76:3f:10:fb:
70:0d:81:a8:59:0e:a1:e5:39:7f:76:b5:a3:21:59:b0:e9:14:
50:f4:85:a5:ec:3d:88:08:56:2a:09:f4:00:e9:7a:0f:65:72:
49:3c:3d:d4:64:7b:f3:5c:5e:ad:7b:60:d7:84:1d:25:20:5c:
12:b2:d4:bf:26:17:f9:73:00:0a:9e:47:a0:ef:64:f2:d5:ff:
31:29:02:49:5f:f2:0b:cd:e2:6c:31:4d:5d:4c:19:99:3b:35:
e3:f2:ee:8f:6b:19:3d:f3:18:ff:bd:a9:4c:cf:5c:55:ea:1d:
09:82:0b:04:9b:b1:3b:ed:1d:47:30:56:64:82:3a:09:1d:ab:
af:77:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:02 2023 by rpki-client on console-fra.rpki-client.org