Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/DvJMWPc0EQoyad58j1iGWm427zs.roa
File: DvJMWPc0EQoyad58j1iGWm427zs.roa (raw, json)
Hash identifier: Ud5xMhkxkW87HgyPltSq7jT5lucMNiAhXKT0oAmsr7Y=
Subject key identifier: 0E:F2:4C:58:F7:34:11:0A:32:69:DE:7C:8F:58:86:5A:6E:36:EF:3B
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 17ED9766
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/DvJMWPc0EQoyad58j1iGWm427zs.roa
Signing time: Sat 01 Jan 2022 09:53:16 +0000
ROA not before: Sat 01 Jan 2022 09:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206718
IP address blocks: 62.4.108.0/24 maxlen: 24
62.4.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401446758 (0x17ed9766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 1 09:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef24c58f734110a3269de7c8f58865a6e36ef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:10:5b:d0:25:b1:35:2b:e9:98:52:82:83:
4a:a2:60:bf:1e:be:0f:71:a2:01:25:9a:1c:1c:16:
09:1c:b5:bd:31:e8:8e:23:7a:71:69:56:8c:e5:40:
3d:fc:f5:b1:14:d2:99:db:eb:16:65:4d:38:27:8f:
4e:ba:50:70:c5:d7:60:26:36:4a:5e:12:6f:9e:04:
82:92:42:e6:72:95:04:c9:b8:74:f6:9a:3c:fb:6a:
e3:ca:44:20:2d:e4:5e:b7:4e:ae:87:36:f6:b0:dc:
eb:91:d1:64:9e:a1:e6:f6:1f:d1:69:e0:10:6f:99:
fe:a5:8d:a0:bd:8b:73:30:bd:b3:b3:38:8e:a0:27:
58:eb:c7:9a:14:1c:b2:4c:f0:34:fa:fc:83:b5:9a:
6b:81:60:ba:93:61:e8:ec:13:eb:96:14:83:0f:ec:
fb:0f:a0:04:6a:3e:8b:35:79:96:a0:87:c1:96:46:
5a:75:7b:72:63:d4:1b:10:72:d7:85:49:44:51:c9:
5f:56:df:67:9a:91:7c:dc:eb:d5:0f:ac:60:e7:bd:
7e:5d:57:a3:63:7a:d2:74:16:28:8a:dc:df:f0:06:
c2:fa:56:c9:af:75:2d:55:5d:34:bf:79:5e:fc:eb:
19:0f:67:41:e3:52:ed:6c:8e:95:ae:f0:0a:28:35:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F2:4C:58:F7:34:11:0A:32:69:DE:7C:8F:58:86:5A:6E:36:EF:3B
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/DvJMWPc0EQoyad58j1iGWm427zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.108.0/24
62.4.116.0/24
Signature Algorithm: sha256WithRSAEncryption
77:dc:d4:65:21:7e:39:58:87:b2:bd:39:1e:75:a9:11:8d:49:
13:f8:86:23:a7:6b:47:34:de:35:d2:ca:6e:75:b0:ba:e1:46:
76:38:ec:c6:78:8c:10:8d:3e:6e:96:dd:7f:5f:35:54:b6:ab:
e7:19:51:96:d4:0b:7a:e5:a5:ac:a6:90:08:3b:35:82:99:92:
d1:2d:84:86:2e:78:21:8f:80:0c:7f:ab:4e:1f:be:bc:36:14:
72:e8:4a:d2:c1:98:3e:8a:be:7f:4a:a4:a6:7f:2c:a6:9a:4c:
6e:c9:89:2c:c8:7d:11:9e:9a:2a:54:4a:dc:cd:7d:6e:8b:a9:
3d:61:f7:a9:e4:86:fb:e9:40:42:dd:1a:19:5a:b8:3a:4d:13:
01:27:37:48:fc:be:58:49:5c:43:20:cf:4c:ec:ec:37:83:6e:
19:d8:0c:00:11:7a:ae:ae:35:3d:24:48:5b:92:6e:eb:23:a1:
0b:d2:68:78:5a:c3:fe:2b:da:67:24:10:98:44:15:c8:94:0e:
50:19:c9:f8:34:dc:38:3a:f1:ef:80:64:64:2d:ce:46:7f:3e:
e2:ca:e1:26:a6:de:5e:0e:90:44:ae:22:71:62:0a:f2:8e:f2:
66:a3:22:96:fb:5c:b4:c4:68:d7:27:14:91:fc:9d:4b:73:96:
47:20:bd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org