Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/U3GKUW3pdSgCt6fxBxlsvAojUP4.roa
File: U3GKUW3pdSgCt6fxBxlsvAojUP4.roa (raw, json)
Hash identifier: 3f2eAiRFVjy+sit2AD4Z+hmav9vlFsZ7vK81D4bGbxo=
Subject key identifier: 53:71:8A:51:6D:E9:75:28:02:B7:A7:F1:07:19:6C:BC:0A:23:50:FE
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 018408C4E332C64C7E05DAD884EC3A65B7AB
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/U3GKUW3pdSgCt6fxBxlsvAojUP4.roa
Signing time: Mon 24 Oct 2022 06:53:51 +0000
ROA not before: Mon 24 Oct 2022 06:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202756
IP address blocks: 62.4.112.0/24 maxlen: 24
62.4.109.0/24 maxlen: 24
62.4.110.0/24 maxlen: 24
62.4.111.0/24 maxlen: 24
62.4.113.0/24 maxlen: 24
62.4.114.0/24 maxlen: 24
62.4.115.0/24 maxlen: 24
62.4.117.0/24 maxlen: 24
62.4.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:c4:e3:32:c6:4c:7e:05:da:d8:84:ec:3a:65:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Oct 24 06:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53718a516de9752802b7a7f107196cbc0a2350fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:02:f5:bb:52:0a:43:43:61:d6:8e:56:bb:
77:be:cf:e2:0c:a1:5e:74:5f:70:09:d8:ab:a6:04:
ed:15:d3:5b:66:34:b2:20:bb:18:a9:c0:ef:81:3c:
c4:fa:6d:fa:40:f1:28:d9:23:a0:8a:41:c8:f5:dc:
dd:5f:23:5d:78:b6:bc:b9:4d:81:0d:11:42:7d:29:
38:58:ec:a7:e4:8f:6c:48:cb:64:5a:0d:16:bc:cd:
d0:ae:28:08:d8:07:0c:9a:a3:f2:b3:cf:1a:fb:a6:
95:9b:82:f3:ca:a8:7d:f7:d8:fc:2b:c6:96:75:95:
35:ec:df:cc:ad:1e:69:73:b3:05:1f:9d:0c:e1:08:
4d:0a:b0:e2:ae:21:a6:35:1e:bb:2a:b2:a3:52:b1:
88:0c:4d:89:7b:47:99:54:36:00:2c:49:45:7a:89:
a3:d6:4a:07:cc:d9:e5:ff:b1:f6:bf:f9:80:d5:b3:
f7:6e:33:f8:d6:c0:76:a6:a7:59:d9:14:50:66:47:
1e:52:56:0a:98:99:82:ef:0c:32:32:8c:9e:a7:f5:
8b:f3:9f:e0:0d:04:cd:0d:ba:70:f9:09:a4:63:2f:
ba:cf:89:45:7b:f0:6c:c4:05:47:03:a7:42:8e:ac:
00:f4:d7:1a:3b:a4:33:b8:97:94:48:37:73:fe:ee:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:8A:51:6D:E9:75:28:02:B7:A7:F1:07:19:6C:BC:0A:23:50:FE
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/U3GKUW3pdSgCt6fxBxlsvAojUP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.109.0-62.4.115.255
62.4.117.0/24
62.4.119.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7d:25:10:2a:a3:82:7d:d9:ca:7a:e0:37:f4:85:16:89:e2:
2b:4c:b9:04:c7:a4:51:df:db:bd:f0:a3:0e:97:b8:39:4e:3e:
65:93:ee:8b:60:0d:fb:f6:47:9c:a7:c3:49:6b:80:c7:6e:c9:
88:9c:a7:e3:b2:bc:15:ca:52:29:fb:4e:6e:ce:3b:6a:e5:e7:
cf:b6:7b:04:c2:f2:47:2c:65:8f:ac:ee:1a:36:de:e4:12:01:
50:57:b9:32:83:4b:02:ab:0f:ae:a9:65:6c:4f:46:28:6a:0e:
8e:b2:3f:25:9c:57:de:7f:79:1d:07:25:27:9d:82:6e:0b:85:
6a:9b:86:e5:8d:e5:5f:4d:78:ec:72:45:9a:7d:d3:7d:09:2b:
f1:9d:2a:21:5d:3b:98:6f:05:d2:77:5f:bb:3d:40:5c:8b:a9:
4b:02:5a:57:9c:62:fb:2f:10:5c:56:b3:36:d9:e6:6b:0e:85:
58:3f:46:e7:7a:46:71:cf:4a:6e:95:ac:fc:d9:51:3f:dc:70:
f9:39:9e:40:b1:28:37:62:20:c1:fb:ce:a3:3e:a5:eb:ea:3a:
ae:93:d5:c0:9b:1f:70:b7:1c:97:c9:3c:3d:6d:73:af:3d:81:
8b:ca:2c:5f:c7:55:de:de:d0:5e:46:b6:42:68:76:70:71:7d:
26:98:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org