Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/qHaEhhroUxJQj2UYyr5pWZAiyDU.roa
File: qHaEhhroUxJQj2UYyr5pWZAiyDU.roa (raw, json)
Hash identifier: GbqSJ76AEaAoRYlJiUPKeT3sjWI9ubWQVmO9uetrc8g=
Subject key identifier: A8:76:84:86:1A:E8:53:12:50:8F:65:18:CA:BE:69:59:90:22:C8:35
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 17ED261E
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/qHaEhhroUxJQj2UYyr5pWZAiyDU.roa
Signing time: Sat 01 Jan 2022 09:53:15 +0000
ROA not before: Sat 01 Jan 2022 09:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202756
IP address blocks: 62.4.112.0/24 maxlen: 24
62.4.109.0/24 maxlen: 24
62.4.110.0/24 maxlen: 24
62.4.111.0/24 maxlen: 24
62.4.113.0/24 maxlen: 24
62.4.114.0/24 maxlen: 24
62.4.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401417758 (0x17ed261e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 1 09:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a87684861ae85312508f6518cabe69599022c835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:e2:c7:c5:04:9d:9e:de:27:16:2d:5e:4a:
7d:8a:b8:61:a4:e0:48:b3:6a:f9:fe:0c:a9:8e:9b:
43:52:2b:b9:ff:16:11:27:db:6c:4b:1c:d7:ad:83:
29:7d:4d:3b:47:3d:db:d2:9b:45:05:d8:d2:58:3d:
8a:e3:64:d4:a1:fa:ce:2c:1f:3c:6b:8b:6a:8b:62:
2c:30:e9:8b:49:c3:9c:cb:f9:eb:cd:3b:55:e0:14:
b8:80:e0:64:15:ec:d4:d9:66:a6:2b:2d:be:a9:92:
d2:e9:d9:d6:29:62:c7:fe:cc:bb:73:19:c8:6d:44:
eb:36:e2:38:8d:4f:ad:b2:22:be:7f:6d:8a:1f:14:
76:b6:5a:c9:c3:51:ce:dd:76:40:e6:40:a4:7d:6f:
62:ba:5e:cc:fe:8f:9e:c6:2b:e2:2c:06:0c:38:ae:
02:11:42:e2:8f:24:8c:b7:53:21:af:34:ee:37:15:
37:00:7f:b6:08:06:7d:0e:03:e9:fc:47:da:5b:50:
a4:36:a7:a3:09:94:f5:2b:79:df:15:d9:01:96:f2:
58:c9:a6:86:a0:ff:4b:20:52:c7:68:b0:66:6c:7b:
6b:9d:b6:d6:69:99:77:fb:d4:f5:34:e3:c5:15:52:
a0:46:0a:8d:3f:29:38:ee:f7:2c:85:27:81:07:3c:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:84:86:1A:E8:53:12:50:8F:65:18:CA:BE:69:59:90:22:C8:35
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/qHaEhhroUxJQj2UYyr5pWZAiyDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.109.0-62.4.115.255
Signature Algorithm: sha256WithRSAEncryption
9d:77:00:09:45:63:54:c8:70:8e:08:88:cb:5e:8e:ce:df:5e:
8d:1a:b1:84:ab:96:d0:3e:1b:b3:15:28:53:82:2a:30:ec:28:
28:57:39:5b:c4:4d:4b:0e:20:68:f0:38:0f:6a:aa:65:49:05:
d4:3a:78:2d:6e:3b:c1:c8:93:a7:5e:f8:34:24:d8:ad:59:4e:
90:c5:f9:83:cd:4e:14:f3:50:7d:b5:7a:01:e7:08:c9:1d:91:
b0:46:9f:7c:c5:08:53:c5:6c:4f:0b:cd:ef:af:b8:fb:cf:79:
93:e9:25:45:f2:c0:65:a6:5d:6d:43:09:2d:f5:e3:3a:de:37:
a8:d2:60:40:be:f7:23:31:d5:e4:eb:ed:2f:34:76:f8:96:2c:
8e:e7:d2:fa:ba:6f:66:32:99:2a:d5:85:da:60:97:7f:a7:9b:
9c:2e:14:e1:d7:1a:69:e9:a0:9f:53:b4:63:d6:66:40:53:a6:
ca:9a:ab:b5:79:2f:4a:21:37:e0:dc:03:e2:17:14:16:89:76:
45:bb:0f:cf:8f:79:41:ad:25:bd:dc:cb:e4:b7:f9:ed:2a:26:
28:ea:69:ea:d9:a4:a0:a4:32:a7:6b:bf:7a:52:50:db:5f:bb:
fc:4d:d1:25:2a:91:ba:a2:bb:b1:a8:23:e1:bd:7e:77:17:21:
e7:7f:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-fra.rpki-client.org