Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/j9D15gvOIrCGBwbUCWUVLtRv-8o.roa
File: j9D15gvOIrCGBwbUCWUVLtRv-8o.roa (raw, json)
Hash identifier: BHPIFgR37OHEvTuo6aoIX4tEY5dwshNAE4xBSKijTPY=
Subject key identifier: 8F:D0:F5:E6:0B:CE:22:B0:86:07:06:D4:09:65:15:2E:D4:6F:FB:CA
Certificate issuer: /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial: 018515FE6B335D36D1B6D5C11826891D4E19
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/j9D15gvOIrCGBwbUCWUVLtRv-8o.roa
Signing time: Thu 15 Dec 2022 13:34:33 +0000
ROA not before: Thu 15 Dec 2022 13:34:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8829
IP address blocks: 62.106.0.0/19 maxlen: 19
45.11.84.0/22 maxlen: 22
62.106.32.0/20 maxlen: 20
2a03:c80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:fe:6b:33:5d:36:d1:b6:d5:c1:18:26:89:1d:4e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
Validity
Not Before: Dec 15 13:34:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fd0f5e60bce22b0860706d40965152ed46ffbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:60:60:16:51:3e:ec:7a:ab:e4:a9:f5:c6:
24:1c:a0:e2:42:04:a1:7e:8e:f1:7a:fd:b9:14:0c:
04:77:d2:8a:e3:be:7c:15:d1:08:36:3a:b9:de:6b:
94:a6:ab:2c:cf:f3:24:d9:a1:42:db:0c:22:f4:5c:
99:46:30:63:9f:5f:b1:3f:93:a5:c8:6b:2a:a1:4f:
c2:19:ec:6e:e7:ab:b3:fe:0b:a3:27:80:91:2d:9c:
66:b5:0f:0b:6b:83:9d:9b:c8:d7:49:b5:b2:a3:2b:
8d:cb:54:88:dd:bd:1b:3e:ec:17:fe:78:b4:78:f9:
43:00:3b:26:27:12:03:34:3f:04:1d:d7:38:c9:d5:
ee:e7:b0:59:3b:46:ad:6d:38:10:2e:38:6a:1e:7c:
60:26:8b:6c:a7:aa:5d:07:c6:ef:4b:14:78:02:23:
4c:57:7a:12:de:cc:19:a2:8a:13:44:c9:b9:15:f7:
31:18:1e:8a:b4:d9:59:a0:9b:af:89:0c:de:57:08:
4a:37:24:6b:36:c3:3c:4c:0a:cb:b5:74:3e:cc:9e:
db:96:63:48:d5:4d:c7:2a:3f:11:47:b4:5b:c5:d2:
e1:b6:e3:61:6c:6f:88:60:51:55:e0:e7:ae:1d:20:
3d:8b:9f:b8:7d:5b:f8:d7:8a:4f:15:b5:fa:45:53:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:F5:E6:0B:CE:22:B0:86:07:06:D4:09:65:15:2E:D4:6F:FB:CA
X509v3 Authority Key Identifier:
keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/j9D15gvOIrCGBwbUCWUVLtRv-8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.84.0/22
62.106.0.0-62.106.47.255
IPv6:
2a03:c80::/32
Signature Algorithm: sha256WithRSAEncryption
21:03:07:9b:f6:3a:1b:21:d2:48:3d:42:93:fa:ba:31:1f:94:
4f:31:4c:dc:63:10:ac:3f:66:6c:f8:7c:8d:05:9c:e4:bf:2e:
62:8a:36:9c:b7:f9:da:ca:8e:b4:fa:31:1e:eb:c7:5d:68:95:
63:8e:87:f1:aa:6f:67:2b:2d:80:02:22:65:e0:2c:b3:3c:1c:
82:a5:51:54:88:ed:6f:69:9f:37:b0:9b:59:2a:90:5f:9b:ee:
05:d8:18:17:32:89:a0:18:5a:f0:cd:b0:18:64:cb:86:97:de:
bb:41:5b:f3:90:03:66:f9:3e:92:36:7b:3b:6c:34:36:af:50:
0f:e5:96:1d:c2:e5:3c:9a:b3:05:37:f2:42:3d:dd:84:00:94:
2d:2e:43:ca:81:b5:e0:0e:df:ff:15:46:5f:c7:97:66:37:0a:
87:ca:a4:85:c9:9a:77:58:fe:d7:e9:97:12:e8:3b:5d:4e:40:
fb:9d:a8:b6:33:99:a5:c4:35:68:15:9d:0b:31:c6:74:55:5f:
71:17:45:be:97:5b:41:74:23:6c:9c:6a:4c:7e:d2:f6:47:89:
55:df:8e:cc:a9:ad:4b:48:8b:02:78:a4:95:ae:5a:72:9a:de:
ed:dc:72:12:cd:61:40:62:7c:b7:3c:ce:df:4a:d8:d2:e4:70:
0a:34:d2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:20 2023 by rpki-client on console-ams.rpki-client.org