Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/0QUDlegY8gUkkLl_jKWI9DeQ8fk.roa
File: 0QUDlegY8gUkkLl_jKWI9DeQ8fk.roa (raw, json)
Hash identifier: ZAwTvnpuMkqJJDRgYmRfEkwkjUGtC7oYZ+R25fB7tAk=
Subject key identifier: D1:05:03:95:E8:18:F2:05:24:90:B9:7F:8C:A5:88:F4:37:90:F1:F9
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 0183787CD011C57C1658FA4C145FF73394F6
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/0QUDlegY8gUkkLl_jKWI9DeQ8fk.roa
Signing time: Mon 26 Sep 2022 06:29:49 +0000
ROA not before: Mon 26 Sep 2022 06:29:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24580
IP address blocks: 62.81.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:78:7c:d0:11:c5:7c:16:58:fa:4c:14:5f:f7:33:94:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Sep 26 06:29:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1050395e818f2052490b97f8ca588f43790f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:45:6c:0c:d3:7a:3b:4a:52:ea:d3:b7:91:
fb:93:43:35:45:f9:1f:b9:db:23:75:18:81:13:6b:
69:65:d3:14:b0:bc:09:e5:ff:9f:d6:e2:22:0a:55:
1e:6c:52:f7:14:a8:3f:49:d0:a7:e1:2f:1b:39:32:
6b:49:0b:c1:e6:76:1b:6f:90:c7:e8:b6:5a:d9:f8:
20:7b:71:a1:c5:22:57:03:cd:99:73:91:b7:1f:05:
b1:c4:94:e4:44:fb:3b:30:ec:75:be:3f:6f:8f:f8:
a6:eb:63:38:43:41:d0:74:fa:e2:fe:95:83:aa:23:
ca:29:ea:7e:b1:12:c4:1e:16:8f:18:e0:a0:a7:c1:
df:15:e5:16:3a:f7:7e:5f:e7:e1:3a:7b:5e:d2:5d:
7c:01:e5:a2:27:07:ce:9d:8b:2b:0b:87:82:0d:c4:
63:42:ba:c6:ea:a4:df:f9:d2:17:1c:5c:8c:db:3f:
02:23:8f:be:51:34:ca:21:bd:39:1b:f2:99:a9:cd:
fb:cc:4c:3f:e2:cb:84:92:d9:61:da:4e:3b:a2:7d:
46:2b:ba:21:31:c5:84:35:81:da:8e:7d:02:79:b2:
39:83:af:c4:31:6f:c4:d0:3f:13:44:a3:a7:1d:c6:
fb:37:5a:44:bc:d7:42:c0:f6:a8:94:81:60:40:81:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:05:03:95:E8:18:F2:05:24:90:B9:7F:8C:A5:88:F4:37:90:F1:F9
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/0QUDlegY8gUkkLl_jKWI9DeQ8fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.81.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4d:5f:d3:33:8b:c8:a8:de:c8:bb:08:92:ce:3e:ff:fa:f6:
87:60:56:78:1d:d3:bd:d2:25:9b:0c:47:bc:6f:9a:a1:6f:e7:
40:9f:56:7b:cb:a5:f1:14:a6:25:6a:46:89:3d:bd:cf:ae:d2:
32:4f:84:19:ac:8d:e9:c7:10:b4:d6:06:6c:51:0a:89:a4:17:
ed:52:7f:3c:78:0d:2c:d3:93:b0:b1:80:47:d4:09:8c:ae:5a:
24:e9:13:2e:21:8b:05:a7:69:45:4b:c4:dc:22:69:ce:56:62:
b9:20:b7:a9:84:d8:95:08:e2:cd:3c:85:1f:53:15:b0:2c:d2:
25:39:54:6a:89:33:e3:96:cc:aa:6f:05:f6:2a:17:d6:51:8a:
ba:c6:ee:66:56:99:be:19:e8:f2:48:d0:81:cf:cd:b7:91:b0:
34:90:a0:80:76:da:21:20:9a:d4:14:46:4e:27:8e:ab:19:34:
00:62:21:1a:42:38:57:32:f2:ea:c1:79:73:d4:56:01:56:39:
0f:4f:16:71:3f:3a:63:d3:00:38:e3:5a:74:14:c0:77:fa:1d:
2a:0d:17:3c:17:6f:4f:a1:27:c2:d9:3d:6a:53:ab:de:ff:77:
31:16:e9:4f:cf:2a:e6:9e:84:1a:f0:00:b1:91:0d:30:66:4b:
60:f3:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-fra.rpki-client.org