Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Om3kj6zOwYgdUDVcTgh7lmPNSA0.roa
File: Om3kj6zOwYgdUDVcTgh7lmPNSA0.roa (raw, json)
Hash identifier: N0zdDXpL4nQ4x3tW/vMhzoWlbhZ/BO/jt8e7+pjjfOs=
Subject key identifier: 3A:6D:E4:8F:AC:CE:C1:88:1D:50:35:5C:4E:08:7B:96:63:CD:48:0D
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02F8EBF7
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Om3kj6zOwYgdUDVcTgh7lmPNSA0.roa
Signing time: Tue 08 Feb 2022 18:58:00 +0000
ROA not before: Tue 08 Feb 2022 18:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 62.112.12.0/23 maxlen: 24
89.34.171.0/24 maxlen: 24
188.212.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49867767 (0x2f8ebf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 8 18:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a6de48faccec1881d50355c4e087b9663cd480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:70:ee:9e:0d:93:fb:13:96:1b:40:fc:f9:
54:84:dd:8c:21:35:b5:40:fb:01:f8:a6:1c:61:56:
6f:7b:b0:d8:50:a6:42:e4:40:bd:45:24:2d:d2:2d:
75:95:48:de:70:6f:9c:2e:56:65:c7:e3:95:8c:ec:
46:f4:09:b4:cb:db:e7:6c:99:6a:8b:7e:7d:90:59:
71:9b:19:9c:6f:3f:b9:41:70:e1:8a:bd:31:19:22:
55:3e:39:9a:5f:c3:ca:08:4c:32:28:e6:83:7d:99:
da:83:80:cc:78:ee:b6:fb:a2:70:3d:1e:30:88:9a:
2f:53:70:47:e2:ab:e1:96:02:7a:bd:53:29:5d:23:
10:b5:a7:ca:50:12:ac:ad:2f:6c:47:45:62:d9:91:
c3:a0:a1:ab:03:75:97:73:5c:b1:97:a9:01:60:85:
fe:49:e4:6c:40:c6:8e:ed:48:67:72:c4:09:ad:3d:
1a:ea:bf:a3:97:2c:01:90:a5:51:a2:21:39:76:8e:
1c:3a:30:08:95:f7:0e:06:9b:07:53:12:3c:6d:c2:
d6:2a:d1:ae:0e:3f:ce:49:05:08:cd:ef:5d:91:27:
24:06:4d:ce:70:e4:29:6d:d2:ee:13:5e:75:da:e1:
5a:22:e7:50:f4:44:10:b7:fd:ee:42:84:03:f6:c1:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:E4:8F:AC:CE:C1:88:1D:50:35:5C:4E:08:7B:96:63:CD:48:0D
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Om3kj6zOwYgdUDVcTgh7lmPNSA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
89.34.171.0/24
188.212.104.0/22
Signature Algorithm: sha256WithRSAEncryption
17:82:b7:71:72:57:09:2a:39:70:3a:9f:96:f3:9a:3f:2e:70:
d3:04:e2:46:4d:d3:6c:6d:54:e8:62:b7:66:76:d3:03:5b:90:
27:3a:6f:4f:25:f7:24:6b:1e:f8:00:63:bd:5e:84:28:40:c2:
91:6d:08:df:8f:e9:9b:09:e8:15:91:f2:65:92:95:6a:ab:f5:
60:57:20:f0:87:a8:5d:25:dc:e8:be:28:cd:31:1d:22:16:57:
dc:fa:1e:6c:26:d4:ce:9a:da:67:ac:65:3f:a2:c5:6d:7e:33:
34:a0:7e:50:7e:24:c0:fe:f0:8d:bc:a7:ec:b5:8b:c9:01:84:
6b:fe:1a:0d:cd:65:58:11:38:42:34:06:64:35:47:9c:8b:d3:
2d:ae:4c:a2:64:3a:e3:ab:9e:3f:57:6d:0d:4e:8a:7e:8a:35:
f6:8c:01:c5:80:32:81:99:c8:d5:04:a7:78:c6:cf:0c:50:ec:
b4:3d:8f:c6:13:c0:dc:b5:4d:b6:08:ba:24:04:fd:a6:39:cb:
ff:93:5f:cd:f0:05:ed:2b:e7:34:de:38:9f:5e:1c:77:0a:ef:
9a:a2:65:d3:e5:a9:15:21:20:99:d9:c3:3d:8f:00:74:ac:ee:
08:8b:2a:8e:8b:34:84:9c:1e:f8:99:14:a8:cc:1b:38:58:ec:
15:35:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org