Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ozc5kB-ojUZtCHyCQn0xuJwZdTw.roa
File: ozc5kB-ojUZtCHyCQn0xuJwZdTw.roa (raw, json)
Hash identifier: aMivnONumsh2jCXgU/woaaUQhWcX9s4ZVrI2xNtFS3c=
Subject key identifier: A3:37:39:90:1F:A8:8D:46:6D:08:7C:82:42:7D:31:B8:9C:19:75:3C
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0184E0DF1C2BC5EF645E2F7EFC651AF47EBF
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ozc5kB-ojUZtCHyCQn0xuJwZdTw.roa
Signing time: Mon 05 Dec 2022 06:00:28 +0000
ROA not before: Mon 05 Dec 2022 06:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 62.112.30.0/24 maxlen: 24
89.34.171.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e0:df:1c:2b:c5:ef:64:5e:2f:7e:fc:65:1a:f4:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Dec 5 06:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a33739901fa88d466d087c82427d31b89c19753c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:ea:ca:f0:20:06:6c:1c:bf:b1:18:3f:60:
46:42:d8:6f:3a:fc:ed:69:dc:37:1d:e6:e5:88:5d:
08:ad:45:72:a7:78:0d:a5:5b:8d:d8:67:5e:15:3c:
b1:5f:59:e8:05:4d:fe:83:02:1d:ac:d7:cd:03:25:
76:b2:ff:74:ef:a1:da:c2:c2:26:11:c7:c1:e5:9a:
22:5e:2e:45:42:a6:98:16:06:71:b3:4b:8c:73:53:
b8:e1:94:af:02:88:8f:0a:06:e8:75:65:b4:5a:05:
75:12:62:33:81:94:f3:06:77:77:9d:d7:6e:21:9a:
8f:e5:51:82:7c:5b:c8:dc:c5:5f:73:6d:a2:57:85:
89:7f:a9:44:1e:1e:47:7a:f3:2b:61:cd:7a:d1:84:
53:a7:a2:cf:06:94:7e:e7:f2:c6:43:e9:af:27:c0:
07:49:c9:45:ae:d3:8d:8c:a3:c5:be:24:85:6a:3c:
17:7c:5d:a0:e1:01:63:b6:cf:10:30:b7:99:33:e7:
05:a3:23:e7:c4:50:c3:3a:23:4d:fd:9b:93:c0:0a:
d7:0e:ce:13:74:e2:a3:45:42:e9:9d:0d:51:ad:f4:
c1:44:c8:06:73:47:90:81:bb:b3:91:8b:4c:6a:0e:
a8:63:99:11:a0:bb:b1:57:b0:3b:c6:35:1e:10:89:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:39:90:1F:A8:8D:46:6D:08:7C:82:42:7D:31:B8:9C:19:75:3C
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ozc5kB-ojUZtCHyCQn0xuJwZdTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.30.0/24
89.34.171.0/24
176.223.181.0/24
188.211.249.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e1:57:18:f6:a2:db:96:01:5a:a2:e2:06:ef:a1:e3:03:de:
27:9d:10:9f:08:66:ba:d7:ee:bd:e4:50:46:74:ec:66:cc:5c:
79:87:f2:3c:6d:9f:cf:37:ca:ad:e3:80:8f:88:ba:1a:c3:38:
35:e2:03:46:12:1c:07:5b:ff:04:64:93:52:85:35:4e:9b:ab:
be:53:43:44:c5:85:a1:df:d9:fd:55:ca:66:55:df:ab:59:1f:
53:30:a8:69:a4:d2:e2:36:63:16:10:02:6c:00:f8:89:c6:1b:
35:cf:cd:6c:2f:5b:12:47:33:e4:50:78:d6:1f:b9:83:b8:09:
0e:66:3e:bc:fb:26:a5:0c:f7:0b:52:9b:96:d2:72:87:fd:01:
01:5c:45:c5:63:fd:7f:8b:da:bd:9b:b8:e2:68:c8:40:74:79:
b0:5c:03:17:9c:0b:ba:32:fb:1f:39:c3:04:ac:28:d1:90:2a:
75:ea:e9:c5:d2:91:9a:3d:3b:01:f7:96:08:f1:82:7b:98:58:
a7:dd:30:84:2a:02:15:bb:48:27:bd:27:3f:23:94:40:60:b5:
a3:d4:d0:3b:86:ba:42:fa:bc:79:17:80:b2:03:b6:ed:3f:a6:
5e:45:43:1e:7e:0c:67:18:be:09:7f:6c:5d:0f:e1:8b:3b:14:
00:ad:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org