Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/XVPyimEgBiR4mgYTIkGiZuuFfvs.roa
File: XVPyimEgBiR4mgYTIkGiZuuFfvs.roa (raw, json)
Hash identifier: tgK6sRjQlgQE9EYlEXqtFLAGxKhdExuR780HP2o6PHY=
Subject key identifier: 5D:53:F2:8A:61:20:06:24:78:9A:06:13:22:41:A2:66:EB:85:7E:FB
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 13649B65
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/XVPyimEgBiR4mgYTIkGiZuuFfvs.roa
Signing time: Sat 01 Jan 2022 05:58:20 +0000
ROA not before: Sat 01 Jan 2022 05:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20756
IP address blocks: 62.93.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325360485 (0x13649b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d53f28a61200624789a06132241a266eb857efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:cf:7c:b2:13:3b:4e:b8:63:e2:50:a1:cb:
40:bf:3e:75:62:30:b5:ea:c6:1a:13:79:ef:53:4b:
ac:74:71:d3:2e:e7:54:89:df:fd:53:1a:f6:99:a6:
e3:ee:c9:43:67:b4:c0:f9:4f:44:4e:41:52:b2:5c:
d8:59:b3:b6:e3:0f:b7:42:09:b2:a2:14:49:a1:7c:
f1:6d:de:79:c0:93:b5:8c:cc:24:6e:5a:52:08:ac:
bc:46:f0:56:9a:8e:f4:e6:ee:cd:b4:f3:db:d2:9f:
8c:df:f6:57:31:e3:02:ff:b9:7c:c0:26:f8:f7:94:
95:64:f3:b8:b4:a8:cd:57:00:cb:a4:e3:c8:fd:b5:
66:6f:70:f4:7d:e8:73:2f:3f:35:d2:25:fc:50:50:
97:69:9b:01:79:23:68:ac:01:fa:36:fd:8f:c8:1a:
33:2c:b0:02:b0:5e:2a:cc:36:a7:23:32:80:f2:88:
25:c1:b5:f3:95:6a:a0:e9:4a:f6:a1:36:3f:07:e1:
27:2d:63:04:aa:e2:01:d0:4c:9e:00:fe:ec:58:61:
9b:02:d9:c7:fe:73:61:9a:58:50:14:85:1a:9a:72:
bb:99:64:78:c2:63:fa:10:28:c5:df:c8:89:a9:63:
91:27:2f:33:79:bf:49:1d:dc:76:ff:89:bb:fc:58:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:53:F2:8A:61:20:06:24:78:9A:06:13:22:41:A2:66:EB:85:7E:FB
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/XVPyimEgBiR4mgYTIkGiZuuFfvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fd:f9:7e:06:69:14:c7:e3:b8:46:18:f2:d7:79:c5:31:67:
d5:42:51:d0:ba:9a:08:bb:26:9d:30:e3:6f:68:f5:6e:eb:ce:
3b:ac:47:6c:e2:0a:1d:91:7a:46:5c:ad:62:4b:ae:c3:62:8f:
1f:cf:2a:97:ac:7a:2d:90:59:5c:dd:37:03:d9:d5:32:a2:28:
10:a6:c9:13:47:3f:2d:31:44:4a:5f:27:1d:c3:78:91:55:f8:
fa:26:bc:56:83:f5:aa:a1:0b:cd:d5:ca:74:08:8b:b9:21:97:
77:c1:9d:dc:d4:05:cf:2c:3d:7f:d3:37:35:39:68:ee:d5:55:
78:5a:8a:cd:af:69:9a:01:77:d4:16:b7:12:0e:46:7b:86:ae:
8d:a4:73:7b:41:55:ba:99:8e:19:69:61:36:6e:cb:8c:87:cc:
d3:b4:72:10:e3:85:0c:ca:09:1d:5d:0a:f7:0b:eb:4b:90:24:
e4:0d:94:2b:a8:80:d7:5a:51:f4:1c:b7:7c:e1:0a:dd:5b:7f:
78:50:0b:93:56:e9:15:34:ff:20:53:f8:ae:02:7d:35:74:63:
c2:26:da:13:c0:94:83:f1:ef:f3:8e:52:3e:d8:a6:c0:82:d9:
f7:19:05:b8:ab:f2:88:d7:c6:cf:fe:51:4d:bb:9d:8e:fe:52:
56:a5:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:54:27 2025 by rpki-client