Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/kS6z9GMUhevz2qaqCa0nXFlbUKc.roa
File: kS6z9GMUhevz2qaqCa0nXFlbUKc.roa (raw, json)
Hash identifier: LSaHtQ50Ydvh4HG0mC4YBySNGD1P2cFcDgxO4oejY58=
Subject key identifier: 91:2E:B3:F4:63:14:85:EB:F3:DA:A6:AA:09:AD:27:5C:59:5B:50:A7
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 10A47BD9
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/kS6z9GMUhevz2qaqCa0nXFlbUKc.roa
Signing time: Sat 01 Jan 2022 13:00:38 +0000
ROA not before: Sat 01 Jan 2022 13:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48076
IP address blocks: 185.62.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279215065 (0x10a47bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 13:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=912eb3f4631485ebf3daa6aa09ad275c595b50a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:b4:c9:77:56:21:d6:08:b0:a2:12:5e:07:
d5:db:f9:69:35:38:99:cf:20:db:b7:ef:92:4a:b7:
a2:d0:f7:76:55:be:4a:ee:12:90:e0:37:ea:b1:d5:
4a:82:03:12:96:ec:aa:65:3c:ed:1c:fe:9d:2e:01:
d5:78:f9:fb:17:54:03:54:55:40:ee:ac:f5:d4:95:
17:aa:b2:3e:4c:a7:12:7f:78:c2:47:44:7a:d7:a4:
56:29:53:77:a1:dd:8b:d9:33:fd:32:e1:a3:bb:cb:
81:1a:dd:b3:20:1b:3c:8d:c1:35:b2:58:e8:66:3e:
49:07:8a:c2:4b:3d:6f:2b:57:3d:73:2b:7c:a1:4c:
4c:82:70:69:7b:af:08:0a:87:fe:a2:65:7f:da:d5:
58:49:a1:81:8d:02:a7:03:23:db:84:af:62:52:cb:
ac:dc:fb:bd:ce:40:35:0a:90:9f:af:56:91:8c:01:
f3:f4:a1:ea:a5:2c:bf:80:9d:9c:23:fc:2f:63:cd:
a3:bc:fb:4c:6b:c3:71:54:bc:9e:3a:01:c4:f8:e0:
49:3b:ff:6e:b8:63:2f:18:d0:20:87:06:73:38:72:
27:d0:a6:f8:6c:86:3d:59:45:df:53:a9:39:39:96:
12:ce:13:7d:7a:a2:cb:74:78:95:0f:61:c6:72:4d:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:B3:F4:63:14:85:EB:F3:DA:A6:AA:09:AD:27:5C:59:5B:50:A7
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/kS6z9GMUhevz2qaqCa0nXFlbUKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7f:f5:0f:11:b7:0a:61:b8:32:29:fb:b8:1a:37:9a:ee:81:
f1:05:fc:e5:30:58:84:cb:61:d2:04:eb:55:e8:9f:29:63:05:
fb:1e:2b:37:3f:12:98:7f:2c:ad:61:f7:02:56:47:a8:ff:da:
3c:21:f4:21:50:ca:84:d0:93:1e:72:fc:f4:f3:35:85:72:71:
0a:5d:48:99:7c:2b:ce:ad:f8:7f:8e:7c:c7:1c:79:07:93:7a:
a1:9b:8c:74:df:4d:01:4d:09:4a:18:61:35:ee:04:b1:10:f3:
5f:b3:79:1a:2c:7d:df:1b:15:af:9e:d2:18:75:7b:6f:51:af:
89:1d:2d:9e:2e:3b:8f:b8:5e:16:cd:d1:d7:80:d3:5a:02:72:
18:9f:4a:35:ef:35:03:02:ba:d1:9b:de:86:f8:6e:ee:bc:2a:
bc:9a:ef:40:94:57:ae:3d:64:0f:33:46:ea:f7:76:81:5b:83:
6a:44:f5:ad:e2:7d:08:1c:77:19:c6:dd:a4:2d:45:8d:d5:dc:
15:94:32:54:38:37:56:68:21:a8:41:84:2b:fe:55:77:cf:e9:
60:13:9e:f7:40:25:59:7e:37:7e:42:ac:5a:8b:ae:98:cd:37:
f2:e0:cb:5f:e3:ec:be:d3:10:d5:2c:29:e3:50:62:23:b5:8c:
0b:ae:48:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:38 2025 by rpki-client