Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/mO9Pl62SdVrH4hQPq4EVbAz13oQ.roa
File: mO9Pl62SdVrH4hQPq4EVbAz13oQ.roa (raw, json)
Hash identifier: TFvn4DnD/qtMgZUnSFPyyhIi3K0VSOehG7RyFA1DTyo=
Subject key identifier: 98:EF:4F:97:AD:92:75:5A:C7:E2:14:0F:AB:81:15:6C:0C:F5:DE:84
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 0651EE3B
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/mO9Pl62SdVrH4hQPq4EVbAz13oQ.roa
Signing time: Thu 09 Jun 2022 12:18:02 +0000
ROA not before: Thu 09 Jun 2022 12:18:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 84.45.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106032699 (0x651ee3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Jun 9 12:18:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98ef4f97ad92755ac7e2140fab81156c0cf5de84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:45:99:aa:b2:d9:63:ab:1b:cf:b3:34:a1:
c0:81:a0:ba:b8:0f:30:99:da:c4:c4:e3:52:80:72:
25:bf:92:4a:47:c2:eb:4a:d1:c8:d5:f1:ce:c4:b5:
50:f7:16:5a:b2:f8:e5:76:97:64:1c:20:b2:83:ee:
83:26:80:f3:58:26:0e:16:87:56:1f:6c:a8:d6:99:
07:17:43:7b:32:25:6c:1a:c2:0b:17:2c:bb:34:38:
e5:b7:96:65:01:18:8d:77:56:c5:5c:f4:af:bc:3a:
93:9e:b8:c8:67:07:59:fc:0e:9a:75:cb:67:84:8a:
78:f4:9b:bb:bf:ea:55:a3:22:4e:6c:11:6a:a4:49:
6f:b4:12:95:9d:cd:a7:31:66:cb:40:fa:d2:c3:0b:
6a:07:d9:3c:d7:45:82:d4:19:dd:26:6f:b2:48:ff:
d8:e1:41:95:e8:e0:b3:ee:68:e2:46:46:7b:5e:dd:
36:47:05:54:56:30:31:c4:57:dc:9a:77:8d:a1:b4:
ed:26:2a:b5:c6:37:a5:39:28:9c:ac:c2:a3:d5:05:
ee:32:87:9f:5d:35:a2:4a:fd:0d:69:03:27:9c:66:
5c:bb:db:c7:a7:3c:e1:a9:b0:70:6c:a6:82:4d:ae:
9a:7e:4c:75:cc:ec:1b:91:80:65:b9:bc:63:80:6c:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:4F:97:AD:92:75:5A:C7:E2:14:0F:AB:81:15:6C:0C:F5:DE:84
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/mO9Pl62SdVrH4hQPq4EVbAz13oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f7:b0:14:9a:75:55:45:b2:8a:ac:40:7d:0f:53:b0:a3:86:
9b:7b:14:ca:95:d3:40:1a:67:1e:5b:fb:d8:f8:fe:5d:6c:11:
36:1a:e7:48:ec:6d:ae:9c:4f:77:c2:6b:2c:d6:0f:41:bb:1f:
97:16:2d:35:ed:1f:83:df:b0:60:f0:f5:db:4c:e6:72:6d:8b:
0f:c1:b7:c5:70:54:dd:12:d3:a7:db:7d:bb:5b:64:44:d3:fa:
30:0a:df:ce:e2:19:b3:8d:55:8d:aa:a7:c0:fd:0c:5e:54:3a:
73:5a:e0:ec:e4:e8:ca:d5:40:af:b8:8a:1d:d7:10:8b:3a:71:
3f:8c:16:8b:c9:5a:05:fd:02:b7:21:48:19:96:f3:9d:5c:e6:
e6:2c:bf:b1:34:88:d2:a5:ef:02:ba:54:3b:65:f2:58:71:04:
97:48:d6:46:1d:56:56:3e:6e:ef:77:47:c8:79:72:aa:01:17:
c1:14:9b:3d:95:c4:e3:d0:1f:58:e3:bb:a4:d2:b8:c5:fa:f9:
16:c6:05:64:41:ef:2d:3b:19:34:22:51:19:3f:fd:91:20:cc:
bf:62:81:06:5f:4a:61:e5:ab:aa:40:6a:e0:be:6b:6f:d8:2a:
0c:3c:e0:cc:fe:c7:d0:84:63:a4:79:b1:e4:d9:fe:f7:82:80:
51:e6:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:33 2025 by rpki-client