Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/6znmIfOR3fIAs9BGjJuf2ZJdgT8.roa
File: 6znmIfOR3fIAs9BGjJuf2ZJdgT8.roa (raw, json)
Hash identifier: X+o+puUwyy56lqLL5lN8FoKjEfJA7VCewDpuZCCxz84=
Subject key identifier: EB:39:E6:21:F3:91:DD:F2:00:B3:D0:46:8C:9B:9F:D9:92:5D:81:3F
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 0184663B39B53B5A0376A8D05B633EA9AAD6
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/6znmIfOR3fIAs9BGjJuf2ZJdgT8.roa
Signing time: Fri 11 Nov 2022 10:27:48 +0000
ROA not before: Fri 11 Nov 2022 10:27:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6786
IP address blocks: 62.169.4.0/24 maxlen: 24
62.169.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:3b:39:b5:3b:5a:03:76:a8:d0:5b:63:3e:a9:aa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Nov 11 10:27:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb39e621f391ddf200b3d0468c9b9fd9925d813f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:aa:20:09:72:c1:37:1e:5b:01:76:5c:bb:
c0:e2:52:17:77:e9:60:27:51:30:f5:a3:80:80:c9:
bf:d6:8a:51:87:33:fb:67:90:a1:65:62:bd:e8:90:
29:80:78:f1:c8:db:c2:be:b2:63:d0:63:53:7a:b8:
2e:4a:ae:f6:bb:3c:cd:ea:e1:49:ec:c1:2b:72:15:
6b:4f:92:a2:b8:92:ad:26:f7:0e:e3:05:55:6c:64:
63:91:96:44:a5:ee:90:34:ce:b4:d7:2f:28:9d:f0:
8b:30:9f:6a:0a:32:65:7a:41:31:58:56:c7:50:28:
21:7c:f2:62:b2:d5:e0:f1:01:b7:ef:c0:e1:b4:ba:
41:0d:2a:97:6e:5a:4b:07:c5:30:0a:16:05:fa:82:
c7:e0:48:ac:99:90:b3:de:f3:dc:50:4d:30:64:64:
c1:13:2f:0f:0f:b3:19:e7:8f:dd:bb:44:4f:2e:7c:
7f:be:18:a0:f5:7a:89:d7:af:37:1f:60:c0:9d:a8:
92:2a:51:31:0d:fe:7c:46:2c:29:29:d3:d9:9c:09:
a7:0d:56:fa:7a:1a:ab:56:37:6c:80:76:53:f2:23:
17:25:bf:6d:98:68:60:e8:4f:9f:de:e5:d8:b4:78:
dd:e4:e0:0a:23:f2:9f:15:17:d7:7d:b1:71:06:aa:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:E6:21:F3:91:DD:F2:00:B3:D0:46:8C:9B:9F:D9:92:5D:81:3F
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/6znmIfOR3fIAs9BGjJuf2ZJdgT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.4.0/24
62.169.7.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3b:51:f0:78:9c:84:89:92:7a:35:1a:ab:8a:d0:55:f2:32:
cd:ce:ce:8d:96:f6:87:28:88:86:c7:fa:10:8a:6c:e8:33:33:
2e:45:22:c6:e5:a0:76:c2:22:cb:02:c0:df:03:b4:1f:06:fb:
5b:a5:b0:7e:74:f6:c3:01:1d:f0:08:a1:48:35:ac:37:33:d8:
78:78:9a:5a:1f:e5:00:6d:1f:24:bf:da:51:be:07:95:23:6b:
68:e5:8b:2f:41:a1:eb:94:0a:a5:7c:3e:03:b6:1a:68:0f:54:
df:b1:44:f9:95:bc:92:00:ba:e2:42:ce:62:0c:7e:13:46:44:
b6:d2:15:94:99:21:3e:c1:60:96:cb:9a:08:7e:c0:2e:ec:f2:
ee:85:5a:d8:7c:97:aa:d1:cb:f2:49:26:4f:1d:98:ee:0a:e2:
42:86:29:25:f6:81:b4:16:6a:05:56:c7:71:db:97:02:d7:cb:
98:48:e7:93:6f:75:81:31:c7:5d:a1:85:29:dc:52:44:ae:c2:
24:78:42:5c:b4:80:8e:24:33:22:e5:85:a6:2a:75:c4:79:45:
b3:e8:a9:af:06:84:73:d5:78:ce:26:10:21:63:8f:43:69:18:
d7:b3:db:da:cf:25:8b:5d:b8:45:2d:91:f1:5b:e8:b3:12:a2:
c7:2f:98:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRmOzm1O1oDdqjQW2M+qarWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2VlZTJkNmQ3YTUwYzkyNDk5ZGExYTIxZjJhYmI3YTJh
Nzc0YzgwHhcNMjIxMTExMTAyNzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjM5ZTYyMWYzOTFkZGYyMDBiM2QwNDY4YzliOWZkOTkyNWQ4MTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4GqIAlywTceWwF2XLvA4lIXd+lg
J1Ew9aOAgMm/1opRhzP7Z5ChZWK96JApgHjxyNvCvrJj0GNTerguSq72uzzN6uFJ
7MErchVrT5KiuJKtJvcO4wVVbGRjkZZEpe6QNM601y8onfCLMJ9qCjJlekExWFbH
UCghfPJistXg8QG378DhtLpBDSqXblpLB8UwChYF+oLH4EismZCz3vPcUE0wZGTB
Ey8PD7MZ54/du0RPLnx/vhig9XqJ1683H2DAnaiSKlExDf58RiwpKdPZnAmnDVb6
ehqrVjdsgHZT8iMXJb9tmGhg6E+f3uXYtHjd5OAKI/KfFRfXfbFxBqoarwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOs55iHzkd3yALPQRoybn9mSXYE/MB8GA1UdIwQY
MBaAFFLO7i1telDJJJnaGiHyq7eip3TIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUt
MGMwMjBhN2U0YTQ0LzEvNnpubUlmT1IzZklBczlCR2pKdWYyWkpkZ1Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUtMGMwMjBhN2U0YTQ0
LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPqkEAwQA
PqkHMA0GCSqGSIb3DQEBCwUAA4IBAQBYO1HweJyEiZJ6NRqritBV8jLNzs6NlvaH
KIiGx/oQimzoMzMuRSLG5aB2wiLLAsDfA7QfBvtbpbB+dPbDAR3wCKFINaw3M9h4
eJpaH+UAbR8kv9pRvgeVI2to5YsvQaHrlAqlfD4DthpoD1TfsUT5lbySALriQs5i
DH4TRkS20hWUmSE+wWCWy5oIfsAu7PLuhVrYfJeq0cvySSZPHZjuCuJChikl9oG0
FmoFVsdx25cC18uYSOeTb3WBMcddoYUp3FJErsIkeEJctICOJDMi5YWmKnXEeUWz
6KmvBoRz1XjOJhAhY49DaRjXs9vazyWLXbhFLZHxW+izEqLHL5g0
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:19 2025 by rpki-client