Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/T6nDX_qObFRdXR4hQtfIK-R7XmY.roa
File: T6nDX_qObFRdXR4hQtfIK-R7XmY.roa (raw, json)
Hash identifier: tD9CDs1r9QNKA7rjwOwZXtrGLRLS3u+lIJ5oMtt5p64=
Subject key identifier: 4F:A9:C3:5F:FA:8E:6C:54:5D:5D:1E:21:42:D7:C8:2B:E4:7B:5E:66
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 01872887EF2FA03E6624CF0AE80BE33D7ABB
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/T6nDX_qObFRdXR4hQtfIK-R7XmY.roa
Signing time: Tue 28 Mar 2023 14:03:29 +0000
ROA not before: Tue 28 Mar 2023 14:03:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210521
IP address blocks: 62.204.46.0/24 maxlen: 24
2a12:a200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:87:ef:2f:a0:3e:66:24:cf:0a:e8:0b:e3:3d:7a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Mar 28 14:03:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa9c35ffa8e6c545d5d1e2142d7c82be47b5e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:b1:07:cb:a1:b2:5d:7a:6d:81:51:6f:e4:
8d:bf:1a:05:f9:80:4c:f4:ac:7d:cb:84:92:66:77:
3f:1e:bb:04:45:6b:b9:26:aa:27:09:b7:ad:69:62:
24:3d:75:cb:a2:18:b3:55:b7:8c:6e:22:73:d8:e9:
12:8a:5e:ba:be:85:f5:9c:19:73:dc:e3:3c:bf:af:
6a:1e:d1:12:ab:5f:33:39:eb:ed:80:9c:34:b2:ec:
67:08:24:f6:44:84:b7:57:29:4a:59:59:9d:9a:d2:
2d:64:16:9c:94:10:47:f6:b0:5c:9c:01:03:87:39:
f2:e9:ee:81:e5:a9:bd:16:49:d8:c5:2f:78:46:aa:
06:58:3a:97:06:86:b6:35:86:5d:0b:7e:42:2b:50:
85:11:a9:e7:73:05:14:ba:19:61:0a:bd:e5:69:a4:
34:da:ea:9f:5a:49:68:24:f8:6b:a0:b2:6b:26:30:
93:7b:91:3d:85:13:42:34:3a:03:7d:43:25:8b:74:
55:93:7d:ce:e4:53:e7:be:90:db:fd:be:c9:04:b1:
07:af:5c:e4:a4:28:e6:9e:84:80:17:06:63:62:80:
ff:60:68:25:af:b3:94:fe:e8:c2:f1:15:9f:f5:9f:
b5:94:20:61:34:7e:84:c8:66:2e:c4:07:fe:af:76:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:C3:5F:FA:8E:6C:54:5D:5D:1E:21:42:D7:C8:2B:E4:7B:5E:66
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/T6nDX_qObFRdXR4hQtfIK-R7XmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.46.0/24
IPv6:
2a12:a200::/29
Signature Algorithm: sha256WithRSAEncryption
8f:40:4a:58:cc:d5:40:80:d3:84:d5:7a:47:32:13:5a:5e:c2:
86:09:b4:ab:3c:ea:c1:0b:b2:79:ee:f9:b6:42:02:31:2b:7f:
d6:cb:21:0b:ef:4d:ca:3d:61:11:16:50:57:fd:2b:23:e6:1a:
23:cd:96:cb:79:84:b8:69:be:01:ef:06:53:ad:e6:80:63:e6:
d1:fb:ff:29:69:5d:d2:30:89:11:20:c8:3b:f2:bb:9b:9c:b1:
10:c1:44:8b:18:ef:4d:4a:30:e2:92:51:4f:13:5f:da:7c:a8:
53:9c:6e:8d:ef:c6:ea:2e:75:05:c8:55:36:ff:2a:a5:ba:6b:
04:98:3d:60:46:fe:24:44:bc:69:96:00:4e:3a:e4:cf:b5:d2:
0e:7e:fa:bc:a9:1f:98:01:b8:b5:02:ad:cb:24:50:ac:c0:e4:
0c:32:7e:f9:87:e2:07:19:1d:3b:9f:90:e8:90:ea:6e:79:96:
64:2d:27:bd:8b:a0:e7:63:9d:96:a0:4a:3a:04:2c:ff:e8:f8:
45:3d:1c:ae:32:94:5a:04:bb:7a:84:a5:28:88:73:2f:6d:ec:
91:a1:e6:82:8f:6a:70:4a:96:98:c6:90:24:96:60:85:b1:a5:
6c:7a:3e:7d:73:7d:eb:fe:c3:b5:b5:c0:9f:4a:44:40:b5:92:
52:dc:ba:70
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYcoh+8voD5mJM8K6AvjPXq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwN2E1YzRlYTQ1M2I0NmM4MWNiMTM2ZDkyYjkzMDliMTQ2
YzNlNDUwHhcNMjMwMzI4MTQwMzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmE5YzM1ZmZhOGU2YzU0NWQ1ZDFlMjE0MmQ3YzgyYmU0N2I1ZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FOxB8uhsl16bYFRb+SNvxoF+YBM
9Kx9y4SSZnc/HrsERWu5JqonCbetaWIkPXXLohizVbeMbiJz2OkSil66voX1nBlz
3OM8v69qHtESq18zOevtgJw0suxnCCT2RIS3VylKWVmdmtItZBaclBBH9rBcnAED
hzny6e6B5am9FknYxS94RqoGWDqXBoa2NYZdC35CK1CFEanncwUUuhlhCr3laaQ0
2uqfWkloJPhroLJrJjCTe5E9hRNCNDoDfUMli3RVk33O5FPnvpDb/b7JBLEHr1zk
pCjmnoSAFwZjYoD/YGglr7OU/ujC8RWf9Z+1lCBhNH6EyGYuxAf+r3ZC5wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFE+pw1/6jmxUXV0eIULXyCvke15mMB8GA1UdIwQY
MBaAFJB6XE6kU7RsgcsTbZK5MJsUbD5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDIt
YjJhMmI4Yjg0N2I5LzEvVDZuRFhfcU9iRlJkWFI0aFF0ZklLLVI3WG1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDItYjJhMmI4Yjg0N2I5
LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAPswuMA0E
AgACMAcDBQMqEqIAMA0GCSqGSIb3DQEBCwUAA4IBAQCPQEpYzNVAgNOE1XpHMhNa
XsKGCbSrPOrBC7J57vm2QgIxK3/WyyEL703KPWERFlBX/Ssj5hojzZbLeYS4ab4B
7wZTreaAY+bR+/8paV3SMIkRIMg78rubnLEQwUSLGO9NSjDiklFPE1/afKhTnG6N
78bqLnUFyFU2/yqlumsEmD1gRv4kRLxplgBOOuTPtdIOfvq8qR+YAbi1Aq3LJFCs
wOQMMn75h+IHGR07n5DokOpueZZkLSe9i6DnY52WoEo6BCz/6PhFPRyuMpRaBLt6
hKUoiHMvbeyRoeaCj2pwSpaYxpAklmCFsaVsej59c33r/sO1tcCfSkRAtZJS3Lpw
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:34 2025 by rpki-client