Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rYdAxFLl6whuQ_oezfknSnVsFHo.roa
File: rYdAxFLl6whuQ_oezfknSnVsFHo.roa (raw, json)
Hash identifier: IiZntxBy8Bh+X0RRp69RXO1fcrEnaqxNdDPeLXQw6ig=
Subject key identifier: AD:87:40:C4:52:E5:EB:08:6E:43:FA:1E:CD:F9:27:4A:75:6C:14:7A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E65F51C67F25F8F250065C9AB716A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rYdAxFLl6whuQ_oezfknSnVsFHo.roa
Signing time: Mon 02 Jan 2023 06:14:55 +0000
ROA not before: Mon 02 Jan 2023 06:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208210
IP address blocks: 62.3.50.0/24 maxlen: 24
2a0c:b641:420::/44 maxlen: 48
2a0f:8400::/32 maxlen: 48
2a0f:8401::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:65:f5:1c:67:f2:5f:8f:25:00:65:c9:ab:71:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad8740c452e5eb086e43fa1ecdf9274a756c147a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:b7:69:b9:22:dd:85:de:21:70:0b:6f:49:
da:3d:46:05:15:9b:cb:cf:45:5e:0e:1f:9e:0c:16:
fa:37:0c:49:e5:90:fa:c1:e7:da:2a:b6:6b:61:0d:
72:70:c3:85:28:c5:80:12:44:d8:8f:54:66:a3:d1:
7d:44:11:9c:d7:a2:92:e3:d1:34:ad:df:55:2d:8e:
9e:7c:b7:00:ab:10:be:23:95:fe:3d:cc:74:15:71:
de:a3:40:65:9b:5d:74:10:69:a4:d0:b6:84:ff:ab:
80:72:44:46:54:3e:47:fd:62:47:78:61:3a:1b:5b:
33:d3:90:65:4f:93:10:d8:75:0d:1f:a0:cc:21:66:
0b:75:df:9f:80:37:29:8a:22:b4:e7:92:59:ef:72:
5e:1f:5b:ce:a8:63:eb:e4:02:5f:5d:f9:b3:f7:63:
73:4c:00:f1:13:ba:a6:54:d4:0c:49:fb:40:b7:67:
e6:e5:7c:fd:d6:5b:70:f3:93:31:1d:06:d4:64:2d:
80:45:3f:77:39:51:e3:2e:49:b0:89:40:bc:0c:8c:
e8:47:50:33:20:ef:ec:fc:3f:86:00:d1:0c:d8:1d:
fd:2d:d4:71:f8:33:b6:a1:0f:fb:2e:6e:10:51:d4:
31:de:2e:14:a5:d9:7c:4f:31:4d:b1:6a:5f:ef:98:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:40:C4:52:E5:EB:08:6E:43:FA:1E:CD:F9:27:4A:75:6C:14:7A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rYdAxFLl6whuQ_oezfknSnVsFHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.50.0/24
IPv6:
2a0c:b641:420::/44
2a0f:8400::/31
Signature Algorithm: sha256WithRSAEncryption
1e:8a:2c:ae:7d:07:27:a7:76:86:8d:b0:18:97:00:ab:e8:b7:
d1:a9:93:d4:35:69:1a:66:eb:38:66:32:00:ef:6f:50:95:ac:
49:0b:73:74:f8:f2:4b:cf:d0:18:6a:e6:99:8f:9c:57:0b:16:
8f:2f:4f:e4:38:74:c3:91:48:7d:5d:ab:5b:e7:c8:48:b1:ec:
62:e8:a8:f8:08:78:29:f1:d8:be:18:3f:0f:ac:3e:77:55:a7:
b0:1f:79:53:c0:43:6b:c4:e8:6a:a8:4b:4d:8f:e3:cf:e2:7c:
8e:3d:71:4a:cb:07:0f:41:9d:cb:7e:13:78:2a:18:4c:b0:43:
73:5d:73:ff:36:d8:7e:17:d5:ad:a8:79:0e:43:2f:d6:09:04:
ec:7a:1a:95:b2:e9:c2:e0:af:67:3e:45:cb:32:ed:16:c8:a6:
a0:68:53:66:a8:e8:03:e6:4e:1b:cd:e3:0f:02:7e:be:60:94:
33:dd:f7:26:61:77:e7:e0:69:fb:1b:ac:cf:cc:2a:8e:36:12:
9d:66:86:ab:b9:a3:56:5e:27:b2:cd:55:d0:34:55:34:e2:af:
3a:30:70:e6:b5:01:2d:b8:0f:f1:50:d9:9e:e7:b8:74:3d:18:
fb:94:d0:57:71:bf:32:75:05:b4:ba:02:b8:30:c3:85:f9:5d:
62:32:96:0a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVxHmX1HGfyX48lAGXJq3FqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDg3NDBjNDUyZTVlYjA4NmU0M2ZhMWVjZGY5Mjc0YTc1NmMxNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHy3abki3YXeIXALb0naPUYFFZvL
z0VeDh+eDBb6NwxJ5ZD6wefaKrZrYQ1ycMOFKMWAEkTYj1Rmo9F9RBGc16KS49E0
rd9VLY6efLcAqxC+I5X+Pcx0FXHeo0Blm110EGmk0LaE/6uAckRGVD5H/WJHeGE6
G1sz05BlT5MQ2HUNH6DMIWYLdd+fgDcpiiK055JZ73JeH1vOqGPr5AJfXfmz92Nz
TADxE7qmVNQMSftAt2fm5Xz91ltw85MxHQbUZC2ART93OVHjLkmwiUC8DIzoR1Az
IO/s/D+GANEM2B39LdRx+DO2oQ/7Lm4QUdQx3i4Updl8TzFNsWpf75iu4wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFK2HQMRS5esIbkP6Hs35J0p1bBR6MB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvcllkQXhGTGw2d2h1UV9vZXpma25TblZzRkhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAPgMyMBYE
AgACMBADBwQqDLZBBCADBQEqD4QAMA0GCSqGSIb3DQEBCwUAA4IBAQAeiiyufQcn
p3aGjbAYlwCr6LfRqZPUNWkaZus4ZjIA729QlaxJC3N0+PJLz9AYauaZj5xXCxaP
L0/kOHTDkUh9Xatb58hIsexi6Kj4CHgp8di+GD8PrD53VaewH3lTwENrxOhqqEtN
j+PP4nyOPXFKywcPQZ3LfhN4KhhMsENzXXP/Nth+F9WtqHkOQy/WCQTsehqVsunC
4K9nPkXLMu0WyKagaFNmqOgD5k4bzeMPAn6+YJQz3fcmYXfn4Gn7G6zPzCqONhKd
ZoaruaNWXieyzVXQNFU04q86MHDmtQEtuA/xUNme57h0PRj7lNBXcb8ydQW0ugK4
MMOF+V1iMpYK
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:53:36 2025 by rpki-client