Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xtMPd3SLNXAGbNS69EMH2m0czCM.roa
File: xtMPd3SLNXAGbNS69EMH2m0czCM.roa (raw, json)
Hash identifier: wMZVFIiWGEQvwLFj0m7mI8/nBIL3RFWe20D+hcm2ACM=
Subject key identifier: C6:D3:0F:77:74:8B:35:70:06:6C:D4:BA:F4:43:07:DA:6D:1C:CC:23
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 018570CBEBDCD8ACC1609382A2CD40F533E0
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xtMPd3SLNXAGbNS69EMH2m0czCM.roa
Signing time: Mon 02 Jan 2023 04:44:50 +0000
ROA not before: Mon 02 Jan 2023 04:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16158
IP address blocks: 62.219.103.0/24 maxlen: 24
62.219.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:eb:dc:d8:ac:c1:60:93:82:a2:cd:40:f5:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 2 04:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6d30f77748b3570066cd4baf44307da6d1ccc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:af:c3:f9:97:07:ba:02:1b:5e:79:c8:16:
91:5b:63:dc:74:21:df:02:a3:05:66:bc:50:ab:fd:
81:a1:b9:07:2f:56:5b:69:04:96:88:c3:72:2b:48:
57:6e:12:67:89:74:e2:62:a0:82:a1:1e:9e:50:7f:
39:bc:e0:2d:4a:01:9c:98:42:f3:ca:84:bc:5b:27:
77:54:9b:e5:41:20:56:e9:09:06:5c:90:97:5b:dc:
d1:d3:34:de:cc:af:d5:5d:d8:62:b9:20:1b:d7:4f:
e3:ea:87:40:0a:1c:52:1b:1a:d6:4a:76:ad:1c:1f:
f1:88:96:d9:db:b6:fe:67:97:77:f7:9a:dc:6c:31:
27:80:84:3c:ef:bb:87:08:c7:36:19:dc:76:bf:99:
cc:50:fc:c4:6b:96:3c:71:5a:7e:ef:07:44:1b:5c:
6d:64:79:2d:34:86:4e:4e:e7:f8:6a:0d:04:06:1f:
9e:21:35:09:4c:f6:09:94:e6:1d:9d:66:83:4c:0d:
04:0f:fb:9c:2d:8f:6b:04:6a:4b:82:af:c9:0e:86:
5a:53:4e:bc:81:c3:ce:cc:14:19:05:ed:e7:98:a6:
4c:ee:30:61:9b:b7:7f:5f:02:6e:3d:54:6f:77:2f:
e4:5a:b3:3f:5b:a3:62:c6:d2:64:c7:1e:c9:c5:ff:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:0F:77:74:8B:35:70:06:6C:D4:BA:F4:43:07:DA:6D:1C:CC:23
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xtMPd3SLNXAGbNS69EMH2m0czCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.219.102.0/23
Signature Algorithm: sha256WithRSAEncryption
80:bc:bd:b1:d9:fe:44:45:7a:0a:f1:3f:76:a4:be:fe:d9:a6:
f5:07:cf:31:3b:a6:82:36:ba:a4:ae:ee:7e:f6:e7:dc:cf:6e:
24:af:b3:21:e9:dd:ce:52:20:ca:81:81:c8:1e:69:6c:cf:6f:
09:98:bf:d1:3c:a7:97:e8:2e:1c:aa:67:09:39:ff:0c:b7:65:
9d:c1:6f:a2:d8:c8:10:fb:28:16:6a:36:57:7d:23:38:45:b9:
1e:0c:f0:b3:e1:99:71:37:1b:81:c3:1f:2d:99:3d:0a:36:94:
b1:6a:f0:e0:98:51:09:8c:32:96:6d:6f:73:84:e6:70:16:fe:
5f:3e:88:17:d0:5a:46:8d:44:a8:77:b1:9c:8e:2d:73:24:f3:
8a:61:f2:1d:10:84:d9:d4:28:0d:b5:4c:08:22:05:c4:51:59:
b5:20:80:bf:ac:1b:f4:cc:1b:86:c8:de:59:26:4b:53:cf:7d:
d5:b6:b4:22:48:29:9e:4c:e1:7f:ad:e7:59:4f:3a:e6:92:3c:
21:2c:87:ae:de:5f:cc:5e:25:96:f4:75:a2:55:68:d2:33:4d:
7c:73:6c:6e:56:7f:7a:fc:0d:89:ac:19:c5:4f:40:5f:f0:48:
9b:80:a3:2a:fe:85:b2:65:81:7d:cb:e2:81:03:f0:5a:fe:6f:
78:5a:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:10 2025 by rpki-client