Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/Rrt7_g3o79W5BLDeh0BuGmMVTQU.roa
File: Rrt7_g3o79W5BLDeh0BuGmMVTQU.roa (raw, json)
Hash identifier: iueK7SwC64ZdhlZFWJO+Mysj1fmQBCLscNn/yP5SK3Q=
Subject key identifier: 46:BB:7B:FE:0D:E8:EF:D5:B9:04:B0:DE:87:40:6E:1A:63:15:4D:05
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01D05B7D
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/Rrt7_g3o79W5BLDeh0BuGmMVTQU.roa
Signing time: Sat 01 Jan 2022 04:01:12 +0000
ROA not before: Sat 01 Jan 2022 04:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30848
IP address blocks: 62.100.87.0/24 maxlen: 24
62.100.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30432125 (0x1d05b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 04:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46bb7bfe0de8efd5b904b0de87406e1a63154d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:3c:72:df:3e:a2:4e:41:c3:55:a4:7c:f1:
e5:de:cb:ef:2a:7b:96:0b:5c:92:97:6c:d3:a9:fc:
21:12:67:9a:00:4b:2f:f1:af:38:e1:c1:b9:19:5f:
73:ff:07:ac:10:28:1d:db:6d:9f:25:32:71:42:7d:
42:6a:ab:b3:f0:db:10:71:95:ab:d2:e6:a1:ad:fb:
2a:cc:8c:b2:af:7c:9a:32:be:07:d2:ae:dd:e1:60:
d9:cd:3b:22:97:b1:b6:f0:ae:f6:96:72:6d:f7:25:
12:8d:2a:93:66:1d:a4:11:91:2d:48:e4:bf:b7:f1:
d0:a9:ec:df:3f:29:45:e2:62:eb:02:18:07:c8:d0:
fc:b9:c9:5d:fd:c2:0a:42:fc:e4:b7:78:d8:47:29:
57:c9:98:1d:98:8b:f4:d3:a6:d3:4a:a4:df:1b:06:
19:59:80:0a:78:e8:2d:cc:c4:fa:9b:68:81:df:1e:
10:36:66:ac:95:b8:25:89:d7:e1:e9:8b:46:af:31:
d2:e8:5b:ed:51:b2:d0:ec:5a:59:84:66:b8:0b:e4:
ba:52:9b:ab:c8:8f:09:29:f3:bb:54:97:c8:a1:c3:
af:b4:86:a2:ea:6d:3c:40:27:3d:ab:00:99:d6:c6:
21:d7:32:82:3f:5c:5d:68:a9:c1:3e:1b:bd:8d:06:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BB:7B:FE:0D:E8:EF:D5:B9:04:B0:DE:87:40:6E:1A:63:15:4D:05
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/Rrt7_g3o79W5BLDeh0BuGmMVTQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.86.0/23
Signature Algorithm: sha256WithRSAEncryption
39:d6:1f:81:11:92:15:6b:0d:0a:06:55:81:4e:0e:00:b1:23:
70:67:94:f1:51:59:77:91:ae:8b:55:b2:af:94:db:22:e1:55:
48:32:51:7c:1c:e6:5b:61:2b:fa:21:57:53:71:ed:8e:03:3b:
b1:92:30:1a:b8:36:55:c8:f0:e6:08:67:b3:62:62:1e:0f:da:
07:bb:50:d2:56:3f:47:5d:79:74:56:8e:13:cc:00:db:50:b7:
a5:7c:31:b0:92:40:a8:d4:e7:a6:a6:d5:38:06:ce:6c:d4:7d:
61:52:a2:d1:36:e5:8a:92:bb:be:c6:8a:44:a8:ca:c5:1f:db:
48:15:28:6a:14:22:16:3b:13:f7:d2:5c:07:d7:43:ff:ab:17:
f2:41:88:9a:df:cd:82:98:a4:21:10:6b:b4:f1:31:7d:c2:bd:
ef:2f:fa:37:a6:37:4d:e0:1f:46:22:63:74:c2:09:5f:ea:69:
9b:d5:27:30:9e:3b:ed:99:74:f5:39:72:14:48:29:3b:72:87:
f1:42:be:53:04:0e:31:89:0b:d6:da:7f:46:fe:87:47:57:3f:
91:b1:42:d6:b8:94:ee:88:bb:4a:6c:38:51:57:db:5e:8c:64:
d0:03:bb:b4:6e:ce:09:03:dc:ed:1d:c4:82:8d:ea:7e:5d:49:
c3:2d:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:06 2025 by rpki-client