Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/yp9K2qRXYecE9jeUh5yf7VK-L30.roa
File: yp9K2qRXYecE9jeUh5yf7VK-L30.roa (raw, json)
Hash identifier: sOOwP7kZVOreSTp6TCx7ZEeDaMxhMCylLZ70FU/jfeU=
Subject key identifier: CA:9F:4A:DA:A4:57:61:E7:04:F6:37:94:87:9C:9F:ED:52:BE:2F:7D
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01856DD3EF0CD866678CD170E2D12CDA41EB
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/yp9K2qRXYecE9jeUh5yf7VK-L30.roa
Signing time: Sun 01 Jan 2023 14:54:43 +0000
ROA not before: Sun 01 Jan 2023 14:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13097
IP address blocks: 62.100.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:ef:0c:d8:66:67:8c:d1:70:e2:d1:2c:da:41:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jan 1 14:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca9f4adaa45761e704f63794879c9fed52be2f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:af:80:a4:21:cd:b9:bc:e1:01:66:0c:09:
ab:08:49:7e:fd:06:4b:6f:96:cc:18:f8:9f:0a:16:
d4:7e:58:e1:28:9b:c0:b6:d8:fe:b2:65:ba:f0:f9:
2d:93:fe:d2:14:82:f6:05:78:df:e7:76:04:aa:14:
58:b6:a3:f1:cd:a6:0f:b6:92:16:82:37:12:30:8a:
79:76:e4:6a:5f:8a:a4:0c:a7:da:91:c5:a9:2c:df:
6c:5a:fa:79:86:ad:45:8e:ab:bd:fd:dd:bf:94:15:
a5:dd:da:0f:0c:52:cb:e9:49:a1:08:5f:89:6c:e0:
c3:b2:2f:3a:3f:07:ac:65:ce:23:2e:fe:1e:76:e6:
f8:50:15:b3:21:9f:b1:00:ba:e2:f1:5d:f5:78:b4:
14:83:cc:b2:ba:04:1d:fd:b6:56:25:53:a0:8b:e5:
6a:a7:8b:87:90:90:cf:9d:a5:a3:82:07:7b:52:e6:
89:cf:48:6f:da:c6:2e:24:42:4d:b7:61:b9:8d:1f:
42:1c:a2:99:c2:8e:59:fe:38:c7:6e:7c:f3:7e:7b:
48:25:7c:52:a9:9e:de:2e:33:1c:9f:23:3d:f6:08:
ce:5d:e1:7c:c9:6e:09:49:dd:9c:71:6b:68:3d:7e:
9c:83:be:a7:9b:c7:5d:61:d5:10:b6:5e:02:c1:12:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9F:4A:DA:A4:57:61:E7:04:F6:37:94:87:9C:9F:ED:52:BE:2F:7D
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/yp9K2qRXYecE9jeUh5yf7VK-L30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f7:28:17:09:c0:d8:93:e8:31:36:d1:a1:27:92:f5:c2:d7:
53:c0:1e:23:78:59:48:44:13:b7:34:ba:f6:a4:5f:8b:72:92:
17:41:bc:af:8e:91:49:6a:3a:bd:e7:47:27:d7:f4:8c:23:b2:
49:d2:00:fd:e3:61:a1:e0:9c:93:c9:ed:fd:6b:13:6a:c3:64:
ac:1e:68:32:d3:45:60:3a:da:ff:78:6d:c0:84:2b:f8:68:1d:
5e:c0:93:9e:a9:0c:e7:c8:ba:3b:b6:b7:ed:7b:f2:b5:18:ac:
90:77:8f:8f:dd:46:fe:e7:88:20:4a:53:d0:c2:21:e7:5e:9f:
7b:ef:ac:99:26:55:11:f2:94:0b:ef:31:8e:11:78:d7:fe:0c:
41:97:60:0d:d4:b3:18:ed:14:18:44:97:47:bc:c4:b4:24:45:
e6:ba:01:b1:59:e2:80:e9:6d:76:08:c0:9b:8c:55:ee:bc:b0:
60:ee:9b:5b:90:e5:84:be:7a:7c:da:1b:e6:3b:03:b7:de:b7:
9e:73:b7:c5:e3:3b:e4:b2:7c:60:08:d6:51:8b:0f:9d:3f:09:
04:67:e5:ec:02:c0:6f:22:c0:55:e2:4a:c7:78:95:66:bf:90:
35:f8:94:8a:81:75:8b:4b:ef:41:00:13:91:b0:c5:a8:d0:78:
3f:ae:38:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:53 2025 by rpki-client