Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/cEd0tL2XDGoin-SgROeVGHWGn9s.roa
File: cEd0tL2XDGoin-SgROeVGHWGn9s.roa (raw, json)
Hash identifier: n0Hysj00Hpa3ryQF2BX5XcMun9F4/rIr4PMB0RcerWo=
Subject key identifier: 70:47:74:B4:BD:97:0C:6A:22:9F:E4:A0:44:E7:95:18:75:86:9F:DB
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01856B93437B35850DCCA6CACA3BB3B8AEF0
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/cEd0tL2XDGoin-SgROeVGHWGn9s.roa
Signing time: Sun 01 Jan 2023 04:24:51 +0000
ROA not before: Sun 01 Jan 2023 04:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15685
IP address blocks: 92.63.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:43:7b:35:85:0d:cc:a6:ca:ca:3b:b3:b8:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 1 04:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=704774b4bd970c6a229fe4a044e7951875869fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:fb:65:ca:3b:6a:93:fc:f4:ce:6a:cf:38:
cd:47:8d:a2:3d:e8:4d:1e:2b:a9:9c:93:9b:44:5c:
f6:2a:9e:b9:c2:a0:3c:43:3c:0f:8d:85:53:d9:eb:
f2:1c:81:6a:ac:22:f6:f7:4c:25:e9:4c:29:6a:5d:
b9:a4:54:68:30:06:29:28:06:82:b4:c5:c8:d0:62:
9d:49:15:7a:e9:ad:b2:67:17:0f:57:07:97:4c:ca:
61:9b:bf:14:d8:3d:96:fe:1d:17:fc:e7:a3:ea:93:
ea:86:df:1f:ca:3f:01:d8:64:2f:e0:91:40:94:e4:
2a:86:ba:12:27:8e:0b:2d:70:23:e2:aa:f5:ab:e1:
6f:3e:3a:5f:ec:5f:ac:98:0c:e8:36:a0:cd:14:00:
0f:d3:52:7a:fc:3b:91:cb:78:6f:33:93:fa:c9:41:
20:42:9e:41:74:79:0a:80:f8:7a:34:14:bf:f5:ee:
96:ac:5e:f5:c4:dd:6b:1a:f6:48:97:71:a1:51:07:
32:71:65:10:81:88:f4:a1:0f:17:86:f8:33:9d:d4:
c2:78:ea:1c:b0:ec:4e:59:08:67:78:b9:39:73:0d:
3f:3e:6e:d4:29:95:65:f2:98:4e:c0:f1:e0:df:9e:
44:cd:76:55:e8:82:38:e8:b2:d6:3a:4a:12:59:c4:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:74:B4:BD:97:0C:6A:22:9F:E4:A0:44:E7:95:18:75:86:9F:DB
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/cEd0tL2XDGoin-SgROeVGHWGn9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.57.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a3:fd:45:28:e5:f2:ff:30:79:7c:36:7e:65:d8:f8:b0:04:
4c:e9:c0:7c:c4:8d:35:63:d6:94:55:94:dd:2e:29:49:dd:a5:
5d:74:45:6f:59:65:9b:da:a1:29:0b:e0:83:8e:5a:a3:9a:f6:
ba:b8:3d:6d:5d:b1:65:e3:74:bb:9d:8b:4f:2a:3b:78:7f:c6:
59:41:17:c5:23:43:2d:b1:ad:fe:69:6b:c8:79:31:0e:6e:99:
6f:b0:3b:c3:e2:e0:84:b1:93:ca:78:d5:e1:b4:00:b0:bc:2e:
81:ca:0a:00:2f:8e:fc:78:4f:d8:9c:f6:c8:18:ac:ae:c8:97:
0e:e2:53:e4:11:c2:e1:7c:38:f9:4c:fe:c0:a0:de:b4:db:a1:
35:9b:82:5c:a6:0e:4b:4a:17:d0:f4:94:60:1c:fe:52:88:7b:
e8:e9:35:8e:f3:25:c5:c4:87:91:c5:9e:63:15:d5:33:23:bd:
e6:68:77:37:8d:03:73:58:a1:ad:fe:f5:d7:e1:c9:7e:61:d1:
d7:af:07:30:9e:60:24:ac:37:f0:b4:76:27:b1:bc:bc:d8:66:
71:28:0f:ca:1b:8c:e3:68:a5:6f:da:8b:97:20:df:45:87:25:
17:85:77:f4:fc:48:56:7e:37:45:ec:2b:44:a6:19:d1:d5:2c:
61:36:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:00 2025 by rpki-client