Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/GeEqDjGAVticDH0zQJAbsQeqewU.roa
File: GeEqDjGAVticDH0zQJAbsQeqewU.roa (raw, json)
Hash identifier: i9OpjvePuTeAXivqEWfWddiOEtjVwhkhvTTrv6HrZ8o=
Subject key identifier: 19:E1:2A:0E:31:80:56:D8:9C:0C:7D:33:40:90:1B:B1:07:AA:7B:05
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 018854FCF8D1BF8721100D9415E8A9411FBA
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/GeEqDjGAVticDH0zQJAbsQeqewU.roa
Signing time: Thu 25 May 2023 22:17:24 +0000
ROA not before: Thu 25 May 2023 22:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 62.193.24.0/22 maxlen: 22
62.193.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:fc:f8:d1:bf:87:21:10:0d:94:15:e8:a9:41:1f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: May 25 22:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19e12a0e318056d89c0c7d3340901bb107aa7b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:15:62:52:79:92:9b:ff:e8:35:9c:ed:71:
4b:3c:6a:72:e5:43:b2:0a:b1:01:d4:ac:3a:e6:c7:
cb:03:a6:11:68:94:94:3a:cb:b9:f2:28:e8:98:93:
67:31:4b:74:05:60:31:91:9f:f9:3d:0a:c4:e2:4e:
58:a1:9d:31:28:10:9a:92:51:9c:3b:67:b7:33:71:
f3:59:f7:b4:78:67:3b:4b:79:f6:35:98:88:5f:e2:
d7:6e:58:eb:a4:34:22:b7:23:85:58:b2:7f:aa:f7:
af:b8:b8:50:f4:e4:a9:c9:ee:4d:d9:3c:3e:a8:ce:
f5:90:6a:f4:db:09:7d:72:fe:ba:74:d8:ba:34:a8:
90:54:76:c9:35:9d:e7:8e:ce:8a:6a:3a:f7:f2:2b:
89:18:5c:50:02:dd:f9:49:12:d9:65:5a:a3:59:d9:
10:8c:9c:76:1d:2c:05:28:97:c8:69:45:3a:26:cd:
1b:26:72:7b:33:70:97:e6:17:f2:93:a2:a6:1a:4d:
3e:42:98:a9:e7:f8:fe:af:08:98:6c:5f:10:e6:7c:
23:16:13:d7:a4:a5:0a:85:58:c5:92:96:9a:d2:46:
23:8c:71:7c:68:9a:a1:68:8e:0d:4e:7c:fe:28:23:
4c:90:dd:c8:d8:fc:b1:c7:96:0d:64:bb:6a:38:41:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:2A:0E:31:80:56:D8:9C:0C:7D:33:40:90:1B:B1:07:AA:7B:05
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/GeEqDjGAVticDH0zQJAbsQeqewU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:1c:36:7c:45:73:b9:4b:f7:3a:f4:c2:a3:66:69:5e:66:20:
f4:a6:05:58:bf:3a:3b:7f:02:33:3e:f3:14:ea:fe:b2:8d:5e:
1d:38:7b:64:81:c4:23:3f:d0:61:b9:af:3e:80:5b:00:e1:b6:
b0:d8:f2:10:4e:82:b0:4b:54:81:35:78:0a:c9:e2:cb:d1:46:
9b:ab:d3:cf:50:a9:db:21:f6:fa:68:1d:4b:a8:51:85:8c:c9:
ad:4c:7a:f9:51:56:52:62:6c:b0:e4:53:04:fa:7e:08:0a:9c:
d3:96:b8:a3:b4:b3:94:ff:e2:b0:ee:fb:3b:91:4a:18:d7:00:
58:76:7b:b3:5e:c0:3f:28:05:5f:be:44:7a:ad:63:74:53:b2:
14:6d:6d:5c:72:64:a8:c6:cf:f0:7c:f6:fc:55:21:72:ae:59:
9e:b5:19:0e:6a:bb:21:4a:3f:96:be:1d:0e:3e:b2:35:25:27:
7a:0b:78:e6:f1:1c:be:eb:7a:cc:55:1a:df:ca:00:63:13:36:
be:9e:37:0b:9d:95:1e:2e:de:c7:d1:52:76:23:26:44:e2:63:
57:df:4d:d2:ce:82:81:2d:68:60:23:d9:1f:9a:6c:b7:ea:82:
eb:90:be:c7:ea:1e:06:1c:45:0a:b0:64:40:de:d6:fa:43:5b:
6d:8f:69:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:45 2025 by rpki-client