Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/y_XuFw-0DYXeq8PKfggcd5RGRlw.roa
File: y_XuFw-0DYXeq8PKfggcd5RGRlw.roa (raw, json)
Hash identifier: HaooIcrjO0BadUuxbdykHxw/VWzEdL6sCvC2D2TaMyw=
Subject key identifier: CB:F5:EE:17:0F:B4:0D:85:DE:AB:C3:CA:7E:08:1C:77:94:46:46:5C
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 045D7DCD
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/y_XuFw-0DYXeq8PKfggcd5RGRlw.roa
Signing time: Thu 07 Apr 2022 05:03:02 +0000
ROA not before: Thu 07 Apr 2022 05:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5618
IP address blocks: 62.193.16.0/24 maxlen: 24
62.193.17.0/24 maxlen: 24
62.193.12.0/23 maxlen: 23
62.193.13.0/24 maxlen: 24
62.193.14.0/23 maxlen: 23
62.193.14.0/24 maxlen: 24
62.193.15.0/24 maxlen: 24
62.193.18.0/24 maxlen: 24
62.193.20.0/24 maxlen: 24
62.193.21.0/24 maxlen: 24
62.193.3.0/24 maxlen: 24
62.193.4.0/24 maxlen: 24
62.193.5.0/24 maxlen: 24
62.193.6.0/24 maxlen: 24
62.193.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73235917 (0x45d7dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Apr 7 05:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbf5ee170fb40d85deabc3ca7e081c779446465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:7a:bb:1f:dd:c9:2e:b3:3d:50:70:bd:bb:
08:85:ae:6e:f5:ba:fd:90:5b:37:6b:e8:5d:2c:02:
b7:22:f8:45:69:0a:dc:3c:e1:a7:d3:4d:a0:2b:7d:
fb:40:9b:a4:54:e2:01:de:60:bc:c3:4f:38:33:ad:
0d:7b:c7:f4:b6:fa:72:b0:e7:36:0f:d5:3b:d8:d8:
65:1a:a5:7f:f1:0b:c5:13:66:05:23:e2:00:ca:e1:
2f:57:c0:b5:0f:42:4c:ab:68:af:1a:ba:71:53:ad:
27:3e:0f:38:8f:1e:bd:cc:95:21:6b:93:6d:58:81:
f6:d4:0d:b3:04:4d:04:b8:d1:78:91:15:1e:c8:82:
bf:e4:c1:97:14:05:fe:47:97:de:3a:db:c9:9a:b6:
ca:41:7f:a7:05:5b:de:6d:e7:26:a4:3e:9a:ef:b4:
84:50:8e:67:f9:0d:50:8e:27:41:e3:82:86:b7:52:
f3:a8:8b:17:1c:d9:d3:72:40:12:0b:93:8f:c1:d0:
ff:d6:cc:1e:cb:df:44:d8:da:ec:1c:5c:54:11:d8:
14:a4:54:a6:2e:ab:d7:32:fc:84:b0:96:36:d8:32:
d2:19:b6:b9:64:9e:8a:00:81:cb:ae:26:96:94:d1:
09:40:ba:12:6c:4f:a6:94:0d:1c:95:88:19:64:c6:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F5:EE:17:0F:B4:0D:85:DE:AB:C3:CA:7E:08:1C:77:94:46:46:5C
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/y_XuFw-0DYXeq8PKfggcd5RGRlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.3.0-62.193.7.255
62.193.12.0-62.193.18.255
62.193.20.0/23
Signature Algorithm: sha256WithRSAEncryption
14:6b:bc:50:11:f6:00:63:d1:21:60:d1:e0:de:bd:93:b5:0f:
01:14:a1:b4:c7:fd:2a:60:02:13:53:c4:39:6e:18:f4:76:8f:
92:04:4d:a9:4f:1b:18:99:82:7d:ac:6a:4b:6d:75:05:05:45:
95:f5:76:aa:8a:61:37:9b:1e:14:76:02:cb:d9:97:51:5a:58:
22:56:9b:ec:40:16:25:17:e2:d3:38:c0:f1:5c:f4:23:41:f8:
0c:e8:ad:83:8f:b0:d7:d3:17:74:c9:68:75:cc:67:e6:44:5e:
aa:8d:1c:10:b0:95:c6:40:79:93:c6:21:50:b4:8c:e4:75:4c:
aa:7b:ba:d1:f1:9d:43:54:d7:9a:a9:1a:ac:40:95:15:3d:d8:
31:d6:a5:7a:8a:ae:dd:fa:87:43:12:7a:a3:c1:e1:09:b5:2e:
33:f2:f4:2d:c4:2f:c3:24:d7:72:45:63:c4:d8:e1:61:be:02:
c8:fe:e5:ab:77:d2:a5:9b:56:12:78:5b:e2:9f:40:7f:58:de:
29:44:45:92:9d:26:8d:7e:f5:2e:b4:0e:40:96:b4:57:c8:75:
e4:72:7c:f9:98:a1:b6:f3:72:ef:70:51:4e:3f:37:1e:c4:d2:
45:08:78:c3:c6:25:90:56:9a:23:c7:2d:dd:ed:fa:37:99:08:
36:ed:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:59 2025 by rpki-client