Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/2WHIib7Fkv3TNnCKNZVV6Z-DBAM.roa
File: 2WHIib7Fkv3TNnCKNZVV6Z-DBAM.roa (raw, json)
Hash identifier: SgrodXLtbBgjE0m19Z+h6Bc5cFPg84QufoUXg7YcMP0=
Subject key identifier: D9:61:C8:89:BE:C5:92:FD:D3:36:70:8A:35:95:55:E9:9F:83:04:03
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01896441F628C515988B585916AEC0E87272
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/2WHIib7Fkv3TNnCKNZVV6Z-DBAM.roa
Signing time: Mon 17 Jul 2023 14:29:51 +0000
ROA not before: Mon 17 Jul 2023 14:29:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48179
IP address blocks: 62.85.128.0/19 maxlen: 19
2a00:ec80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:41:f6:28:c5:15:98:8b:58:59:16:ae:c0:e8:72:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 17 14:29:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d961c889bec592fdd336708a359555e99f830403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:88:53:33:97:3c:ee:2f:5b:23:e0:5a:a5:
f7:76:8b:54:05:5e:90:a3:e7:65:2c:11:f8:81:e3:
bf:04:22:02:c9:44:6a:f4:29:4c:bc:44:62:39:5e:
8f:c7:97:ef:ba:a6:96:23:24:e9:c6:c4:f4:c6:12:
66:8c:1e:a1:8c:57:cf:8d:4b:e9:1b:b2:a4:f2:be:
b3:ca:2d:8d:46:7e:c5:5a:6e:d4:12:3c:da:78:48:
3a:73:c9:3c:0a:de:04:88:f2:b7:0d:c6:5d:28:07:
4a:3b:9f:c2:54:0b:db:d6:84:17:f4:75:29:a7:80:
6a:0a:8c:3c:cf:90:e7:38:3d:02:cb:42:70:88:d9:
87:53:ad:1c:ff:64:a2:de:c3:45:90:b5:52:c4:d0:
5c:4f:eb:b4:a4:c1:97:4a:af:11:23:a7:ad:ef:63:
02:3d:f2:b9:a8:c1:a3:59:a4:d1:88:b3:c8:c6:1e:
1d:e9:6c:04:e3:52:a1:68:9d:f6:c9:b4:13:4b:96:
aa:15:d4:4f:3a:df:53:49:77:2d:59:2f:ab:5d:c9:
86:81:ff:65:c8:39:ba:9a:3c:59:ac:88:04:31:49:
0e:73:d5:93:1e:cc:af:20:f0:2a:88:dd:2b:91:71:
13:49:13:a9:9a:af:12:86:4b:93:5d:5f:3e:74:a1:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:C8:89:BE:C5:92:FD:D3:36:70:8A:35:95:55:E9:9F:83:04:03
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/2WHIib7Fkv3TNnCKNZVV6Z-DBAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.128.0/19
IPv6:
2a00:ec80::/32
Signature Algorithm: sha256WithRSAEncryption
96:7b:79:83:2a:1b:66:75:6e:23:e1:33:6b:e7:bd:99:57:5c:
3a:f2:39:2c:2a:71:46:82:fe:05:5a:e5:82:62:59:e8:0c:71:
08:8b:9c:b9:ac:bc:0d:e4:36:d4:0c:95:7c:cc:76:c7:76:e9:
b8:e1:be:cc:d9:50:26:28:f0:20:d3:ab:e8:e2:16:45:46:aa:
9c:1c:cd:48:83:92:d9:f1:c7:79:c4:c2:d1:c8:79:9f:52:3e:
be:22:98:2c:1d:c3:57:5d:14:4c:52:b8:14:ec:7d:76:01:06:
07:15:1d:1e:88:ee:be:c9:d6:e5:cf:f2:00:1d:bd:a0:15:39:
8b:c2:74:2e:28:dd:eb:03:7c:30:58:3c:5e:64:59:02:a9:2b:
2a:30:19:e4:d8:d2:e6:43:39:97:2f:a0:35:88:a2:98:b9:36:
18:1f:d4:28:a5:43:1c:32:aa:2e:4e:e7:03:03:6a:d4:43:cc:
cf:4d:0d:5a:4c:de:05:3d:8a:09:eb:87:5e:a1:57:3a:24:7e:
da:15:e6:da:d6:18:8d:8a:e3:f0:61:14:af:f6:03:37:c8:f4:
be:e6:59:08:d8:7c:81:87:02:05:d8:18:59:0e:c4:96:df:9d:
41:29:b2:16:36:ab:87:4a:e3:64:fc:7d:88:36:73:78:58:e0:
95:e5:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:58 2025 by rpki-client