Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8zqs1TNGOFhUnzX85SHE8pBz6d0.roa
File: 8zqs1TNGOFhUnzX85SHE8pBz6d0.roa (raw, json)
Hash identifier: CUTBOaTwj8TcIrQsJEg/Mk04cR9A/TIwj7QJDhsYFhI=
Subject key identifier: F3:3A:AC:D5:33:46:38:58:54:9F:35:FC:E5:21:C4:F2:90:73:E9:DD
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200E95F583BE1FFEBEDCE8930474A4B79
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8zqs1TNGOFhUnzX85SHE8pBz6d0.roa
Signing time: Fri 15 Jul 2022 08:11:10 +0000
ROA not before: Fri 15 Jul 2022 08:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48179
IP address blocks: 62.85.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:e9:5f:58:3b:e1:ff:eb:ed:ce:89:30:47:4a:4b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f33aacd533463858549f35fce521c4f29073e9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:14:cb:1c:23:19:53:27:d0:ad:b6:37:4c:
41:cd:5b:aa:cd:22:7a:54:0f:00:a5:31:22:5a:fd:
8b:7c:dd:e7:81:c7:2d:38:82:67:c3:64:e0:f0:03:
5d:c6:98:a7:ec:e6:ab:38:d7:d8:dc:be:5d:ff:7c:
6b:02:60:fb:48:92:d1:77:1d:50:8a:2a:b0:8b:cb:
f4:4c:ce:a0:f9:00:a9:1d:55:ec:a1:55:bb:5e:e4:
ab:ba:65:05:c0:bc:b3:f7:71:ce:59:9e:d6:7c:5c:
de:37:74:94:e5:e3:e5:ab:7d:bf:7b:04:1f:cd:05:
5c:3e:b3:03:bf:d1:10:b7:f9:ee:df:11:b1:fd:c2:
c0:37:15:ec:cc:c2:2d:d4:2c:bc:e0:5a:5b:7b:de:
f6:ae:4b:44:41:9e:53:80:2c:4a:e7:2c:f3:a3:12:
c0:e7:3f:b8:d0:b8:55:5c:32:91:51:82:23:a1:79:
17:34:71:f9:a4:26:e6:8d:5c:d4:ff:43:93:b2:eb:
ee:c0:40:49:83:87:a8:27:b1:3b:58:e3:8f:e5:b7:
04:fa:b4:83:b8:cd:fa:e2:ea:a8:d0:46:ba:38:fa:
23:5e:9a:8b:fe:57:16:9d:52:0c:ba:f7:f7:2e:0c:
0b:ef:5b:a9:32:ed:5e:42:c3:4f:d7:7e:47:8d:81:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:AC:D5:33:46:38:58:54:9F:35:FC:E5:21:C4:F2:90:73:E9:DD
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8zqs1TNGOFhUnzX85SHE8pBz6d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:0f:22:a8:1f:12:34:11:f6:c7:7d:c0:a9:a0:36:85:ed:02:
b0:64:e6:1f:8c:4b:48:6d:a4:51:1a:72:9f:76:b0:9b:81:0d:
a2:b6:97:c2:05:9c:79:51:df:3c:0c:6b:7b:07:7a:e0:d9:69:
7c:41:d0:fb:75:e2:81:64:0d:af:9a:be:d0:c6:65:bb:ca:56:
59:fb:94:b0:7a:57:f9:5a:b3:a2:76:37:06:c8:ca:f1:4d:08:
29:fa:a5:a1:b7:07:51:93:92:65:9b:bd:66:f4:59:09:d3:cf:
d9:a3:e0:54:88:fb:50:66:70:ea:f1:c2:a5:bc:e1:5b:14:99:
3f:d8:a2:27:e5:28:aa:1e:30:99:fd:23:1d:3b:3b:bf:88:37:
b8:54:74:e4:21:55:a8:73:53:1f:7a:a1:9f:0f:31:11:44:1c:
1a:85:4a:8c:33:7e:4c:44:8f:37:61:cf:26:b0:d2:b6:dd:da:
b4:41:ca:71:2c:1c:00:88:dc:8f:51:46:71:bf:4a:07:1e:a4:
97:54:47:6f:bb:bf:f2:b6:d0:5b:33:d7:71:44:d7:27:1d:dd:
29:e3:be:e2:57:f0:b6:2b:85:3f:32:11:40:da:a2:c2:b4:17:
ab:79:7b:94:5f:e2:51:3c:5b:96:7a:c9:ae:6b:fd:90:9c:fc:
44:79:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:15:59 2025 by rpki-client