Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/5jYCsvgGlzFx7pYBMI2mYC1CsPA.roa
File: 5jYCsvgGlzFx7pYBMI2mYC1CsPA.roa (raw, json)
Hash identifier: yIfQZP7MSsntK+l2hBER0eXXbj1RbUbzqF3mIv9dlsw=
Subject key identifier: E6:36:02:B2:F8:06:97:31:71:EE:96:01:30:8D:A6:60:2D:42:B0:F0
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018BFCF82C029F24D66DD678C47A6B791886
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/5jYCsvgGlzFx7pYBMI2mYC1CsPA.roa
Signing time: Thu 23 Nov 2023 16:16:44 +0000
ROA not before: Thu 23 Nov 2023 16:16:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200436
IP address blocks: 62.3.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:f8:2c:02:9f:24:d6:6d:d6:78:c4:7a:6b:79:18:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Nov 23 16:16:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e63602b2f806973171ee9601308da6602d42b0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:8c:f9:46:d8:2f:82:1a:49:6f:2c:54:a3:
2d:cd:65:b8:e5:08:d5:56:86:d4:07:f2:ee:12:7d:
00:ae:0f:e6:2b:45:f0:0b:ff:a7:47:9d:28:b0:ec:
be:b3:1b:67:00:a4:97:2a:9f:5d:23:60:1d:8a:ee:
48:7c:67:6e:5f:c4:df:76:f1:3d:7c:b7:e5:ac:6b:
59:6f:6a:fd:8f:41:21:d4:48:99:23:bd:13:df:0b:
3f:3f:bd:9a:b0:55:3a:89:39:d6:6b:dc:fb:f6:fe:
23:ae:3f:a2:e3:2c:fc:e0:b3:db:a6:31:9b:d7:3c:
03:7e:66:a7:03:4d:d8:1a:4c:e0:79:68:13:fd:d5:
41:4c:a5:0c:73:46:0d:d2:65:f0:c2:55:8a:f8:28:
24:30:7d:2a:56:1d:f5:da:1c:dd:a2:7e:9d:c7:5c:
d6:c1:dc:ec:08:f4:da:03:3c:d5:ca:a5:73:dd:d7:
e0:0e:c3:c4:78:54:fe:7f:5b:90:cb:ff:64:e6:45:
17:88:5b:5b:ab:29:fd:0e:c7:4e:c1:14:61:13:79:
ed:ff:a7:c0:33:52:9d:5d:2a:e4:bf:9b:69:8c:3b:
e5:71:14:62:43:e7:b3:b7:1b:6d:a5:ed:f3:c0:a3:
30:82:a3:ef:ff:0e:59:76:5f:35:99:6b:3e:ee:7a:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:02:B2:F8:06:97:31:71:EE:96:01:30:8D:A6:60:2D:42:B0:F0
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/5jYCsvgGlzFx7pYBMI2mYC1CsPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7c:54:98:0d:77:30:bc:07:3a:a5:9e:44:62:e7:49:73:cf:
46:81:80:72:a0:4e:d0:88:4c:ff:f5:aa:f2:09:d4:c1:e7:15:
13:6f:43:78:e8:dc:75:3d:ff:be:12:b9:ed:8e:b8:aa:93:07:
89:f3:38:4f:02:25:cc:c8:2e:a9:59:0f:e3:20:d3:67:1e:c3:
8c:e7:8e:e3:5d:03:8c:4c:4a:6f:01:e3:f2:5d:ec:92:4e:32:
c3:00:ed:a2:7c:d5:2b:79:d4:9e:cb:ad:ac:0c:0c:8e:d0:b6:
fd:6d:5f:cc:51:b8:56:95:f0:27:b6:46:9b:14:71:69:26:29:
59:fc:7b:67:e1:a6:ab:b7:83:ec:14:d1:79:d2:30:4c:dc:e4:
92:ec:97:6c:83:f0:fd:02:2b:18:9f:07:7c:03:04:06:42:68:
85:4f:9e:92:4c:20:2d:15:15:64:45:0d:e7:70:f7:9b:b0:78:
9c:a6:fd:e7:dc:45:99:29:fa:c5:88:13:d4:df:0e:4d:5a:1f:
7a:2e:c0:31:24:ee:c7:f2:cb:a9:51:22:91:05:5f:75:f9:bc:
7b:1f:08:f6:77:68:62:07:94:09:4f:83:a6:35:76:aa:91:43:
cf:8b:d7:12:8d:cb:c6:97:3e:07:9c:ee:41:66:b7:4e:4b:ca:
70:43:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:05 2025 by rpki-client