Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/m88R3m7vApibfIzE75Gq9ITR0TE.roa
File: m88R3m7vApibfIzE75Gq9ITR0TE.roa (raw, json)
Hash identifier: K9uxsfxoMIXbpzO1kIXqezo6+KO8FfXAZfjzZLhhE8o=
Subject key identifier: 9B:CF:11:DE:6E:EF:02:98:9B:7C:8C:C4:EF:91:AA:F4:84:D1:D1:31
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0185707062839131238DB72C2BABAD246A09
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/m88R3m7vApibfIzE75Gq9ITR0TE.roa
Signing time: Mon 02 Jan 2023 03:04:51 +0000
ROA not before: Mon 02 Jan 2023 03:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197333
IP address blocks: 62.33.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:62:83:91:31:23:8d:b7:2c:2b:ab:ad:24:6a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bcf11de6eef02989b7c8cc4ef91aaf484d1d131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:f2:f9:68:26:94:63:b0:ef:7f:f0:b5:79:
f9:7e:87:e6:7b:61:64:e6:1f:73:6c:fb:34:ca:66:
8b:50:57:cc:ce:d7:af:c0:94:69:6c:77:04:71:7a:
91:c7:83:f7:7c:9b:25:4f:27:d4:2f:8d:2f:f0:d5:
c8:d5:fe:f6:52:df:0d:6f:b6:39:a7:b4:41:9b:11:
ed:b1:a8:82:aa:5d:7b:a9:75:ee:f2:24:a4:b3:35:
d0:3c:6e:07:94:91:26:9f:dc:4c:f9:ca:41:24:8f:
51:3e:46:87:a9:5b:f3:87:a8:e1:49:37:b2:7f:86:
5a:fe:42:f1:6e:9a:d6:5a:7c:c5:87:6f:e0:af:0e:
23:4f:e7:21:d7:eb:34:5f:7e:e2:af:94:cb:68:5f:
62:07:d4:88:85:3f:f7:6a:ad:08:43:8f:af:a5:e1:
01:5a:a8:51:e3:ee:af:da:ba:87:55:4e:ce:8d:20:
b0:1b:12:16:e7:0d:82:f0:d7:b8:5b:4a:77:41:51:
9d:2a:38:26:57:2d:5b:5f:b5:af:c5:43:42:b2:5d:
93:77:2f:36:d0:15:f9:53:ae:f9:9e:e0:a5:3e:e6:
63:ca:cd:4c:7e:3b:20:97:b3:e8:0f:e5:40:4a:e2:
4a:aa:46:80:39:e2:ad:5e:e2:86:a5:71:69:be:7a:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:11:DE:6E:EF:02:98:9B:7C:8C:C4:EF:91:AA:F4:84:D1:D1:31
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/m88R3m7vApibfIzE75Gq9ITR0TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.33.24.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6d:ac:14:24:7f:be:96:08:ef:9e:3f:d6:49:34:85:ab:b6:
57:4a:d0:ac:c7:b9:57:03:f1:4a:9d:c3:d8:e9:21:e7:7a:68:
fd:3e:3e:a9:c0:4b:66:88:52:12:ad:81:19:56:36:76:69:76:
fa:6e:a7:da:91:64:7c:32:8d:b1:4d:63:7c:fc:ed:98:3d:7a:
79:3c:47:30:ba:99:69:b1:e6:60:db:60:4a:d0:4f:7c:75:e4:
c7:47:9f:82:a5:b5:31:9e:11:0d:b1:3c:93:05:11:e3:a7:5c:
30:16:b5:c7:bd:4f:6f:7f:c2:a5:ff:d4:b1:22:87:15:5e:35:
7f:96:68:14:7e:41:ed:23:4a:f9:01:c1:d9:c8:a4:72:94:b0:
ec:27:35:89:67:ac:2f:b4:0f:39:64:dd:90:45:74:23:ad:04:
1f:41:ea:a4:90:e6:52:ec:99:05:a0:64:16:64:a5:20:86:79:
a7:64:4b:d5:8e:ec:d2:75:70:03:2f:db:f5:6e:2a:70:21:d7:
f8:59:e1:0d:c7:f7:cb:36:d3:1d:37:0e:0a:75:8c:15:07:1b:
51:a2:64:38:58:36:eb:94:71:45:3b:5d:8c:a6:ee:71:44:dc:
1a:6a:b2:7a:29:c5:99:ad:02:85:26:4b:a1:4a:fa:ef:bf:85:
f8:6c:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:49 2025 by rpki-client