Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/RSJW8uyzgsSjWum8YkkFqnx7xb4.roa
File: RSJW8uyzgsSjWum8YkkFqnx7xb4.roa (raw, json)
Hash identifier: RhoBV25oOrpdCE12077xgwF9jK74gV1zTv5kUlV9pL4=
Subject key identifier: 45:22:56:F2:EC:B3:82:C4:A3:5A:E9:BC:62:49:05:AA:7C:7B:C5:BE
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 01856DCAFD8D6D8441F6BD36CF812FCD8FA9
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/RSJW8uyzgsSjWum8YkkFqnx7xb4.roa
Signing time: Sun 01 Jan 2023 14:44:57 +0000
ROA not before: Sun 01 Jan 2023 14:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210646
IP address blocks: 62.233.37.0/24 maxlen: 24
2a11:9d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fd:8d:6d:84:41:f6:bd:36:cf:81:2f:cd:8f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: Jan 1 14:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=452256f2ecb382c4a35ae9bc624905aa7c7bc5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:fd:96:66:6d:54:f0:66:07:6b:e2:c0:c2:
7c:67:9b:ce:0a:69:1a:41:0e:7f:f8:c2:89:44:37:
53:10:c3:ac:4c:ce:50:ad:63:28:f6:95:a5:87:d7:
9f:f3:21:d9:a6:84:ff:3c:4f:14:cf:0f:25:4b:41:
4a:b7:72:a3:53:25:f7:49:b1:e3:b0:79:c8:b2:57:
8c:ac:29:5f:c3:1a:5b:bb:16:5d:b2:96:c9:23:c6:
9f:66:b0:50:f3:12:16:3c:26:ef:0b:dc:aa:1d:09:
ab:97:6a:de:55:b2:78:7e:bb:81:67:02:f3:55:a4:
cd:b5:35:e0:1d:44:86:db:71:0f:a8:65:82:59:04:
4a:05:da:05:ff:da:56:62:ed:05:2c:78:5d:e0:45:
15:a0:30:35:f7:bc:91:37:34:45:05:27:6f:ea:15:
76:3c:28:a5:68:d6:9c:53:75:0d:89:4a:61:3a:8a:
62:d2:9e:c6:03:6f:3e:8f:40:74:d8:e0:c4:ae:d2:
42:96:50:60:e2:ec:23:ec:e1:07:04:4e:95:c7:72:
eb:0d:60:65:bb:c6:e1:67:d3:d5:05:f8:91:28:95:
07:d1:59:5b:e7:1b:97:5d:28:0b:c1:bc:f2:0f:06:
15:6a:44:17:2f:a9:93:9a:1d:10:3d:13:ac:7e:62:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:22:56:F2:EC:B3:82:C4:A3:5A:E9:BC:62:49:05:AA:7C:7B:C5:BE
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/RSJW8uyzgsSjWum8YkkFqnx7xb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.37.0/24
IPv6:
2a11:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
09:da:05:8d:a3:ee:6c:74:d8:6e:81:ab:b4:dc:53:61:79:a7:
2c:73:ac:53:6c:70:5f:e9:4d:7c:4f:d7:b9:f3:1e:c3:a3:f7:
f2:98:5f:8e:cb:59:c3:d6:68:47:3d:c2:9a:75:12:3d:1c:7c:
38:65:21:a5:49:96:ce:ac:4e:9a:b3:49:d8:d5:69:7c:be:e1:
f8:1a:91:70:e4:92:2b:cb:8b:ef:cd:91:e0:e0:ce:d7:e2:ad:
1d:86:46:cc:1f:35:66:61:5a:98:ce:f0:f5:49:30:d6:0c:cc:
04:f4:2a:0a:99:51:d9:81:50:3c:20:5e:03:f5:7e:c2:18:6e:
34:90:a4:56:7f:6b:4a:79:7f:ec:c9:dd:c5:a1:fe:42:d5:1a:
07:1f:89:db:06:2d:c3:0f:a9:1b:d0:a4:7e:7c:4e:11:48:96:
ea:e7:d8:26:d1:51:32:0e:33:bd:82:49:05:22:83:11:5a:e5:
18:0d:6a:8a:19:13:6d:4b:2c:33:1b:55:c1:4b:32:2e:64:5c:
9c:1e:e1:67:f3:2f:b4:8d:0e:d2:bc:60:80:3d:53:f0:a4:e5:
ea:be:43:3a:0d:cd:35:ad:10:20:56:86:6e:68:08:b5:81:70:
c7:00:4f:06:3d:47:70:f1:ad:14:95:b2:df:cb:3e:9a:1c:33:
01:2e:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:26 2025 by rpki-client