Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Yqufpf1tN2P89WoZYsD-FHrBeuQ.roa
File: Yqufpf1tN2P89WoZYsD-FHrBeuQ.roa (raw, json)
Hash identifier: 4b7nYXBUmmyDGVZrC0vgDX1zGOHfvyxBmiyUkxTE/4Y=
Subject key identifier: 62:AB:9F:A5:FD:6D:37:63:FC:F5:6A:19:62:C0:FE:14:7A:C1:7A:E4
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01862B6B2E769241CA83DDD00C00AF455A24
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Yqufpf1tN2P89WoZYsD-FHrBeuQ.roa
Signing time: Tue 07 Feb 2023 10:28:09 +0000
ROA not before: Tue 07 Feb 2023 10:28:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39650
IP address blocks: 109.162.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:6b:2e:76:92:41:ca:83:dd:d0:0c:00:af:45:5a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Feb 7 10:28:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62ab9fa5fd6d3763fcf56a1962c0fe147ac17ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:c6:25:ac:b5:bc:72:70:08:f3:ca:a3:1f:
20:c8:47:fb:4b:81:04:c8:61:fe:a1:03:68:fe:67:
c1:fd:4d:d7:64:ea:a2:2c:ea:0c:cd:2d:20:77:be:
d2:36:b7:82:9d:a2:70:1a:25:46:c9:8a:2f:eb:f6:
e7:d0:76:d4:b6:2d:93:47:ab:c5:92:73:72:71:ca:
0b:0d:f9:af:91:30:6c:1e:a9:2d:35:a6:3f:a4:cb:
0d:19:cd:cc:d9:69:ef:27:2d:bb:ad:86:16:f6:30:
92:50:f1:2a:4b:96:30:1b:d2:46:17:8f:1b:cf:9b:
a5:08:9e:2d:fe:aa:25:fc:1d:d2:03:0a:3f:e9:f0:
5d:fb:cf:5a:3f:51:07:89:68:97:4b:11:5a:0f:58:
9b:cc:08:2f:56:b9:b0:47:59:cd:5a:aa:79:76:88:
b7:25:8f:87:ad:db:28:98:de:6f:31:c2:b1:d2:b5:
20:a9:5e:6a:d6:48:49:b5:00:11:df:08:20:a6:1a:
48:f4:be:97:0f:ca:71:4d:3c:2d:96:cc:24:ab:77:
17:cf:b4:66:42:c8:b9:5a:3c:d2:2c:f1:3d:0f:14:
10:b5:6a:99:b4:cd:b8:d3:e3:37:57:dd:52:44:b0:
84:b8:e7:cb:aa:19:c0:26:47:b3:a7:43:be:e4:0b:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AB:9F:A5:FD:6D:37:63:FC:F5:6A:19:62:C0:FE:14:7A:C1:7A:E4
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/Yqufpf1tN2P89WoZYsD-FHrBeuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.252.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4d:e3:30:35:d4:90:07:fc:e0:56:a2:e6:be:1f:c3:98:7a:
ed:02:0a:fa:ca:f0:03:84:29:fa:f9:53:ed:2d:5e:9f:bc:64:
1d:07:97:3f:43:bb:d1:20:47:4e:11:d2:cc:2f:bc:fe:29:2f:
da:2f:36:eb:b5:48:5c:c8:43:d6:78:f9:0d:65:b6:08:c5:02:
15:b4:8c:05:b2:f7:14:79:ef:0e:6f:c0:1f:5c:96:0e:2e:d1:
3e:f1:d9:bd:2d:8f:09:be:56:33:b2:8c:75:d8:e2:66:b9:52:
02:5b:95:b4:7e:63:e9:e9:fd:91:ad:96:c5:f6:98:d8:6d:ed:
85:5e:ee:44:80:74:99:d0:f8:12:de:b6:d1:63:b5:3b:b4:ee:
4d:0f:70:18:53:51:12:8c:dd:41:10:3f:93:87:ce:26:b3:b6:
85:fe:11:2a:d7:7a:a4:5a:3d:15:a5:e0:bf:22:3e:09:12:f8:
9f:c4:00:24:b1:60:61:9b:f3:34:f5:54:0c:8f:94:84:28:8c:
5f:c1:31:4a:f1:4f:81:ef:c5:7f:0f:55:0d:f5:48:65:0b:22:
66:68:1d:fa:e4:28:b7:b5:5f:78:d9:c4:f0:16:12:12:48:a0:
90:a9:24:7e:80:4a:6e:fd:56:71:3c:1d:10:6a:53:69:38:e2:
2c:18:e5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:16 2025 by rpki-client