Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rSMUDryiwgwUn9wMV5z6rV7hnrI.roa
File: rSMUDryiwgwUn9wMV5z6rV7hnrI.roa (raw, json)
Hash identifier: m6EkKvNyih6xbDKhm4lobnO7V/4u/Wtw+q0Yx2x5bDE=
Subject key identifier: AD:23:14:0E:BC:A2:C2:0C:14:9F:DC:0C:57:9C:FA:AD:5E:E1:9E:B2
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018B3788FE5CD6E6B1E5E0B118F47FD0AD3F
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rSMUDryiwgwUn9wMV5z6rV7hnrI.roa
Signing time: Mon 16 Oct 2023 08:10:06 +0000
ROA not before: Mon 16 Oct 2023 08:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199048
IP address blocks: 62.176.98.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:88:fe:5c:d6:e6:b1:e5:e0:b1:18:f4:7f:d0:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Oct 16 08:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad23140ebca2c20c149fdc0c579cfaad5ee19eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:67:6a:5a:62:3d:4d:7c:2e:d4:0d:ad:51:
2d:30:fe:65:95:e4:0c:6f:9e:bc:bc:78:9a:7c:89:
af:46:31:13:c7:05:a5:13:0e:46:fd:f2:25:c1:74:
18:0f:51:8c:9d:bb:97:f2:ea:c3:4a:4c:6e:2c:8f:
26:c7:9c:e2:67:36:f3:ab:02:1f:c5:f0:92:a9:e6:
9e:50:92:bf:bb:99:d9:97:36:a8:61:91:04:69:ce:
db:24:1b:dc:02:ae:24:9a:22:af:f8:ea:58:bc:23:
06:da:d7:90:be:e6:75:27:93:38:2a:e4:18:a3:fc:
55:12:b1:ed:6b:cb:e6:dc:59:98:98:c2:c6:47:8b:
81:ae:9b:6a:7e:26:eb:1e:df:30:a4:13:3c:59:7d:
6c:96:71:9c:1a:06:65:46:32:fe:bd:25:56:f6:f2:
f3:64:33:05:93:1c:c1:31:14:eb:68:e2:48:21:fe:
bf:c0:66:78:0c:9d:20:15:d8:12:95:9f:54:f7:a3:
18:38:18:48:df:59:be:49:c3:e1:2e:dd:47:2c:c2:
d5:fd:38:58:a6:41:b1:ba:a8:1e:0a:86:39:ac:11:
b8:20:7e:fb:c6:c1:f7:cb:65:63:5e:6a:b4:e4:fb:
8d:f0:a5:61:17:ae:50:d2:39:9f:65:44:fe:0f:bc:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:14:0E:BC:A2:C2:0C:14:9F:DC:0C:57:9C:FA:AD:5E:E1:9E:B2
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rSMUDryiwgwUn9wMV5z6rV7hnrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.98.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:e5:87:71:15:80:1a:36:b7:86:9b:de:28:08:65:d5:e7:32:
c6:e6:4e:01:d6:5b:21:96:2e:a9:31:0a:2a:3e:17:23:3b:b6:
e7:ae:40:e6:c2:4d:f8:49:08:b9:6e:78:a6:cf:1a:0a:b7:76:
68:ae:ad:a2:f4:13:db:d5:c3:1c:91:59:25:99:38:0c:e0:4b:
99:74:9e:c2:ce:14:df:4d:ce:e1:e6:e4:7c:36:8e:94:bb:be:
9f:64:6a:66:a9:e6:8f:24:f8:bd:42:11:02:fb:c1:48:49:cb:
31:66:aa:59:dd:f3:fe:18:90:0a:3e:58:34:0e:98:cd:6a:25:
c3:36:ca:2a:63:d7:c5:ae:60:30:83:ac:b5:7f:8a:55:63:56:
31:0b:5b:b7:c5:31:7c:c2:30:13:02:8e:f3:03:de:2e:b7:0c:
1a:49:ff:a9:fd:dc:3f:0d:ad:d9:72:01:d1:85:7b:d6:b6:68:
b3:d0:b8:1d:6e:33:34:07:dd:34:43:04:04:c8:e2:4c:9b:c5:
d7:51:7c:4e:f2:f3:f6:b5:fa:cf:57:df:e5:df:bf:59:72:5d:
71:3b:97:f0:5d:d6:ab:40:e5:05:eb:e9:f8:4b:86:6c:cd:76:
4a:bf:74:d9:2f:c2:63:42:a0:2a:f0:27:5a:2d:13:d8:e2:cd:
76:53:82:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:27 2025 by rpki-client