Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/1-jdeiMR1oxHHoAQAxoln61TuuD4.roa
File: 1-jdeiMR1oxHHoAQAxoln61TuuD4.roa (raw, json)
Hash identifier: FFcDKRvlGEs6yp45edBdIAE+nsENtrfD5MOwMkl/4xg=
Subject key identifier: FA:37:5E:88:C4:75:A3:11:C7:A0:04:00:C6:89:67:EB:54:EE:B8:3E
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 0185715537F1FFA5EAF3B87B7EB5B270E8C1
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/1-jdeiMR1oxHHoAQAxoln61TuuD4.roa
Signing time: Mon 02 Jan 2023 07:14:48 +0000
ROA not before: Mon 02 Jan 2023 07:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25091
IP address blocks: 62.106.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:37:f1:ff:a5:ea:f3:b8:7b:7e:b5:b2:70:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Jan 2 07:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa375e88c475a311c7a00400c68967eb54eeb83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:e9:e6:79:ba:2c:07:70:0e:13:87:37:bd:
0d:1d:9d:57:91:7f:21:67:64:0f:31:05:ec:64:de:
de:6d:f4:69:ad:fb:7e:d6:a7:3b:ff:a8:86:b5:61:
ae:6b:22:55:83:0a:26:f6:f5:a6:1e:4c:8b:80:f8:
f1:58:4b:f0:83:ff:9b:3c:b9:1c:71:18:d2:0b:d2:
9a:38:8c:93:22:8c:23:32:c4:6e:fd:ee:4a:28:8e:
b3:45:ff:cb:01:3c:7a:41:09:30:f7:21:a5:ba:34:
a3:62:33:53:ef:f5:53:05:44:49:4f:a1:5c:e7:7d:
f7:13:78:be:1a:43:94:90:65:34:45:ec:94:a8:00:
c1:e9:4a:a4:3b:b9:42:f1:c0:41:c0:0d:1e:ac:18:
f2:5a:55:ee:ed:10:f2:31:66:c2:51:80:84:3e:57:
c6:7c:05:96:fb:c3:6f:2a:c4:0f:86:0a:91:8a:b7:
a5:a4:8e:85:b5:ce:00:d2:49:a5:9b:32:99:e5:08:
7d:4b:6a:b3:10:cf:57:62:ba:cc:e9:32:89:37:5c:
13:b5:71:0c:89:72:38:02:67:e9:10:48:b3:e3:09:
c6:79:d2:b2:a7:7b:f3:df:02:d8:71:4e:de:70:dc:
cf:7d:4b:cb:5f:0f:86:79:6f:8a:a4:e2:d4:9b:03:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:5E:88:C4:75:A3:11:C7:A0:04:00:C6:89:67:EB:54:EE:B8:3E
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/1-jdeiMR1oxHHoAQAxoln61TuuD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.93.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0d:cc:b4:28:cc:08:9d:63:e8:a9:5d:c6:2d:c2:f5:32:38:
79:6a:2c:ce:e0:7b:57:7f:bf:36:59:b8:10:42:5a:20:a5:d2:
7c:02:3c:b5:38:29:c8:9a:4a:5a:0d:5f:3f:8c:a0:10:47:b5:
f0:28:e8:c6:40:a5:c4:7d:d9:29:48:c3:f7:7e:bd:fa:2e:ec:
26:00:d1:f6:13:73:4e:62:a1:2f:bf:5e:bc:f3:4c:14:3d:8b:
6f:61:1a:a1:fa:9a:af:43:f4:b7:87:3c:a2:74:d2:74:48:7f:
0f:b9:42:10:e7:96:0c:c3:ad:12:9c:05:ca:3c:21:b8:01:57:
7d:a6:58:f9:99:e4:5d:92:a8:60:49:50:80:c8:40:b8:5a:7c:
5d:66:2e:bb:ba:8a:2b:6c:0b:59:3c:52:20:19:e5:3c:1d:20:
c6:63:47:f4:81:48:08:4a:b2:ce:15:0a:f0:1e:71:fc:a9:77:
de:bb:11:a0:3d:01:ec:0d:48:e7:da:71:a4:f9:fb:a8:de:a0:
ba:c0:a5:cd:98:40:e1:a1:7a:c2:ca:dc:1c:87:fa:d8:16:4d:
5e:0c:09:62:f9:85:18:7b:5b:cf:77:73:23:ff:e3:0b:23:b8:
15:05:7e:c8:84:1f:ce:09:2d:ff:14:b4:06:cd:15:e1:a9:b8:
27:53:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:23:28 2025 by rpki-client