Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/62J1s2czdKy663WKNM1GcS8Fnn4.roa
File: 62J1s2czdKy663WKNM1GcS8Fnn4.roa (raw, json)
Hash identifier: zCyBmgtPUS14YlNa0wJuKfGKarkcXKqeXnEeXMEs+ek=
Subject key identifier: EB:62:75:B3:67:33:74:AC:BA:EB:75:8A:34:CD:46:71:2F:05:9E:7E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018921B7F311062B8DDADB53431F008675D2
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/62J1s2czdKy663WKNM1GcS8Fnn4.roa
Signing time: Tue 04 Jul 2023 16:24:10 +0000
ROA not before: Tue 04 Jul 2023 16:24:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60566
IP address blocks: 45.140.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:b7:f3:11:06:2b:8d:da:db:53:43:1f:00:86:75:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 4 16:24:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb6275b3673374acbaeb758a34cd46712f059e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:48:af:71:91:3b:a3:12:a0:4a:26:a4:b4:
e1:82:44:a8:72:d6:7a:f7:aa:f0:fa:f8:ca:31:08:
06:c8:47:db:ed:09:cd:7f:1a:b4:3e:e1:c8:0c:8d:
51:f8:48:6c:07:25:bc:55:f4:cb:56:33:ee:a1:d6:
9c:86:0b:b7:c1:0e:f2:15:ba:7a:6c:6c:04:e6:e4:
af:ba:54:c9:f6:51:50:11:06:ec:c8:84:a1:78:03:
81:84:bd:9c:a6:a0:28:12:69:ca:0b:32:96:2c:15:
23:e1:a0:93:33:b6:d3:30:d9:a5:d5:39:cf:84:c7:
e5:63:1c:81:4d:b3:f8:38:37:92:74:2d:0f:09:e5:
c7:d3:f5:f4:46:90:07:c6:11:fe:65:46:04:41:ea:
8e:12:95:53:06:65:c1:7d:18:62:fc:7f:ec:df:68:
41:87:7e:4a:0f:b9:6d:5e:b0:c7:ea:e8:2f:32:fd:
78:ff:90:51:92:25:51:ed:d7:15:45:f2:55:59:d5:
b6:f2:26:bc:91:cb:31:86:4d:86:21:c9:57:cc:6e:
8c:d6:40:01:44:4b:cd:2c:ca:2e:2c:e4:c0:74:0d:
28:6c:9f:52:24:43:d3:57:ef:0f:95:87:85:03:ef:
e6:d2:62:21:86:6a:a5:a8:92:60:ec:88:53:cc:b8:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:75:B3:67:33:74:AC:BA:EB:75:8A:34:CD:46:71:2F:05:9E:7E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/62J1s2czdKy663WKNM1GcS8Fnn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.18.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ca:33:fb:e7:de:41:a3:28:29:1d:ab:1c:b7:fe:19:b7:fd:
45:e6:ed:b6:26:92:4c:78:f9:58:0b:56:36:1b:0c:de:c8:43:
f7:58:6d:33:0e:d8:0a:be:db:2f:fa:1a:84:2a:ee:dd:61:69:
c3:77:98:ab:f6:9a:4e:ff:b9:64:46:d0:2f:d0:e1:0e:6f:bf:
38:d9:73:58:6b:c2:b8:57:1c:69:3f:dd:8a:61:62:b4:a9:84:
1e:f1:63:32:83:34:db:6f:00:16:11:07:8f:7f:23:90:3c:19:
a8:06:13:b7:61:e1:2d:93:e8:d6:6a:e1:41:38:17:77:15:85:
ed:ae:33:3e:62:8b:ff:db:46:0a:45:8c:ae:36:f9:57:1e:5f:
a4:67:a7:5f:7f:6a:5c:05:7a:d1:44:c4:d2:ff:8c:9d:56:10:
0b:72:12:ad:7f:7f:9a:48:bc:7b:48:14:37:f6:9a:da:bc:23:
5e:ac:95:85:f3:e9:01:22:fa:56:96:fb:67:5f:82:b0:81:99:
c2:64:62:23:f8:f3:64:93:e1:42:fa:00:ce:7f:0b:f9:42:f4:
9d:b4:2d:7c:42:4c:51:22:82:12:c0:b0:58:ed:2a:7e:cd:a2:
bc:91:1b:28:f5:9e:75:48:06:6e:ff:07:6c:8d:11:ac:47:0a:
e8:f0:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:23 2025 by rpki-client