Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/3_9EYbYYfStaLrZu3m2gH-FOLvc.roa
File: 3_9EYbYYfStaLrZu3m2gH-FOLvc.roa (raw, json)
Hash identifier: PaNTabg9XGe616z+TJlHCUC/tjr8eccunonhMJZLxeo=
Subject key identifier: DF:FF:44:61:B6:18:7D:2B:5A:2E:B6:6E:DE:6D:A0:1F:E1:4E:2E:F7
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 370F92A4
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/3_9EYbYYfStaLrZu3m2gH-FOLvc.roa
Signing time: Sat 01 Jan 2022 11:55:03 +0000
ROA not before: Sat 01 Jan 2022 11:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198589
IP address blocks: 62.201.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923767460 (0x370f92a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 11:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfff4461b6187d2b5a2eb66ede6da01fe14e2ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:8d:2d:f9:21:f2:33:cb:bd:31:33:9e:80:
93:61:27:34:2d:9d:21:78:b7:ea:10:0f:6e:4f:f9:
f6:de:c1:be:37:3c:c0:3f:7b:2c:fe:b3:4d:d1:7d:
1b:03:9c:73:67:77:ba:c3:25:fd:b4:93:82:0a:92:
7c:55:88:d8:bd:76:9e:f9:48:9b:5f:fc:14:d6:a2:
97:83:a6:b5:d9:9f:f2:e9:40:f6:bc:36:03:51:c6:
7a:cb:fd:07:5a:ac:a7:48:a3:37:37:09:3b:ef:5e:
47:7b:fa:03:77:ad:54:01:2d:b3:e2:45:03:f1:d5:
0d:74:09:d9:e4:39:78:24:9d:86:3d:02:40:36:d9:
59:7f:f4:98:e6:c0:87:21:74:f8:9d:34:b0:43:b5:
2c:de:9b:39:1e:db:1d:b9:45:a1:24:55:99:dc:3c:
68:d2:f6:ac:25:c4:c6:ae:b6:06:b9:a2:3b:78:7d:
0a:99:a2:cf:a1:cd:43:2d:59:c5:48:2d:93:7a:b8:
8e:5e:1c:8b:1e:f3:98:c0:9c:e4:9a:ba:b4:da:1c:
74:03:6d:72:a4:a9:33:c7:bf:00:0e:ff:c7:e4:b9:
9d:41:33:a1:d2:3a:76:13:47:a4:4d:aa:cd:d3:6b:
81:48:20:40:c0:c4:67:aa:59:86:6b:71:d6:fd:9e:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:44:61:B6:18:7D:2B:5A:2E:B6:6E:DE:6D:A0:1F:E1:4E:2E:F7
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/3_9EYbYYfStaLrZu3m2gH-FOLvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.196.0/24
Signature Algorithm: sha256WithRSAEncryption
28:69:81:5a:6e:a9:47:b8:b5:3d:af:7d:59:a9:88:cd:d9:83:
3d:14:ce:d3:c5:1a:ad:c7:70:68:83:26:c7:f5:37:07:85:07:
ad:d1:f4:5f:65:a1:2d:b4:2a:57:07:0e:34:e9:e7:43:b5:96:
18:1d:c7:37:ff:b7:0c:cf:8f:4b:af:ba:cc:54:4b:d2:df:db:
93:b7:9d:79:5c:f5:da:b9:76:ab:b4:a4:7e:2c:53:e1:9d:c5:
00:ee:8c:15:09:22:65:b4:45:3d:2b:d1:62:11:4c:ac:62:0c:
17:0d:a8:c3:e3:a0:cf:39:55:ca:78:56:af:a2:3e:23:4c:28:
6a:58:b2:e5:f4:62:68:fc:9a:79:cb:2b:e6:23:b7:47:4f:dc:
dd:7e:13:96:9d:f3:2d:01:45:82:88:ef:69:2e:a8:d9:82:70:
91:84:f0:19:53:ad:28:0a:fc:37:00:ff:2f:2e:a8:75:4d:9c:
f5:48:c8:c6:cc:1a:15:6b:83:1a:b6:bc:21:66:ca:47:7a:35:
79:bf:cb:e4:71:a9:f2:d1:00:f6:23:74:34:ca:a5:61:c7:56:
33:34:cf:ba:13:6b:18:1e:ec:ed:1d:c3:30:17:a1:90:13:94:
17:4a:94:1a:f8:ef:0e:19:c8:c6:7c:26:ef:8b:3b:c4:e3:2b:
4c:a7:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:01:19 2025 by rpki-client