Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/6H-EuYLvvDVSCX-qOk8IWSysFEU.roa
File: 6H-EuYLvvDVSCX-qOk8IWSysFEU.roa (raw, json)
Hash identifier: 6IjMYpGEvTbV5yELY+6+D/0WZSzWgH0qAfD/TUGmgsU=
Subject key identifier: E8:7F:84:B9:82:EF:BC:35:52:09:7F:AA:3A:4F:08:59:2C:AC:14:45
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 01856F67046D325418292742FA1A0B0FF08A
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/6H-EuYLvvDVSCX-qOk8IWSysFEU.roa
Signing time: Sun 01 Jan 2023 22:15:00 +0000
ROA not before: Sun 01 Jan 2023 22:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48492
IP address blocks: 62.201.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:04:6d:32:54:18:29:27:42:fa:1a:0b:0f:f0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jan 1 22:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e87f84b982efbc3552097faa3a4f08592cac1445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:3b:b6:19:fa:03:5f:55:8f:85:7b:99:ed:
9e:21:4e:73:68:0d:f1:bc:2d:46:54:d5:f0:fa:8c:
08:ca:3b:37:09:ed:05:b9:d7:e4:5d:aa:d1:38:46:
cb:b1:83:95:8f:af:62:39:11:1a:2c:42:19:c4:29:
7d:f9:05:33:4f:82:a0:c5:f8:0b:7d:0a:5b:99:b8:
7d:27:4c:c7:d5:a8:29:d4:79:33:f6:a3:f6:51:e6:
8d:e9:51:aa:2d:25:ec:00:6d:24:3a:7e:84:0e:11:
36:10:eb:56:12:07:12:a1:1f:3b:5a:2b:9a:90:ed:
0b:13:b5:20:70:3d:8b:81:ba:fd:15:85:5e:f6:3b:
04:1c:d0:d7:86:18:33:b2:43:fe:8c:7e:07:27:15:
7e:02:a7:95:e2:16:e6:ea:80:81:1a:95:0a:77:ae:
fb:83:e9:7c:10:10:05:49:f4:eb:ef:d4:b2:46:7a:
8a:9d:23:5e:61:89:81:e5:7c:12:a0:ae:ac:d6:b5:
76:bd:49:14:2e:e7:97:f5:7a:b5:77:37:79:f6:ca:
fb:0d:48:94:6f:54:ec:8a:20:42:e8:22:6e:c6:ee:
50:99:3f:9d:e2:f7:7c:62:d4:fb:c9:b2:71:75:04:
67:53:73:8b:9f:b7:e1:83:94:f3:b6:b2:2b:65:6a:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:84:B9:82:EF:BC:35:52:09:7F:AA:3A:4F:08:59:2C:AC:14:45
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/6H-EuYLvvDVSCX-qOk8IWSysFEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b8:4d:0c:ea:ce:38:ea:53:50:18:10:43:7c:dc:5b:70:ac:
2f:69:de:06:f6:62:01:19:a9:60:71:93:5d:a8:86:0d:33:6a:
21:31:2a:d8:7e:ad:7f:d1:96:ce:db:ab:ce:79:a7:a2:8c:b8:
6b:68:3e:b6:df:4a:74:75:bf:d2:eb:3b:79:86:2d:cd:f9:bd:
9f:0a:54:23:24:67:e6:e9:da:85:64:9f:4f:2c:a6:83:65:e9:
0a:91:e6:f4:2e:68:68:39:0f:c2:f0:e9:5c:96:e2:a5:a5:59:
1a:ed:c2:7e:03:af:96:56:29:4e:f0:0c:9a:a9:cd:3c:ab:90:
4d:a9:d8:72:f3:6e:b6:6d:8c:07:5f:86:31:cf:48:e2:d0:6d:
87:df:e1:50:cb:89:69:a7:bb:f3:8b:0b:91:ff:40:fc:0a:60:
a0:2e:50:01:f3:b9:65:7d:50:62:d7:d2:4a:e3:e7:42:9c:e9:
e9:bd:94:df:21:a5:7a:2a:d4:e0:f7:ef:71:67:fe:ef:9d:fa:
6f:f9:b5:fb:80:0f:6b:db:45:83:e5:e0:4c:5c:fb:2c:44:7f:
96:0d:43:5d:7f:16:fd:05:05:b5:44:97:c9:38:bb:db:58:6f:
d3:2d:20:06:ed:ae:1a:26:7a:3c:2f:9a:a3:77:4a:4c:34:4c:
e9:bf:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:01:18 2025 by rpki-client