Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/BiytFCDKMPt9JYVmuPtAYa4Ugk0.roa
File: BiytFCDKMPt9JYVmuPtAYa4Ugk0.roa (raw, json)
Hash identifier: cgM+7P2XIZ+thH2YbOSYg9hizBc4hoUHnIMPKFbj7NA=
Subject key identifier: 06:2C:AD:14:20:CA:30:FB:7D:25:85:66:B8:FB:40:61:AE:14:82:4D
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 0185724C651921541CE9E9F250B83EADC289
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/BiytFCDKMPt9JYVmuPtAYa4Ugk0.roa
Signing time: Mon 02 Jan 2023 11:44:47 +0000
ROA not before: Mon 02 Jan 2023 11:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34139
IP address blocks: 62.140.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:65:19:21:54:1c:e9:e9:f2:50:b8:3e:ad:c2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 2 11:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=062cad1420ca30fb7d258566b8fb4061ae14824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:19:cf:6b:f5:50:af:15:2c:98:61:04:5a:
a4:fc:a4:ea:4a:c7:ce:f5:fe:51:33:87:88:3a:e6:
a1:f3:4b:ff:ea:d2:c8:78:59:31:3e:03:8d:0d:aa:
f2:b2:f4:cf:29:ac:e5:a4:bd:91:05:5b:14:14:5f:
1c:85:d0:6e:d5:33:49:5b:48:7d:9c:47:0e:45:f0:
e4:21:fc:33:13:fd:da:2e:f3:3b:af:0a:f9:95:15:
07:1b:ff:fd:20:8e:89:d0:2c:61:5b:1c:43:e8:01:
c1:3c:b4:52:10:97:41:51:ab:00:1f:4e:ed:cb:56:
8f:c9:e3:4a:c6:df:dd:7c:f1:09:94:8e:b5:88:20:
5f:99:5c:c5:88:9a:1a:89:d7:bc:c9:10:fa:34:14:
c7:ec:d0:aa:8e:b9:de:a3:b3:5e:7a:62:e4:65:0d:
49:99:fc:16:90:cb:1f:3b:18:1e:40:e2:d3:91:91:
f5:b9:b0:9d:1d:51:5f:ec:81:a7:d8:3f:2a:a1:0c:
c2:3c:f6:f9:ad:44:13:db:18:05:d4:99:8d:cb:99:
ad:71:c1:8b:ab:21:04:8c:35:ef:fd:8e:6d:87:82:
72:d7:08:bf:25:a5:39:9f:74:59:a2:f3:f0:1c:a3:
9e:c3:d7:f0:14:5c:29:bf:4d:39:77:8f:5c:a3:d3:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2C:AD:14:20:CA:30:FB:7D:25:85:66:B8:FB:40:61:AE:14:82:4D
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/BiytFCDKMPt9JYVmuPtAYa4Ugk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a6:32:6e:b4:08:7a:33:72:7c:b4:f2:50:56:02:cf:03:6a:
1b:77:f8:50:1c:aa:a0:c9:75:b9:23:12:fb:03:db:45:3d:d1:
b3:c0:4a:39:3a:bf:5e:2d:e6:13:bb:d8:d4:7d:7c:e7:3d:51:
d1:f7:d1:71:53:5a:c7:22:ab:eb:7e:e1:8c:5a:67:2f:c8:ff:
eb:84:b4:17:89:45:0a:31:b8:0b:f3:53:7d:5f:91:1d:4d:d7:
63:3a:9e:f6:c3:4f:f3:1c:0e:1e:fa:ec:2a:2c:e0:ab:cc:55:
65:75:45:9c:f3:32:6d:34:14:8d:a5:d6:bf:d2:0e:f9:1b:37:
0b:a2:a3:ff:b2:10:47:6f:ff:8e:b1:6f:b1:4e:75:ad:69:70:
53:d9:8f:c9:9b:24:0a:c7:e1:83:91:d5:5f:ab:9c:ac:ce:0a:
7a:d2:2a:ac:62:ce:c6:02:1b:0f:08:ec:c0:0c:47:32:92:a0:
0e:07:2c:9b:93:05:3a:8d:38:e2:28:6a:47:fc:df:9d:04:a5:
bb:e5:22:63:89:ed:d9:a0:c8:92:ad:a7:0f:df:33:49:db:78:
2d:5b:f7:d6:18:5d:63:79:45:14:2d:e7:41:22:40:03:0c:9e:
10:f0:61:99:e9:6a:9d:3a:c0:57:c3:16:85:b0:f6:a9:8a:ec:
ef:c8:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:27:50 2025 by rpki-client