Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fad-_6WyTdhAPlzsosg7uqNglGI.roa
File: fad-_6WyTdhAPlzsosg7uqNglGI.roa (raw, json)
Hash identifier: iI8xa4EI9+iDWF8MPG493IPCTDLUByfrkFt5dbHqn7I=
Subject key identifier: 7D:A7:7E:FF:A5:B2:4D:D8:40:3E:5C:EC:A2:C8:3B:BA:A3:60:94:62
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018413E2FA9DE6A1AE5E030C8153099B8493
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fad-_6WyTdhAPlzsosg7uqNglGI.roa
Signing time: Wed 26 Oct 2022 10:42:33 +0000
ROA not before: Wed 26 Oct 2022 10:42:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43197
IP address blocks: 62.89.208.0/22 maxlen: 24
62.89.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:e2:fa:9d:e6:a1:ae:5e:03:0c:81:53:09:9b:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 10:42:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7da77effa5b24dd8403e5ceca2c83bbaa3609462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:9e:ef:ba:fd:65:c5:12:63:27:ef:24:da:
92:99:c0:44:35:31:e0:82:94:77:fe:7f:8b:7b:0f:
78:19:94:f9:88:14:05:11:85:ee:1c:c5:77:5e:31:
68:76:9f:14:d2:fa:15:28:37:51:c1:b8:e3:8d:ea:
f4:be:70:62:27:a3:a1:37:45:c6:18:0e:0e:91:4f:
e8:8a:a5:85:01:80:82:4f:b7:f2:be:90:9d:f8:c4:
73:2d:ef:39:f0:5a:b5:18:be:b9:ac:42:51:af:97:
36:8c:ad:f8:a5:02:46:26:73:c6:ee:e3:b4:97:84:
cd:0f:8d:93:6f:98:fd:f7:04:b0:8f:e5:05:85:3c:
33:d8:0a:7c:ee:50:fa:04:8a:50:d4:76:cb:9c:ea:
a2:b8:cc:14:e4:97:2d:36:58:29:3f:f6:03:96:41:
d7:f7:7a:cd:3f:7d:40:9c:c0:10:7e:95:1f:74:c2:
9c:13:58:6c:74:0d:31:fa:ef:26:bf:4a:bb:c3:20:
3b:6e:1f:f9:1d:da:cd:69:31:fb:5e:64:db:ae:ce:
58:ed:6c:1e:6b:2a:48:f4:19:69:9d:2d:8f:38:95:
7f:49:18:2c:c8:c5:59:b5:e9:44:68:84:89:75:38:
0d:26:4e:e6:73:ab:d6:cb:b5:2c:fd:e9:4b:84:82:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:7E:FF:A5:B2:4D:D8:40:3E:5C:EC:A2:C8:3B:BA:A3:60:94:62
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fad-_6WyTdhAPlzsosg7uqNglGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.208.0/22
62.89.220.0/22
Signature Algorithm: sha256WithRSAEncryption
85:fc:6b:73:6f:9b:41:40:e7:1e:fa:be:42:9e:93:59:6e:08:
72:20:7b:80:69:45:63:76:06:6b:38:06:12:f6:01:30:7a:c0:
e9:d8:c6:71:90:4a:ce:60:6b:4a:81:6c:83:24:b9:fb:51:bd:
00:ef:4a:36:86:19:88:f0:c8:a4:1d:a9:1d:8c:7a:13:8d:c9:
12:b8:63:56:80:d8:35:2a:0b:7f:a2:5f:9f:ba:65:12:5a:1b:
09:28:46:18:f5:99:13:09:b8:c4:ed:ea:c8:90:14:2f:f0:bf:
35:7a:51:8b:b8:7e:2b:dd:1e:12:6c:d5:18:cf:21:f0:c5:c7:
b4:99:99:15:81:81:67:77:57:5c:01:cc:99:e1:da:bc:de:ea:
79:8d:52:f8:ac:cc:bb:50:1d:36:9e:bd:58:73:98:03:1e:d1:
29:e0:ed:8d:b8:42:0d:01:03:f1:73:e9:80:cb:40:14:cc:22:
71:b8:7c:53:3b:63:4a:6f:eb:95:ba:8c:53:2c:26:fb:b5:21:
b1:6e:40:83:88:b4:9a:59:25:4c:50:b7:33:57:ff:d3:a7:e2:
38:a5:45:0c:aa:83:81:d3:1b:fc:73:d3:64:02:9a:2e:ef:c9:
84:cc:bf:81:33:61:40:18:10:fd:8b:5c:a1:0a:4b:ca:6b:d9:
e2:f3:45:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQT4vqd5qGuXgMMgVMJm4STMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI2MTA0MjMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGE3N2VmZmE1YjI0ZGQ4NDAzZTVjZWNhMmM4M2JiYWEzNjA5NDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijee77r9ZcUSYyfvJNqSmcBENTHg
gpR3/n+Lew94GZT5iBQFEYXuHMV3XjFodp8U0voVKDdRwbjjjer0vnBiJ6OhN0XG
GA4OkU/oiqWFAYCCT7fyvpCd+MRzLe858Fq1GL65rEJRr5c2jK34pQJGJnPG7uO0
l4TND42Tb5j99wSwj+UFhTwz2Ap87lD6BIpQ1HbLnOqiuMwU5JctNlgpP/YDlkHX
93rNP31AnMAQfpUfdMKcE1hsdA0x+u8mv0q7wyA7bh/5HdrNaTH7XmTbrs5Y7Wwe
aypI9BlpnS2POJV/SRgsyMVZtelEaISJdTgNJk7mc6vWy7Us/elLhIJB5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH2nfv+lsk3YQD5c7KLIO7qjYJRiMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvZmFkLV82V3lUZGhBUGx6c29zZzd1cU5nbEdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPlnQAwQC
PlncMA0GCSqGSIb3DQEBCwUAA4IBAQCF/Gtzb5tBQOce+r5CnpNZbghyIHuAaUVj
dgZrOAYS9gEwesDp2MZxkErOYGtKgWyDJLn7Ub0A70o2hhmI8MikHakdjHoTjckS
uGNWgNg1Kgt/ol+fumUSWhsJKEYY9ZkTCbjE7erIkBQv8L81elGLuH4r3R4SbNUY
zyHwxce0mZkVgYFnd1dcAcyZ4dq83up5jVL4rMy7UB02nr1Yc5gDHtEp4O2NuEIN
AQPxc+mAy0AUzCJxuHxTO2NKb+uVuoxTLCb7tSGxbkCDiLSaWSVMULczV//Tp+I4
pUUMqoOB0xv8c9NkApou78mEzL+BM2FAGBD9i1yhCkvKa9ni80Vg
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:50 2025 by rpki-client