Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n4JsEr09M2A5lAix-9i5JddiRBc.roa
File: n4JsEr09M2A5lAix-9i5JddiRBc.roa (raw, json)
Hash identifier: SJIeEYqiLzdt984ynofck4nSVBtYOMeyFjwjG41fDIg=
Subject key identifier: 9F:82:6C:12:BD:3D:33:60:39:94:08:B1:FB:D8:B9:25:D7:62:44:17
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F67E0BE631C6BECFE4818A6E2671
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n4JsEr09M2A5lAix-9i5JddiRBc.roa
Signing time: Sun 01 Jan 2023 19:35:28 +0000
ROA not before: Sun 01 Jan 2023 19:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200823
IP address blocks: 62.89.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f6:7e:0b:e6:31:c6:be:cf:e4:81:8a:6e:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f826c12bd3d3360399408b1fbd8b925d7624417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:67:cc:bf:ef:b0:08:be:28:48:4f:e7:73:
25:eb:c4:d0:4f:97:40:67:6b:48:2a:eb:fc:b8:a9:
04:90:d1:56:40:bd:ab:39:11:df:3b:0c:dc:36:bf:
42:87:2a:b0:f4:04:2e:e8:f0:cb:46:16:47:de:2f:
3e:65:5b:2f:6c:6a:5e:fa:a7:d2:0b:03:4d:3e:00:
81:61:58:2a:ef:78:57:43:5d:07:a9:33:53:b1:77:
71:10:49:ee:52:a7:9d:44:7e:cd:6d:94:b4:8f:1f:
22:a3:2e:0d:be:46:77:7d:52:2b:9b:b6:cc:1c:8f:
5b:34:a9:b6:47:68:62:e6:24:be:86:d1:cb:02:be:
c7:63:bf:04:6c:cc:73:28:5f:8b:b9:bc:29:96:c5:
fc:71:36:32:64:dd:ec:c1:50:f3:a7:a9:5b:35:1b:
b7:89:2b:20:20:53:0c:ff:78:98:3e:35:77:59:be:
55:d0:0f:be:13:3c:87:bc:3b:50:40:3d:4a:67:aa:
91:54:1d:47:ed:47:51:2b:54:62:99:01:88:2a:c5:
73:36:d9:13:b4:27:78:45:ae:57:64:bf:7e:34:7f:
2f:8f:77:46:36:fe:79:aa:8e:d9:a3:e6:53:1d:86:
ff:8e:74:ba:e8:59:0c:ff:9d:95:3b:f5:39:1f:2e:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:82:6C:12:BD:3D:33:60:39:94:08:B1:FB:D8:B9:25:D7:62:44:17
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/n4JsEr09M2A5lAix-9i5JddiRBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e8:8a:a1:b2:3f:99:c8:c7:9a:1f:4d:45:54:3e:be:2f:8d:
6f:a8:29:d6:10:02:0b:99:57:49:52:17:56:51:34:e0:bc:3c:
42:7f:a8:c6:78:62:00:a7:ea:27:f6:8c:56:b2:a6:f5:ad:a4:
ef:e2:f2:d9:5f:40:98:27:78:20:1c:91:a8:07:e8:c7:8e:d9:
f1:71:af:f4:76:68:9a:03:e8:41:f8:aa:bf:76:b6:15:e6:dc:
dc:7e:99:87:db:11:4d:3d:40:f1:4e:ff:20:bc:60:3e:5d:ec:
eb:0f:0c:8d:51:f5:67:9b:ad:a0:0d:a0:86:88:92:d0:51:5c:
50:f1:41:83:b4:b8:4b:10:f9:91:e0:f1:65:bf:e7:24:2c:d7:
d9:bf:45:1b:e1:43:a9:a0:43:7c:1a:dc:32:5e:c4:c8:bd:ce:
01:ab:9a:1e:18:a9:ad:6e:bd:6a:66:51:4f:f5:66:47:84:18:
7a:f9:c7:97:ee:b0:39:eb:b1:9c:5e:bf:8c:a5:95:a0:92:73:
99:96:11:e8:e4:94:b3:50:62:8f:75:8f:10:96:25:75:da:4c:
e8:d4:92:50:bb:41:1e:a7:24:1d:8d:c4:2a:7b:8b:f2:ad:2d:
55:65:2a:73:21:d9:b9:9d:cd:f6:b9:ca:d6:1f:ce:c7:28:4c:
5d:b8:2c:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1PZ+C+Yxxr7P5IGKbiZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjgyNmMxMmJkM2QzMzYwMzk5NDA4YjFmYmQ4YjkyNWQ3NjI0NDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSNnzL/vsAi+KEhP53Ml68TQT5dA
Z2tIKuv8uKkEkNFWQL2rORHfOwzcNr9Chyqw9AQu6PDLRhZH3i8+ZVsvbGpe+qfS
CwNNPgCBYVgq73hXQ10HqTNTsXdxEEnuUqedRH7NbZS0jx8ioy4NvkZ3fVIrm7bM
HI9bNKm2R2hi5iS+htHLAr7HY78EbMxzKF+LubwplsX8cTYyZN3swVDzp6lbNRu3
iSsgIFMM/3iYPjV3Wb5V0A++EzyHvDtQQD1KZ6qRVB1H7UdRK1RimQGIKsVzNtkT
tCd4Ra5XZL9+NH8vj3dGNv55qo7Zo+ZTHYb/jnS66FkM/52VO/U5Hy5okQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+CbBK9PTNgOZQIsfvYuSXXYkQXMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvbjRKc0VyMDlNMkE1bEFpeC05aTVKZGRpUkJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnAMA0G
CSqGSIb3DQEBCwUAA4IBAQBK6Iqhsj+ZyMeaH01FVD6+L41vqCnWEAILmVdJUhdW
UTTgvDxCf6jGeGIAp+on9oxWsqb1raTv4vLZX0CYJ3ggHJGoB+jHjtnxca/0dmia
A+hB+Kq/drYV5tzcfpmH2xFNPUDxTv8gvGA+XezrDwyNUfVnm62gDaCGiJLQUVxQ
8UGDtLhLEPmR4PFlv+ckLNfZv0Ub4UOpoEN8GtwyXsTIvc4Bq5oeGKmtbr1qZlFP
9WZHhBh6+ceX7rA567GcXr+MpZWgknOZlhHo5JSzUGKPdY8QliV12kzo1JJQu0Ee
pyQdjcQqe4vyrS1VZSpzIdm5nc32ucrWH87HKExduCxZ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:52 2025 by rpki-client