Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/9kc0mjARSMVs4DT1c2MzuyfKZvQ.roa
File: 9kc0mjARSMVs4DT1c2MzuyfKZvQ.roa (raw, json)
Hash identifier: Tax7zg+P9hd368db+n006FPeV/4yrNqopRWzCXWYhMY=
Subject key identifier: F6:47:34:9A:30:11:48:C5:6C:E0:34:F5:73:63:33:BB:27:CA:66:F4
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 0189DF0473C1563DE57A72F7A1FD5482FCF3
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/9kc0mjARSMVs4DT1c2MzuyfKZvQ.roa
Signing time: Thu 10 Aug 2023 10:35:58 +0000
ROA not before: Thu 10 Aug 2023 10:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47331
IP address blocks: 62.106.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:04:73:c1:56:3d:e5:7a:72:f7:a1:fd:54:82:fc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Aug 10 10:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f647349a301148c56ce034f5736333bb27ca66f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:46:1e:6b:9c:e1:e4:4b:94:98:8d:f3:91:
96:0a:05:e6:9b:9a:a7:03:2d:73:62:09:be:75:2a:
84:89:f3:ec:54:b9:00:8b:93:86:da:e0:69:fd:1e:
77:15:2d:85:92:35:5e:72:4b:3d:f5:a1:68:8a:f1:
0c:43:7b:0c:df:cb:1e:64:ad:91:89:5e:44:02:92:
a3:ed:64:0f:63:b9:29:e3:e4:47:4e:0a:df:19:ed:
7e:53:d3:d1:22:df:59:91:d9:9c:67:71:56:81:d5:
e4:69:9e:cc:70:b9:53:20:c2:ec:f2:cd:d8:47:05:
db:40:ba:c0:b7:1b:d3:44:6b:43:93:b0:f2:c0:58:
9d:17:91:e3:4c:1d:23:20:11:39:37:45:33:37:7e:
09:a8:a1:fc:3d:13:aa:af:73:e7:de:1c:a6:1f:50:
2f:68:37:e8:50:4e:da:f8:1d:98:69:4d:32:fe:56:
61:84:43:fa:06:d1:60:cc:35:f4:53:a7:47:fd:36:
e3:e9:4e:ec:74:b0:1a:b4:e1:41:d4:5e:7e:cf:6a:
6b:be:b5:14:9e:4a:a4:5e:82:7b:0b:47:d4:03:0e:
23:ca:cd:a7:37:36:57:64:e0:fb:48:fe:1b:77:6e:
7b:af:fc:5e:a4:2b:4d:bb:dd:a4:6d:4f:73:cf:c7:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:47:34:9A:30:11:48:C5:6C:E0:34:F5:73:63:33:BB:27:CA:66:F4
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/9kc0mjARSMVs4DT1c2MzuyfKZvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9f:b2:dc:92:c7:6b:36:4a:74:3c:c4:00:a0:e3:f4:65:33:
46:8b:18:70:ad:6d:3f:ec:55:9d:49:92:6e:eb:64:a5:4d:84:
a1:a9:0e:59:5e:4b:35:c7:0d:0a:d2:81:f3:dd:7b:e5:80:37:
1b:34:c9:73:11:16:49:48:38:ab:b3:8a:e1:bc:6a:67:36:56:
4a:20:e6:17:1b:55:47:02:74:ca:c8:bd:2f:3a:60:8f:2e:d6:
c2:15:33:6c:a6:6f:47:fe:b1:01:91:ef:84:17:91:4d:0e:cd:
be:ce:58:ef:b2:bf:d0:29:a2:2d:ad:e1:29:d6:35:12:12:56:
77:03:39:27:8b:cd:94:4c:8a:00:4a:16:0b:76:f5:dc:76:02:
39:8b:b8:19:65:dc:84:97:6f:56:f4:d0:d4:be:dc:91:5a:69:
46:2d:06:fc:79:10:b6:c1:57:25:e0:66:49:0d:4b:93:b1:ab:
85:07:8c:9f:75:3f:36:6a:82:f7:cf:7c:a9:c0:1b:05:bd:6e:
86:95:50:17:59:34:84:eb:9e:37:0b:1b:f1:f2:14:4c:37:b2:
9e:d3:56:2d:4c:4d:8b:2f:60:f8:82:e4:44:50:2a:0c:99:57:
21:04:88:c5:b7:62:6f:c8:23:c3:dc:c6:f1:f9:4c:d4:1d:17:
2e:a0:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:24 2025 by rpki-client