Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/RmKWaG_Rlj3skUEYAHIJ7mkQTxI.roa
File: RmKWaG_Rlj3skUEYAHIJ7mkQTxI.roa (raw, json)
Hash identifier: dc+BXdLJ2MP+h5NexZot9GBR86Mf/CXg2WckT5QZDSI=
Subject key identifier: 46:62:96:68:6F:D1:96:3D:EC:91:41:18:00:72:09:EE:69:10:4F:12
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01856DDD51391DB2E028F249DB05023599EB
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/RmKWaG_Rlj3skUEYAHIJ7mkQTxI.roa
Signing time: Sun 01 Jan 2023 15:04:58 +0000
ROA not before: Sun 01 Jan 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16074
IP address blocks: 62.112.160.0/19 maxlen: 20
62.145.32.0/19 maxlen: 24
62.145.63.0/24 maxlen: 24
62.145.62.0/24 maxlen: 24
217.115.224.0/20 maxlen: 21
192.113.0.0/16 maxlen: 24
2a01:67c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:51:39:1d:b2:e0:28:f2:49:db:05:02:35:99:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jan 1 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=466296686fd1963dec914118007209ee69104f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:9a:0a:70:42:fb:65:52:ca:57:d1:04:ae:
f8:d6:87:22:9a:a2:9e:7d:af:76:6a:e6:09:05:ff:
87:ee:4a:99:f6:52:86:2a:19:6b:8c:aa:6f:b3:41:
af:81:39:66:2e:19:08:02:e5:79:1f:a1:e7:27:7c:
f9:9e:f4:e6:84:01:ce:f1:37:a9:ad:fe:30:b5:8b:
62:69:3a:00:54:a0:11:a5:8c:46:9d:fc:c2:4b:8e:
eb:52:f9:f1:08:83:2f:5c:02:a4:cd:ba:f2:0f:c7:
e4:aa:96:8f:0f:a7:84:98:1d:36:56:9c:a7:3c:75:
da:5b:42:96:a0:54:29:9b:49:a5:f5:4e:9d:c6:3a:
5e:91:20:c7:33:8b:5f:f9:47:e5:df:00:69:0b:6e:
86:6a:9e:2e:d2:ac:c9:c1:a8:26:26:b1:5b:d2:1a:
1a:94:b8:7a:cc:a1:52:79:7e:f7:6a:ba:fc:28:3e:
0d:0a:93:dc:9a:d5:53:4f:14:78:61:b1:5c:be:e3:
6e:31:01:e0:74:dd:a5:fe:d5:c1:f9:6b:f0:ec:0d:
6e:11:11:31:34:42:4f:a5:9d:07:b7:c0:ca:d2:71:
e6:f6:ef:da:e8:96:d9:48:98:c3:6c:0f:2b:72:8c:
65:98:21:7e:e3:8c:3d:3b:20:f4:84:93:52:c5:0f:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:62:96:68:6F:D1:96:3D:EC:91:41:18:00:72:09:EE:69:10:4F:12
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/RmKWaG_Rlj3skUEYAHIJ7mkQTxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.160.0/19
62.145.32.0/19
192.113.0.0/16
217.115.224.0/20
IPv6:
2a01:67c0::/32
Signature Algorithm: sha256WithRSAEncryption
72:8c:aa:3b:f7:9b:8e:2b:d3:ff:28:03:95:91:fe:9a:48:21:
fe:4c:b8:4e:64:a9:80:f9:03:da:11:20:f7:4d:ae:b4:35:8a:
9d:c5:90:06:88:f3:a5:fb:34:1a:44:a5:63:62:74:77:61:68:
cd:fd:f8:90:fe:49:86:07:87:99:27:22:41:3a:a0:85:70:cf:
10:f5:27:eb:62:75:d4:c3:0b:e7:58:bc:c5:45:73:57:d8:10:
db:32:5a:58:5c:4c:e3:81:0e:2e:e8:65:3f:d3:2b:1b:e3:42:
c2:bf:4f:39:52:6e:6e:81:5b:9d:6c:d3:6d:36:a9:16:da:4e:
ca:7e:b9:d9:bb:a9:7b:27:b5:a1:46:4b:c7:67:f2:dd:6b:c3:
fa:3e:15:26:b6:e5:64:d9:5a:28:80:85:18:2a:f8:3d:ca:e2:
28:7b:e8:42:6e:b6:11:40:c1:89:ef:fe:24:12:3d:a8:63:9f:
30:26:3d:9c:98:c4:83:9a:5a:ef:be:2f:28:3b:f0:06:0d:17:
d9:65:3c:00:98:50:95:a5:66:55:ef:21:99:40:15:1b:c7:94:
18:ef:b7:1f:43:53:80:ef:ff:3c:08:a8:83:f5:70:a4:5a:cc:
c9:dd:ae:e8:b6:05:88:2c:d3:d4:02:55:17:ed:c4:a3:1c:a3:
f3:0a:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:30:00 2025 by rpki-client