Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vU6nEuyUvfFqp19xiXMzDkyOAwU.roa
File: vU6nEuyUvfFqp19xiXMzDkyOAwU.roa (raw, json)
Hash identifier: IuMOkCVFFyeXsajS9dj6XzSTYj0OR9QklqQ/mKVkRwg=
Subject key identifier: BD:4E:A7:12:EC:94:BD:F1:6A:A7:5F:71:89:73:33:0E:4C:8E:03:05
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 018BAB491F253FC32702FC99B3A655C1FE09
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vU6nEuyUvfFqp19xiXMzDkyOAwU.roa
Signing time: Tue 07 Nov 2023 19:36:17 +0000
ROA not before: Tue 07 Nov 2023 19:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60660
IP address blocks: 62.113.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:49:1f:25:3f:c3:27:02:fc:99:b3:a6:55:c1:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Nov 7 19:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd4ea712ec94bdf16aa75f718973330e4c8e0305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:12:4a:d5:47:f9:15:85:5e:ef:cb:de:17:
ba:8c:26:2d:ca:5a:44:94:d3:8e:1d:ba:c4:b4:84:
95:aa:fd:d1:84:f6:de:d4:81:6f:2e:7e:19:56:d4:
fd:39:67:1e:ad:a3:08:28:b9:94:92:c3:d7:f6:3c:
a2:99:80:64:ab:5e:6e:ad:e9:ed:f2:07:8b:ec:6c:
d6:58:b7:86:f1:55:40:0c:bc:af:45:bf:57:d9:fd:
9a:00:2b:4b:88:1b:5d:8f:60:8c:c5:cd:f3:d1:e9:
22:0f:c6:ca:d5:c9:43:ee:80:2e:76:3f:b1:cc:ba:
b5:6c:d6:a1:87:4a:b8:61:d3:b2:f0:34:29:e0:f8:
6d:5a:d7:da:c6:ec:d6:3b:cf:27:4e:06:3d:4d:a5:
c0:51:c5:ac:a8:0d:ce:52:95:12:88:9d:92:4d:ad:
ba:23:77:b0:50:da:6a:0d:14:15:66:37:d7:d4:4d:
f9:6a:0f:80:ee:ef:6e:cf:c1:63:2a:e6:ff:aa:65:
c8:08:34:49:d7:d4:1e:80:03:aa:ef:02:ac:32:c9:
ab:a7:ea:a1:38:52:9c:b6:af:84:ba:6a:e0:fc:60:
23:f6:f7:ce:14:b5:c3:29:38:f3:58:75:d5:e4:5c:
be:53:d5:be:1a:44:e2:3a:0e:b1:2a:7c:16:ab:fd:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:A7:12:EC:94:BD:F1:6A:A7:5F:71:89:73:33:0E:4C:8E:03:05
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/vU6nEuyUvfFqp19xiXMzDkyOAwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.39.0/24
Signature Algorithm: sha256WithRSAEncryption
35:65:ee:19:f8:c3:c8:0f:ff:2f:15:c4:ea:e5:15:5f:fe:23:
71:75:80:93:7e:93:45:ef:94:ee:6e:0e:17:92:47:8d:59:a8:
5c:66:38:55:5a:f5:67:60:9d:fc:75:57:8e:c2:ee:a5:2b:ff:
96:8c:7f:c1:1a:6a:6c:0a:91:06:bb:8d:b8:90:42:34:ed:ae:
a9:ca:cc:27:0e:18:6f:38:57:eb:99:7e:57:23:62:f5:11:41:
5f:86:23:21:36:cb:58:e3:b7:89:48:a3:fb:9f:99:2b:08:f3:
92:43:85:a9:c1:0e:14:63:b5:d0:10:05:fc:ea:0f:7a:31:30:
73:89:92:de:80:5d:91:35:19:53:2d:86:ec:a5:35:4e:96:82:
7d:2f:e7:bd:77:45:b6:83:08:40:9e:7e:ef:82:f3:ed:0c:4a:
c5:05:e5:dd:4d:c9:a8:84:3b:ee:29:f7:f3:54:29:e5:59:bd:
4b:4f:98:a7:a9:c3:64:e7:d0:c9:d4:56:ad:47:fd:36:b0:29:
21:3e:16:d5:0e:b2:81:25:ae:3b:3a:42:79:b8:fe:7d:c4:66:
a6:45:d4:3e:f5:51:15:87:0d:d5:35:10:83:91:cc:b3:8a:08:
c7:9a:75:22:e8:14:03:c9:af:05:d4:19:44:8b:a8:d5:6b:9a:
06:0e:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:42:45 2025 by rpki-client