Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/fWR9BWfRfW1IHKBZ4lbyX7XHEoE.roa
File: fWR9BWfRfW1IHKBZ4lbyX7XHEoE.roa (raw, json)
Hash identifier: DJw5OMY0kxNjHGnJFIOzBDEVGPzJ/By2F0+n9IEFfY8=
Subject key identifier: 7D:64:7D:05:67:D1:7D:6D:48:1C:A0:59:E2:56:F2:5F:B5:C7:12:81
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01893A1CB33E40C8DA0C04C1C6C84B782EEC
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/fWR9BWfRfW1IHKBZ4lbyX7XHEoE.roa
Signing time: Sun 09 Jul 2023 10:05:06 +0000
ROA not before: Sun 09 Jul 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211421
IP address blocks: 62.60.184.0/22 maxlen: 24
62.60.180.0/22 maxlen: 24
62.60.192.0/22 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:1c:b3:3e:40:c8:da:0c:04:c1:c6:c8:4b:78:2e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 9 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d647d0567d17d6d481ca059e256f25fb5c71281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:dd:35:19:6a:1b:69:6f:eb:cb:35:93:e3:
a7:41:69:4b:4d:0e:cc:c1:c3:60:22:27:c8:91:fb:
81:3e:84:7d:d1:cc:cb:de:a0:3d:95:c0:2f:48:66:
b5:04:ff:17:19:08:df:94:4e:43:05:6c:30:07:38:
99:4f:40:52:56:35:74:90:1d:ac:9e:db:32:40:02:
8f:f9:39:e9:9c:25:5a:55:bf:cb:24:6b:63:f3:28:
94:34:65:b4:c9:c7:90:a1:68:66:c6:53:13:ba:32:
bd:03:7e:9a:7b:66:8c:c3:fe:f1:43:71:0b:ac:3e:
c8:64:2b:da:db:54:0d:8c:d6:cc:e2:99:65:6e:8c:
5d:c1:5b:81:eb:68:20:d0:27:c5:e2:84:a9:ad:45:
f5:20:8a:80:cb:ec:88:d1:29:50:0f:b4:ba:cb:dd:
69:28:51:67:3e:0b:e1:08:9f:3e:51:0a:8d:7a:25:
00:0f:21:dc:c9:4c:ac:20:8c:03:ee:2c:7b:e1:c0:
37:be:23:6c:86:f3:fd:49:61:d1:ee:89:59:24:e2:
1d:11:46:e1:12:bd:25:50:20:25:f8:06:33:eb:3f:
97:cf:35:96:a0:c9:00:29:1d:52:8a:b0:20:fa:6f:
bc:57:86:2e:dd:c1:13:44:28:b3:ea:6d:ad:5e:af:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:7D:05:67:D1:7D:6D:48:1C:A0:59:E2:56:F2:5F:B5:C7:12:81
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/fWR9BWfRfW1IHKBZ4lbyX7XHEoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.180.0-62.60.187.255
62.60.192.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:3a:98:a2:5d:f0:24:3b:1c:c8:90:b1:32:44:6a:f8:31:3f:
f7:0b:35:28:ae:cc:3f:59:28:43:ff:cb:ee:2f:f7:00:19:b5:
0f:8e:07:9c:42:89:7e:b2:05:a5:cc:f9:44:53:d3:91:22:92:
5c:f6:12:d5:b0:01:14:29:8d:7b:0d:57:c3:9b:27:ad:db:23:
ed:8b:13:70:cf:7e:7e:91:cf:15:87:42:8c:46:4e:2b:93:8a:
0f:38:bf:e1:a2:42:38:1d:1f:e8:16:8d:50:7c:a5:09:84:16:
de:2e:36:50:a1:61:c4:80:8f:c5:ef:9a:57:2e:fa:3b:99:52:
90:88:1c:4f:31:51:79:0d:0f:b3:10:b2:34:81:fb:ed:6a:75:
37:82:6a:d9:ab:45:43:7d:50:45:2b:7e:84:f8:de:f9:44:b8:
f6:f7:9b:15:64:d7:9e:52:bc:14:04:56:fa:a8:4c:c3:8f:dc:
36:bb:d4:6f:00:8f:bc:61:c6:99:52:59:36:af:b5:61:57:29:
b2:b0:f3:66:e2:d6:33:14:ca:fe:d9:8d:43:de:f5:73:b0:09:
cd:7d:fc:53:59:09:57:c1:e5:10:3c:9b:30:5b:35:5e:18:e2:
8e:c9:f7:d3:87:c8:79:f8:dc:32:59:a7:df:14:e3:c9:9f:ac:
4a:a7:7c:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:05:53 2025 by rpki-client