Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7mENsuDnUCXl6ts1eTI55AD72hI.roa
File: 7mENsuDnUCXl6ts1eTI55AD72hI.roa (raw, json)
Hash identifier: tIqEW5cz8bdj4MEDRgYpCI5r+mJCoPRGpEEDo/qcrCY=
Subject key identifier: EE:61:0D:B2:E0:E7:50:25:E5:EA:DB:35:79:32:39:E4:00:FB:DA:12
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018C3398814757FD2AF36B43A2BF91817283
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7mENsuDnUCXl6ts1eTI55AD72hI.roa
Signing time: Mon 04 Dec 2023 06:51:21 +0000
ROA not before: Mon 04 Dec 2023 06:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.168.0/22 maxlen: 22
62.72.174.0/23 maxlen: 23
62.72.180.0/23 maxlen: 23
62.72.184.0/22 maxlen: 22
62.72.191.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
81.21.14.0/23 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.53.0/24 maxlen: 24
176.57.58.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.3.0/24 maxlen: 24
81.21.4.0/22 maxlen: 24
81.21.4.0/24 maxlen: 24
176.57.59.0/24 maxlen: 24
81.21.10.0/24 maxlen: 24
81.21.10.0/23 maxlen: 23
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:98:81:47:57:fd:2a:f3:6b:43:a2:bf:91:81:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 4 06:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee610db2e0e75025e5eadb35793239e400fbda12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:e8:a0:ef:62:94:ce:d9:00:81:c5:86:39:
70:61:04:9d:35:45:3b:97:5f:ac:48:c9:c8:ba:7f:
74:91:f9:8f:19:d3:81:52:26:1d:6b:8b:e8:c3:ea:
e9:06:f8:8a:56:99:2d:63:37:a3:c3:38:73:0e:55:
92:6c:1b:d7:c0:e1:77:65:0c:4d:bc:31:4c:1c:4e:
ac:af:79:97:fe:5c:2c:f7:6a:08:7c:1a:47:75:0b:
72:7b:44:99:d3:08:da:e6:5b:6f:20:e6:ec:01:a7:
3d:02:71:94:3e:29:40:37:fe:65:28:41:da:43:e9:
4a:e5:58:f6:13:23:26:89:36:90:65:dc:53:1f:22:
e4:cf:2a:98:24:42:e3:de:db:04:ba:5c:4c:9a:09:
e3:ae:15:74:fe:e9:f1:97:2b:ec:68:cf:57:7a:84:
5d:5a:6e:b7:60:fd:ce:c9:76:8b:78:38:c5:c4:3c:
36:39:79:7b:93:9e:e6:4f:a6:87:ce:da:21:a0:68:
5e:69:07:65:41:f4:97:a8:f3:60:8d:24:df:4c:fe:
01:68:12:ab:d2:93:0c:ac:4a:aa:10:ae:44:39:7f:
de:43:c9:f8:f5:a7:1d:ce:1d:24:d8:40:74:fc:1a:
69:02:06:25:ba:5e:04:89:80:14:1d:23:d6:8e:52:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:0D:B2:E0:E7:50:25:E5:EA:DB:35:79:32:39:E4:00:FB:DA:12
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/7mENsuDnUCXl6ts1eTI55AD72hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.171.255
62.72.174.0/23
62.72.180.0/23
62.72.184.0/22
62.72.189.0/24
62.72.191.0/24
81.21.2.0-81.21.7.255
81.21.10.0-81.21.15.255
176.57.51.0/24
176.57.53.0/24
176.57.58.0/23
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:14:d3:86:b4:1e:11:d8:fd:4b:25:06:95:b0:5f:63:4f:da:
ff:7e:d8:50:33:ce:68:8a:55:cc:a5:58:b4:29:80:65:39:6f:
a6:a1:5c:90:d2:ad:4f:3c:fb:81:c6:8d:bd:4f:c3:59:5f:1a:
f8:9c:6b:49:b6:f0:f6:c4:c0:dc:ef:28:58:b6:4b:c6:81:aa:
c4:30:bf:e1:e0:aa:28:86:78:66:3a:02:8f:4a:8a:c4:3e:c4:
a2:eb:33:dd:dc:4a:7c:dc:c3:85:27:c3:1b:18:25:57:b2:76:
31:b8:79:17:6b:01:9c:1f:8e:7c:5e:42:cb:58:eb:30:a1:f3:
45:0d:79:a2:11:5f:91:3d:5c:78:64:0f:56:4a:39:00:69:b3:
6b:25:a5:e0:42:24:41:c0:5e:46:3b:e0:1c:ba:14:d4:dc:d6:
2c:0e:db:a0:7e:c9:16:67:dc:31:51:dd:5d:4b:88:96:88:8a:
f7:65:ef:70:bb:a1:5a:c4:35:7f:b8:c8:f6:31:b6:7d:81:ad:
65:b4:44:f2:b2:5e:da:4c:0a:d2:ff:c6:46:4b:f9:51:95:41:
d0:80:0f:8c:66:79:7e:c9:65:d0:2d:71:ad:c0:28:42:f6:ec:
13:16:4c:87:7a:2a:78:45:63:35:38:1c:87:d4:d9:19:c6:e0:
cd:91:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:24:59 2025 by rpki-client