Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TsGUweaiYOt98zMw6GVzIcYzJoE.roa
File: TsGUweaiYOt98zMw6GVzIcYzJoE.roa (raw, json)
Hash identifier: P6v77d6WRZmxkGGMHv4JnsL4qXxKSP9jwd8dplqXyos=
Subject key identifier: 4E:C1:94:C1:E6:A2:60:EB:7D:F3:33:30:E8:65:73:21:C6:33:26:81
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0188FC913BF3672E77CAEE9162D91DC97136
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TsGUweaiYOt98zMw6GVzIcYzJoE.roa
Signing time: Tue 27 Jun 2023 11:15:56 +0000
ROA not before: Tue 27 Jun 2023 11:15:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/24 maxlen: 24
62.72.163.0/24 maxlen: 24
62.72.161.0/24 maxlen: 24
62.72.169.0/24 maxlen: 24
62.72.176.0/24 maxlen: 24
62.72.179.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.181.0/24 maxlen: 24
62.72.182.0/24 maxlen: 24
62.72.190.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.188.0/24 maxlen: 24
62.72.189.0/24 maxlen: 24
81.21.12.0/22 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:91:3b:f3:67:2e:77:ca:ee:91:62:d9:1d:c9:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 27 11:15:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ec194c1e6a260eb7df33330e8657321c6332681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:f2:ee:fa:a7:4a:ac:85:f2:90:92:ea:de:
14:60:d6:e3:fd:53:d9:4d:b7:38:34:62:53:7c:5e:
de:e4:a0:bb:94:ed:8b:ca:33:e5:28:45:6d:13:7f:
ba:75:47:77:44:68:0f:a2:5e:87:e4:b5:3a:04:a6:
69:03:69:1d:2b:f9:56:98:d1:14:36:64:e7:4f:4e:
88:3f:e6:19:74:fc:e1:61:d4:93:4f:bc:82:08:0c:
1d:fc:ad:b0:ad:13:04:d0:b2:a9:e2:04:81:4d:e7:
a9:b6:8d:ac:44:07:b3:41:e7:93:79:31:19:c8:79:
ae:5f:98:9f:ad:6b:93:1f:98:5b:89:d7:6f:bd:92:
75:c8:e2:c4:04:90:1d:69:1d:3f:85:1e:a8:4b:4e:
98:76:75:8e:e8:fd:49:2f:83:d3:97:b0:55:c1:1a:
ec:68:50:58:c6:5c:6e:e2:03:ce:c0:1f:62:d4:fb:
c8:6b:39:2c:07:ce:06:8d:d0:bd:6c:60:49:63:3b:
bd:d4:11:91:ee:8b:2c:5a:7f:54:11:e9:70:2d:55:
3a:66:5b:9d:40:9b:bb:98:ce:12:62:6f:d9:9b:e1:
0c:97:f8:ef:bb:82:8d:01:32:64:55:a0:59:db:73:
84:85:ff:d7:30:6f:aa:fb:07:5f:19:2b:1e:5b:69:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C1:94:C1:E6:A2:60:EB:7D:F3:33:30:E8:65:73:21:C6:33:26:81
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TsGUweaiYOt98zMw6GVzIcYzJoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.163.255
62.72.169.0/24
62.72.176.0/24
62.72.179.0/24
62.72.181.0-62.72.182.255
62.72.184.0/24
62.72.187.0-62.72.191.255
81.21.12.0/22
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
20:89:0f:c8:4e:a9:21:e5:86:c5:0c:35:bc:81:7b:dd:6e:1a:
de:8c:98:79:d5:29:00:f0:7a:cb:cd:4c:aa:f9:e2:19:04:7e:
ff:af:60:18:8e:e5:71:3c:21:5a:4a:83:3d:40:8c:e8:43:50:
d6:c8:87:c0:ae:af:51:a8:9b:38:f6:54:01:b0:cf:37:4c:bd:
de:57:fc:86:98:7c:85:e6:27:a3:74:4a:f9:37:1d:b0:5f:3c:
c8:81:bd:80:49:ee:eb:f1:b2:81:29:78:52:1c:5f:b4:71:0c:
85:d0:3a:2c:c8:b5:f7:1a:33:94:c7:11:e3:1d:30:c6:2e:ac:
59:e1:12:bb:70:a3:ed:90:14:15:db:3f:ba:ee:96:1c:2d:f8:
12:13:39:67:31:44:cd:9c:a3:70:d9:c8:75:ad:3a:2b:45:b6:
55:dc:52:3a:f6:4f:95:2d:dd:09:76:40:6e:77:f0:bd:9d:e9:
3a:21:92:a8:3b:2b:65:93:74:64:53:98:35:84:22:4a:a7:35:
5f:dd:63:a7:a9:b6:70:85:94:fc:39:bd:ff:6c:26:2c:24:4e:
04:90:fb:76:52:dc:21:26:ff:de:b8:29:3e:f4:a8:6a:b1:99:
0f:88:71:b5:7c:66:dc:72:39:02:39:07:bd:75:2a:c4:ed:41:
09:c6:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 22:42:04 2025 by rpki-client