Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/cr4o070xBLiygcTqASuO5J1LTR0.roa
File: cr4o070xBLiygcTqASuO5J1LTR0.roa (raw, json)
Hash identifier: 8efoQKFzoJAtyCCUGAiqMuHiqlGanCmwYaZVkLaTC34=
Subject key identifier: 72:BE:28:D3:BD:31:04:B8:B2:81:C4:EA:01:2B:8E:E4:9D:4B:4D:1D
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 44902BC1
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/cr4o070xBLiygcTqASuO5J1LTR0.roa
Signing time: Sat 01 Jan 2022 03:58:39 +0000
ROA not before: Sat 01 Jan 2022 03:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49030
IP address blocks: 62.161.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150299073 (0x44902bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72be28d3bd3104b8b281c4ea012b8ee49d4b4d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d3:44:28:ff:65:8d:85:e7:c5:a8:82:bc:70:
49:37:6a:15:02:ff:53:af:73:41:d6:d8:e6:f8:4b:
92:14:2a:40:22:d4:f9:f7:09:63:a8:6f:35:d8:e7:
15:f7:f0:47:4b:f7:f0:34:d1:3c:bb:de:ca:17:dd:
dc:8d:c5:65:77:eb:b4:2b:86:02:7c:85:91:66:bc:
db:ce:5c:60:37:7f:83:43:57:f1:0c:22:72:b1:cc:
fc:de:28:68:57:65:90:79:15:2a:6b:02:0c:73:73:
1a:55:ce:f2:c3:ff:b2:a2:b4:31:96:0d:f5:b9:b6:
f6:36:eb:4f:7c:b8:90:3f:88:0d:b3:a3:aa:4c:fd:
74:ec:19:b0:8b:4e:96:13:8a:21:ac:8d:63:a5:e4:
43:a0:8c:c0:0c:04:ce:52:91:35:ac:d2:c4:97:71:
6d:c9:23:2d:f3:bf:a2:46:92:0e:5c:eb:66:dc:2b:
07:2e:f5:45:6d:21:03:70:d5:85:23:f5:9e:27:ca:
1b:aa:37:f7:b1:fa:4a:14:5d:c4:d3:3d:e3:86:74:
92:53:18:60:67:9f:a8:ac:04:d0:6d:ce:94:c9:03:
70:1e:f3:60:87:7b:a2:64:2f:c8:7e:1f:aa:b5:aa:
90:18:9e:f8:02:8b:c1:dd:03:44:ed:80:8d:ce:3f:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BE:28:D3:BD:31:04:B8:B2:81:C4:EA:01:2B:8E:E4:9D:4B:4D:1D
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/cr4o070xBLiygcTqASuO5J1LTR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.161.94.0/24
Signature Algorithm: sha256WithRSAEncryption
13:12:e8:68:2f:e7:c5:3a:ae:b4:74:69:db:31:dd:6b:b8:0d:
a8:47:25:cf:be:e3:00:e4:45:3e:bf:84:66:4f:8a:ed:57:99:
71:6f:be:b8:f1:ff:cf:0c:d8:cd:3b:56:95:10:84:1c:c6:0f:
f6:96:d4:e1:8c:17:85:46:76:84:ec:6d:e6:6a:62:c8:87:7d:
6a:4e:c3:6c:4b:7e:42:ff:97:85:25:67:ce:e3:92:e4:0f:87:
ef:89:79:d8:d4:ba:d1:86:88:01:3c:d3:65:55:6b:e3:90:e2:
d5:24:ad:41:30:64:d0:15:83:f1:d0:69:53:f6:77:de:ee:fc:
f5:36:9a:ae:2d:fa:4b:21:ef:c1:dc:70:08:3b:ff:13:ca:72:
fe:cb:91:07:f1:6d:ad:94:2f:c4:ae:05:8c:b8:88:11:19:ee:
18:f0:51:49:35:d9:a0:dd:47:51:9c:f0:2c:6a:63:f9:57:93:
7c:d3:b2:66:e2:d5:db:e4:a0:30:4e:77:00:db:e4:db:45:95:
7c:89:2d:f1:d6:cb:b3:31:61:f0:51:4f:1e:ec:23:13:c2:6f:
02:ca:4e:41:91:43:9c:c3:c4:3c:eb:86:bc:06:fe:d5:cb:35:
97:ff:c2:9b:da:13:75:91:a1:ff:c8:fc:4b:39:2a:06:9a:62:
ac:48:3b:91
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIERJArwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMB4XDTIyMDEw
MTAzNTgzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzJiZTI4ZDNiZDMx
MDRiOGIyODFjNGVhMDEyYjhlZTQ5ZDRiNGQxZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPPTRCj/ZY2F58WogrxwSTdqFQL/U69zQdbY5vhLkhQqQCLU
+fcJY6hvNdjnFffwR0v38DTRPLveyhfd3I3FZXfrtCuGAnyFkWa8285cYDd/g0NX
8QwicrHM/N4oaFdlkHkVKmsCDHNzGlXO8sP/sqK0MZYN9bm29jbrT3y4kD+IDbOj
qkz9dOwZsItOlhOKIayNY6XkQ6CMwAwEzlKRNazSxJdxbckjLfO/okaSDlzrZtwr
By71RW0hA3DVhSP1nifKG6o397H6ShRdxNM944Z0klMYYGefqKwE0G3OlMkDcB7z
YId7omQvyH4fqrWqkBie+AKLwd0DRO2Ajc4/WzsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRyvijTvTEEuLKBxOoBK47knUtNHTAfBgNVHSMEGDAWgBQ68JujO1rlgbDS
kyMkkxT3aqEFETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8x
L2NyNG8wNzB4QkxpeWdjVHFBU3VPNUoxTFRSMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
MzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlH
dzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6hXjANBgkqhkiG9w0BAQsFAAOC
AQEAExLoaC/nxTqutHRp2zHda7gNqEclz77jAORFPr+EZk+K7VeZcW++uPH/zwzY
zTtWlRCEHMYP9pbU4YwXhUZ2hOxt5mpiyId9ak7DbEt+Qv+XhSVnzuOS5A+H74l5
2NS60YaIATzTZVVr45Di1SStQTBk0BWD8dBpU/Z33u789Taari36SyHvwdxwCDv/
E8py/suRB/FtrZQvxK4FjLiIERnuGPBRSTXZoN1HUZzwLGpj+VeTfNOyZuLV2+Sg
ME53ANvk20WVfIkt8dbLszFh8FFPHuwjE8JvAspOQZFDnMPEPOuGvAb+1cs1l//C
m9oTdZGh/8j8SzkqBppirEg7kQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org