Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gOmDaoTnPUHaguPP4LTN_r697cE.roa
File: gOmDaoTnPUHaguPP4LTN_r697cE.roa (raw, json)
Hash identifier: MlP9bgVgKZtj6hfr+Ap2tF7uFxIZ14L6lYFCACJtyw0=
Subject key identifier: 80:E9:83:6A:84:E7:3D:41:DA:82:E3:CF:E0:B4:CD:FE:BE:BD:ED:C1
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F86182A
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gOmDaoTnPUHaguPP4LTN_r697cE.roa
Signing time: Sat 01 Jan 2022 08:05:06 +0000
ROA not before: Sat 01 Jan 2022 08:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60915
IP address blocks: 62.76.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260446250 (0xf86182a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80e9836a84e73d41da82e3cfe0b4cdfebebdedc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:02:1e:ab:0e:53:05:17:60:13:d3:30:2c:
d7:16:f0:cd:c0:25:80:e9:be:e1:db:1a:76:c9:ad:
05:c8:f5:28:24:2f:7e:eb:ec:ff:a3:2f:a0:78:c8:
96:8b:e3:6e:c4:56:31:92:71:f0:1b:35:0e:2a:bf:
a5:02:73:9b:14:61:c1:8f:a3:5e:f8:54:aa:6a:93:
2e:92:29:bb:e8:91:fb:87:1f:7a:be:c2:e8:a4:13:
d6:29:f8:db:cc:dd:81:99:ee:f4:22:89:45:3a:ec:
f1:8e:4e:32:4c:57:1a:0a:83:14:76:45:e2:7f:02:
31:74:bd:71:d4:c8:0d:85:23:df:24:00:f4:ec:92:
65:d5:39:6a:04:4d:2d:fc:ed:b8:e4:a5:51:dd:dc:
e1:6a:50:a2:61:f4:8d:df:29:d1:c1:ee:fc:a4:71:
4a:8a:2c:c9:68:19:53:e2:e0:0b:27:9a:12:cf:02:
fa:94:42:a1:44:4b:c9:1d:4a:0d:44:42:dc:25:ea:
36:0c:3a:13:7f:53:5e:94:fe:01:7d:c1:d9:06:0a:
30:d0:e6:fc:5d:78:3a:32:a8:22:a0:4a:34:c9:9d:
d0:6d:09:b1:86:a2:5c:a7:67:b4:96:7f:36:f2:bb:
07:89:c9:22:23:73:1d:7d:be:a8:dc:7c:49:e8:18:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:83:6A:84:E7:3D:41:DA:82:E3:CF:E0:B4:CD:FE:BE:BD:ED:C1
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gOmDaoTnPUHaguPP4LTN_r697cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.9.0/24
Signature Algorithm: sha256WithRSAEncryption
87:70:ea:92:cc:fe:f3:15:4a:46:1a:c2:6a:f4:15:13:d3:43:
d9:8f:e1:e7:1c:44:bf:56:1c:dd:b3:4c:57:3f:56:02:1f:88:
a8:85:14:60:b8:60:e8:4d:50:41:7a:c6:68:58:70:ed:4f:9d:
3c:61:16:00:a5:46:4d:a7:7b:3d:47:33:44:80:6d:7a:4e:6f:
bd:33:40:a5:99:96:c2:8b:18:b8:0c:3e:d4:44:ce:b5:93:e8:
51:2e:11:0b:ba:45:fc:fd:b2:7d:a8:9a:77:8e:1e:59:1f:d4:
7c:30:48:86:92:aa:b4:fc:71:3a:a5:d8:08:5e:e1:de:38:6d:
f8:eb:00:d9:a0:f7:0a:18:07:13:e1:9b:7e:d8:15:ef:95:55:
d0:e0:d6:b5:aa:a0:46:0e:e4:14:67:5f:23:e1:04:63:b6:d7:
04:4b:f0:94:d0:4e:e3:91:19:c9:ad:1f:50:2a:72:f4:de:05:
ea:c7:f5:d6:9f:ae:a5:42:be:07:4d:66:2d:07:88:5f:78:9e:
d9:bb:c1:8f:15:9c:c7:62:2f:d6:47:bf:ce:b2:3e:1a:64:48:
81:e9:88:b5:89:f8:65:c2:c6:a1:16:83:ec:ce:84:63:78:0a:
a9:88:5a:85:e0:8d:c3:ee:05:ec:f5:9d:e0:5c:06:db:c1:63:
96:12:84:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED4YYKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTNhM2I1ZjUxODA4MTY4YzIxMmMwOTRhMmJhYWZmMzhlMTY0NjRhMB4XDTIyMDEw
MTA4MDUwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODBlOTgzNmE4NGU3
M2Q0MWRhODJlM2NmZTBiNGNkZmViZWJkZWRjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALt7Ah6rDlMFF2AT0zAs1xbwzcAlgOm+4dsadsmtBcj1KCQv
fuvs/6MvoHjIlovjbsRWMZJx8Bs1Diq/pQJzmxRhwY+jXvhUqmqTLpIpu+iR+4cf
er7C6KQT1in428zdgZnu9CKJRTrs8Y5OMkxXGgqDFHZF4n8CMXS9cdTIDYUj3yQA
9OySZdU5agRNLfztuOSlUd3c4WpQomH0jd8p0cHu/KRxSoosyWgZU+LgCyeaEs8C
+pRCoURLyR1KDURC3CXqNgw6E39TXpT+AX3B2QYKMNDm/F14OjKoIqBKNMmd0G0J
sYaiXKdntJZ/NvK7B4nJIiNzHX2+qNx8SegYZ1UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSA6YNqhOc9QdqC48/gtM3+vr3twTAfBgNVHSMEGDAWgBQlOjtfUYCBaMIS
wJSiuq/zjhZGSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pUbzdYMUdBZ1dqQ0VzQ1VvcnF2ODQ0V1Jrby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvOTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8x
L2dPbURhb1RuUFVIYWd1UFA0TFROX3I2OTdjRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
OTc0NzRjLTFkYzItNDYyYy1hYWRkLTllOWExZTAzNzM4ZS8xL0pUbzdYMUdBZ1dq
Q0VzQ1VvcnF2ODQ0V1Jrby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5MCTANBgkqhkiG9w0BAQsFAAOC
AQEAh3Dqksz+8xVKRhrCavQVE9ND2Y/h5xxEv1Yc3bNMVz9WAh+IqIUUYLhg6E1Q
QXrGaFhw7U+dPGEWAKVGTad7PUczRIBtek5vvTNApZmWwosYuAw+1ETOtZPoUS4R
C7pF/P2yfaiad44eWR/UfDBIhpKqtPxxOqXYCF7h3jht+OsA2aD3ChgHE+GbftgV
75VV0ODWtaqgRg7kFGdfI+EEY7bXBEvwlNBO45EZya0fUCpy9N4F6sf11p+upUK+
B01mLQeIX3ie2bvBjxWcx2Iv1ke/zrI+GmRIgemItYn4ZcLGoRaD7M6EY3gKqYha
heCNw+4F7PWd4FwG28FjlhKE7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org